sonatype-nexus3 Helm chart

Name: sonatype-nexus3 Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

simcube

Scored 14 Sept 2026

Helm chart for Sonatype Nexus 3 OSS.

Latest 1.0.1 3 years agoapp version 3.58.1 0Artifact Hub

sonatype-nexus3 1.0.1 deploys 2 container images: library/alpine and sonatype/nexus3. Across them, 276 findings — 11 critical, 9 high — 4 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 1.28.4, fixed in 3.2.2.

Radar Score

4,94611987169

276 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/alpine	3	0046	149
sonatype/nexus3	3.58.1	11983163	4,797

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

276 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-f58c-gq56-vjjf	tika-core@1.28.4	3.2.2
Critical	GHSA-45hx-wfhj-473x	h2@1.4.200	2.1.210
Critical	RHSA-2024:2722	glibc@2.28-225.el8	0:2.28-236.el8_9.13
Critical	RHSA-2024:3312	glibc@2.28-225.el8	0:2.28-225.el8_8.11
Critical	GHSA-h376-j262-vhq6	h2@1.4.200	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.33	2.0
Critical	RHSA-2025:3386KEV	freetype@2.9.1-9.el8	0:2.9.1-10.el8_8
Critical	RHSA-2023:5455KEV	glibc@2.28-225.el8	0:2.28-225.el8_8.6
Critical	RHSA-2023:5837KEV	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-5.el8_8
Critical	GHSA-vv7r-c36w-3prj	commons-fileupload@1.5	1.6.0
Critical	RHSA-2025:12010	sqlite@3.26.0-18.el8_8	0:3.26.0-20.el8_10
High	RHSA-2025:0083	cups@1:2.2.6-51.el8	1:2.2.6-62.el8_10
High	RHSA-2025:1301KEV	gcc@8.5.0-18.el8	0:8.5.0-23.el8_10
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	RHSA-2024:0625	libssh@0.9.6-10.el8_8	0:0.9.6-13.el8_8
High	RHSA-2024:5654	curl@7.61.1-30.el8_8.2	0:7.61.1-34.el8_10.2
High	RHSA-2024:3701	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-5.el8_8.1
High	RHSA-2024:8792	krb5@1.18.2-25.el8_8	0:1.18.2-26.el8_8.3
High	RHSA-2025:21776	expat@2.2.5-11.el8	0:2.5.0-1.el8_10
High	RHSA-2025:22607	expat@2.2.5-11.el8	0:2.2.10-1.el8_8
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.6.0	42.6.1
Medium	RHSA-2023:7151	python3@3.6.8-51.el8_8.1	0:3.6.8-56.el8_9
Medium	RHSA-2023:7176	python-pip@9.0.3-22.el8	0:9.0.3-23.el8
Medium	GHSA-pmhc-2g4f-85cg	shiro-web@1.10.0	1.12.0
Medium	RHSA-2026:26275	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-16.el8_6
Medium	GHSA-7rpj-hg47-cx62	h2@1.4.200	2.0.202
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.6.0	42.7.11
Medium	RHSA-2023:7877	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-12.el8_9
Medium	GHSA-cx63-2mw6-8hw5	setuptools@39.2.0	70.0.0
Medium	RHSA-2024:5000	python-setuptools@39.2.0-7.el8	0:39.2.0-7.el8_8.1
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	RHSA-2024:7847	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_6
Medium	GHSA-fj32-6v7m-57pg	elasticsearch@2.4.3	5.6.15
Medium	RHSA-2025:10698	libxml2@2.9.7-16.el8	0:2.9.7-21.el8_10.1
Medium	RHSA-2025:12239	libxml2@2.9.7-16.el8	0:2.9.7-16.el8_8.9
Medium	GHSA-r9hx-vwmv-q579	setuptools@39.2.0	65.5.1
Medium	RHSA-2024:0586	python3@3.6.8-51.el8_8.1	0:3.6.8-51.el8_8.4
Medium	PYSEC-2025-49	setuptools@39.2.0	78.1.1
Medium	RHSA-2024:0154	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-12.el8_8
Medium	RHSA-2024:6975	python3@3.6.8-51.el8_8.1	0:3.6.8-67.el8_10
Medium	GHSA-xgfv-xpx8-qhcr	keycloak-saml-core@12.0.3	22.0.13
Medium	RHSA-2024:1601	curl@7.61.1-30.el8_8.2	0:7.61.1-33.el8_9.5
Medium	RHSA-2024:1412	gmp@1:6.1.2-10.el8	1:6.1.2-11.el8_8.1
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-p93r-85wp-75v3	bcprov-jdk15to18@1.75	1.80.2
Medium	GHSA-hfq9-hggm-c56q	xstream@1.4.20	1.4.21
Medium	RHSA-2024:4743	krb5@1.18.2-25.el8_8	0:1.18.2-26.el8_8.2
Medium	RHSA-2024:5312	krb5@1.18.2-25.el8_8	0:1.18.2-29.el8_10
Medium	RHSA-2024:1615	expat@2.2.5-11.el8	0:2.2.5-11.el8_9.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.1latest	3 years ago	3.58.1	11987169	4,946

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/simcube/sonatype-nexus3.svg)](https://charts.stackradar.io/charts/simcube/sonatype-nexus3)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.