mongosync 0.4.0 Helm chart
sinextraVerified publisherScored 14 Sept 2026
Mongo Cluster-to-Cluster Sync
Version 0.4.0 1 year agoapp version 1.15.0 0Artifact Hub
mongosync 0.4.0 deploys 1 container image: ghcr.io/sergelogvinov/mongosync. Across them, 291 findings — 0 critical, 1 high. The highest contribution is UBUNTU-CVE-2025-15467 in openssl 3.0.13-0ubuntu3.5, fixed in 3.0.13-0ubuntu3.7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 1.15.0 | 0136254 | 2,815 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
254 distinct across the version’s images
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-40164 | jq | 1.7.1-3ubuntu0.24.04.2 |
| Low | UBUNTU-CVE-2026-6791 | glibc | 2.39-0ubuntu8.9 |
| Low | UBUNTU-CVE-2026-8458 | curl | 8.5.0-2ubuntu10.10 |
| Low | UBUNTU-CVE-2026-6253 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-4437 | glibc | 2.39-0ubuntu8.8 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | UBUNTU-CVE-2026-9547 | curl | 8.5.0-2ubuntu10.10 |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-40355 | krb5 | 1.20.1-6ubuntu2.7 |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-6276 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-40356 | krb5 | 1.20.1-6ubuntu2.7 |
| Low | UBUNTU-CVE-2016-2781 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-42767 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2026-5545 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-48962 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-3784 | curl | 8.5.0-2ubuntu10.8 |
| Low | UBUNTU-CVE-2025-14819 | curl | 8.5.0-2ubuntu10.7 |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | GHSA-hfvc-g4fc-pqhx | go.opentelemetry.io/ | 1.43.0 |
| Low | UBUNTU-CVE-2026-63074 | openssl | 3.0.13-0ubuntu3.15 |
| Low | UBUNTU-CVE-2025-14524 | curl | 8.5.0-2ubuntu10.7 |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.8.3-1.1ubuntu3.5 |
| Low | UBUNTU-CVE-2026-6238 | glibc | 2.39-0ubuntu8.8 |
| Low | UBUNTU-CVE-2026-3731 | libssh | 0.10.6-2ubuntu0.4 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2026-5435 | glibc | 2.39-0ubuntu8.8 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | UBUNTU-CVE-2026-7017 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | UBUNTU-CVE-2025-15079 | curl | 8.5.0-2ubuntu10.7 |
| Low | UBUNTU-CVE-2026-6429 | curl | 8.5.0-2ubuntu10.9 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2026-22796 | openssl | 3.0.13-0ubuntu3.7 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2025-10148 | curl | 8.5.0-2ubuntu10.7 |
| Low | UBUNTU-CVE-2026-1965 | curl | 8.5.0-2ubuntu10.8 |
| Low | UBUNTU-CVE-2025-68973 | gnupg2 | 2.4.4-2ubuntu17.4 |
| Low | UBUNTU-CVE-2026-7168 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-59847 | libssh | 0.10.6-2ubuntu0.5 |
| Low | UBUNTU-CVE-2026-3783 | curl | 8.5.0-2ubuntu10.8 |
| Low | UBUNTU-CVE-2026-4873 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-34743 | xz-utils | 5.6.1+really5.4.5-1ubuntu0.3 |
| Low | UBUNTU-CVE-2026-54411 | pam | 1.5.3-5ubuntu5.6 |
| Low | GHSA-cp6g-7hqx-qxhp | go.mongodb.org/ | 2.4.2 |
| Low | UBUNTU-CVE-2026-19487 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-4878 | libcap2 | 1:2.66-5ubuntu2.4 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/sinextra/mongosync)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.