sonatype-nexus3 Helm chart
simcubeScored 14 Sept 2026
Helm chart for Sonatype Nexus 3 OSS.
Latest 1.0.1 3 years agoapp version 3.58.1 0Artifact Hub
sonatype-nexus3 1.0.1 deploys 2 container images: library/alpine and sonatype/nexus3. Across them, 276 findings — 11 critical, 9 high — 4 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 1.28.4, fixed in 3.2.2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 3 | 0046 | 149 |
| sonatype/ | 3.58.1 | 11983163 | 4,797 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
276 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | RHSA-2024:0114 | python3 | 0:3.6.8-56.el8_9.2 |
| Medium | RHSA-2026:20611 | gnutls | 0:3.6.16-8.el8_10.6 |
| Medium | RHSA-2026:30850 | gnutls | 0:3.6.16-7.el8_8.4 |
| Medium | RHSA-2026:30850 | libtasn1 | 0:4.13-4.el8_8.1 |
| Medium | RHSA-2024:6989 | expat | 0:2.2.5-15.el8_10 |
| Medium | RHSA-2024:4264 | openldap | 0:2.4.46-19.el8_10 |
| Medium | RHSA-2024:0627 | gnutls | 0:3.6.16-8.el8_9.1 |
| Medium | RHSA-2024:8922 | bzip2 | 0:1.0.6-27.el8_10 |
| Medium | RHSA-2025:10128 | python3 | 0:3.6.8-70.el8_10 |
| Medium | RHSA-2025:10602 | python3 | 0:3.6.8-51.el8_8.10 |
| Medium | RHSA-2025:2507 | libxml2 | 0:2.9.7-16.el8_8.7 |
| Medium | RHSA-2025:2686 | libxml2 | 0:2.9.7-19.el8_10 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | RHSA-2025:10862 | java-1.8.0-openjdk | 1:1.8.0.462.b08-2.el8 |
| Medium | RHSA-2024:3303 | libxml2 | 0:2.9.7-16.el8_8.4 |
| Medium | GHSA-4pc7-vqv5-5r3v | keycloak-saml-core | 18.0.0 |
| Medium | RHSA-2024:3344 | glibc | 0:2.28-251.el8_10.2 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | GHSA-78wr-2p64-hpwj | commons-io | 2.14.0 |
| Medium | RHSA-2025:3913 | expat | 0:2.2.5-17.el8_10 |
| Medium | RHSA-2025:11036 | python-setuptools | 0:39.2.0-9.el8_10 |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | RHSA-2023:7165 | cups | 1:2.2.6-54.el8_9 |
| Medium | RHSA-2024:1409 | cups | 1:2.2.6-51.el8_8.3 |
| Medium | RHSA-2026:8534 | libarchive | 0:3.3.3-7.el8_10 |
| Medium | RHSA-2026:9026 | libarchive | 0:3.3.3-5.el8_8.2 |
| Medium | GHSA-2cqf-6xv9-f22w | elasticsearch | 7.17.13 |
| Medium | GHSA-cj8j-37rh-8475 | bcpg-jdk15to18 | 1.84 |
| Medium | RHSA-2024:4563 | java-1.8.0-openjdk | 1:1.8.0.422.b05-2.el8 |
| Medium | RHSA-2023:5997 | python3 | 0:3.6.8-51.el8_8.2 |
| Medium | RHSA-2025:15702 | cups | 1:2.2.6-63.el8_10 |
| Medium | RHSA-2026:5588 | python3 | 0:3.6.8-74.el8_10 |
| Medium | RHSA-2024:0253 | sqlite | 0:3.26.0-19.el8_9 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | RHSA-2026:9683 | java-1.8.0-openjdk | 1:1.8.0.492.b09-1.el8 |
| Medium | RHSA-2026:29898 | libpng | 2:1.6.34-11.el8_10 |
| Medium | RHSA-2023:5249 | ncurses | 0:6.1-9.20180224.el8_8.1 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | RHSA-2025:11327 | glib2 | 0:2.56.4-166.el8_10 |
| Medium | RHSA-2025:14989 | glib2 | 0:2.56.4-162.el8_8 |
| Medium | RHBA-2024:5736 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 |
| Medium | RHSA-2024:0265 | java-1.8.0-openjdk | 1:1.8.0.402.b06-2.el8 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | RHSA-2024:8117 | java-1.8.0-openjdk | 1:1.8.0.432.b06-2.el8 |
| Medium | GHSA-3393-hvrj-w7v3 | elasticsearch | 6.8.17 |
| Medium | RHSA-2026:26354 | libxml2 | 0:2.9.7-21.el8_10.5 |
| Medium | RHSA-2026:41948 | javapackages-tools | 0:5.3.0-2.module+el8.10.0+23274+27840b45 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/simcube/sonatype-nexus3)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.