StackRadar

sonatype-nexus3 1.0.1 Helm chart

simcube

Scored 14 Sept 2026

Helm chart for Sonatype Nexus 3 OSS.

Version 1.0.1 3 years agoapp version 3.58.1 0Artifact Hub

sonatype-nexus3 1.0.1 deploys 2 container images: library/alpine and sonatype/nexus3. Across them, 276 findings11 critical, 9 high 4 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 1.28.4, fixed in 3.2.2.

Radar Score

4,94611987169

276 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/alpine30046149
sonatype/nexus33.58.1119831634,797

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

87 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumRHSA-2025:11035lz4@1.8.3-3.el8_40:1.8.3-5.el8_10
MediumGHSA-24rp-q3w6-vc56postgresql@42.6.042.6.1
MediumRHSA-2023:7151python3@3.6.8-51.el8_8.10:3.6.8-56.el8_9
MediumRHSA-2023:7176python-pip@9.0.3-22.el80:9.0.3-23.el8
MediumGHSA-pmhc-2g4f-85cgshiro-web@1.10.01.12.0
MediumRHSA-2026:26275openssl@1:1.1.1k-9.el8_71:1.1.1k-16.el8_6
MediumGHSA-7rpj-hg47-cx62h2@1.4.2002.0.202
MediumGHSA-98qh-xjc8-98pqpostgresql@42.6.042.7.11
MediumRHSA-2023:7877openssl@1:1.1.1k-9.el8_71:1.1.1k-12.el8_9
MediumGHSA-cx63-2mw6-8hw5setuptools@39.2.070.0.0
MediumRHSA-2024:5000python-setuptools@39.2.0-7.el80:39.2.0-7.el8_8.1
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.9.41.11.0
MediumRHSA-2024:7847openssl@1:1.1.1k-9.el8_71:1.1.1k-14.el8_6
MediumGHSA-fj32-6v7m-57pgelasticsearch@2.4.35.6.15
MediumRHSA-2025:10698libxml2@2.9.7-16.el80:2.9.7-21.el8_10.1
MediumRHSA-2025:12239libxml2@2.9.7-16.el80:2.9.7-16.el8_8.9
MediumGHSA-r9hx-vwmv-q579setuptools@39.2.065.5.1
MediumRHSA-2024:0586python3@3.6.8-51.el8_8.10:3.6.8-51.el8_8.4
MediumPYSEC-2025-49setuptools@39.2.078.1.1
MediumRHSA-2024:0154openssl@1:1.1.1k-9.el8_71:1.1.1k-12.el8_8
MediumRHSA-2024:6975python3@3.6.8-51.el8_8.10:3.6.8-67.el8_10
MediumGHSA-xgfv-xpx8-qhcrkeycloak-saml-core@12.0.322.0.13
MediumRHSA-2024:1601curl@7.61.1-30.el8_8.20:7.61.1-33.el8_9.5
MediumRHSA-2024:1412gmp@1:6.1.2-10.el81:6.1.2-11.el8_8.1
MediumALPINE-CVE-2026-63073openssl@3.5.7-r03.5.8-r0
MediumGHSA-p93r-85wp-75v3bcprov-jdk15to18@1.751.80.2
MediumGHSA-hfq9-hggm-c56qxstream@1.4.201.4.21
MediumRHSA-2024:4743krb5@1.18.2-25.el8_80:1.18.2-26.el8_8.2
MediumRHSA-2024:5312krb5@1.18.2-25.el8_80:1.18.2-29.el8_10
MediumRHSA-2024:1615expat@2.2.5-11.el80:2.2.5-11.el8_9.1
MediumRHSA-2024:0114python3@3.6.8-51.el8_8.10:3.6.8-56.el8_9.2
MediumRHSA-2026:20611gnutls@3.6.16-6.el8_70:3.6.16-8.el8_10.6
MediumRHSA-2026:30850libtasn1@4.13-4.el8_70:4.13-4.el8_8.1
MediumRHSA-2026:30850gnutls@3.6.16-6.el8_70:3.6.16-7.el8_8.4
MediumRHSA-2024:6989expat@2.2.5-11.el80:2.2.5-15.el8_10
MediumRHSA-2024:4264openldap@2.4.46-18.el80:2.4.46-19.el8_10
MediumRHSA-2024:0627gnutls@3.6.16-6.el8_70:3.6.16-8.el8_9.1
MediumRHSA-2024:8922bzip2@1.0.6-26.el80:1.0.6-27.el8_10
MediumRHSA-2025:10128python3@3.6.8-51.el8_8.10:3.6.8-70.el8_10
MediumRHSA-2025:10602python3@3.6.8-51.el8_8.10:3.6.8-51.el8_8.10
MediumRHSA-2025:2507libxml2@2.9.7-16.el80:2.9.7-16.el8_8.7
MediumRHSA-2025:2686libxml2@2.9.7-16.el80:2.9.7-19.el8_10
MediumALPINE-CVE-2026-18798openssl@3.5.7-r03.5.8-r0
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.12.03.18.0
MediumRHSA-2025:10862java-1.8.0-openjdk@1:1.8.0.382.b05-2.el81:1.8.0.462.b08-2.el8
MediumRHSA-2024:3303libxml2@2.9.7-16.el80:2.9.7-16.el8_8.4
MediumGHSA-4pc7-vqv5-5r3vkeycloak-saml-core@12.0.318.0.0
MediumRHSA-2024:3344glibc@2.28-225.el80:2.28-251.el8_10.2
MediumALPINE-CVE-2026-63076openssl@3.5.7-r03.5.8-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latest3 years ago3.58.1119871694,946

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/simcube/sonatype-nexus3.svg)](https://charts.stackradar.io/charts/simcube/sonatype-nexus3)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.