StackRadar

hive-metastore Helm chart

slamdev

Scored 14 Sept 2026

Helm chart to deploy [hive-metastore](https://hive.apache.org/).

Latest 0.0.5 4 years agoapp version 2.3.9-2.10.1 2Artifact Hub

hive-metastore 0.0.5 deploys 2 container images: tempire/alpine-perl and slamdev/apache-hive. Across them, 286 findings — 12 critical, 47 high — 3 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.6.2, fixed in 2.12.2.

Radar Score

8,198124715572

286 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
tempire/alpine-perl3.14.00851598
slamdev/apache-hive2.3.9-2.10.11239150717,600

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

274 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-84q7-p226-4x5wjetty-server@9.2.5.v201411129.3.24.v20180605
MediumGHSA-89qr-369f-5m5xjackson-databind@2.4.02.6.7.5
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.4.02.6.7.5
MediumGHSA-vfqx-33qm-g869jackson-databind@2.4.02.6.7.5
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.4.02.6.7.5
MediumGHSA-58jx-f5rf-qgqfhadoop-yarn-server-common@2.10.12.10.2
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.17.Final4.1.68.Final
MediumGHSA-grg4-wf29-r9vvnetty@3.10.6.Finalno fix listed
MediumGHSA-wfcc-pff6-rgc5jetty-server@9.2.5.v201411129.2.22.v20170606
MediumGHSA-62g2-m955-v383spark-core_2.11@2.0.0no fix listed
MediumALPINE-CVE-2022-28391busybox@1.33.1-r61.33.1-r7
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.4.02.6.7.3
MediumGHSA-p2v9-g2qv-p635netty-handler@4.1.17.Final4.1.45
MediumGHSA-p2v9-g2qv-p635netty@3.10.6.Finalno fix listed
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.4.02.6.7.3
MediumGHSA-xfv3-rrfm-f2rvnetty@3.6.2.Final3.9.8.Final
MediumGHSA-7vx9-xjhr-rw6hjetty-server@9.2.5.v201411129.2.27.v20190403
MediumGHSA-f4qf-m5gf-8jm8tomcat-coyote@8.5.438.5.64
MediumGHSA-p2xq-vcm7-xjj6mesos@0.21.11.4.3
MediumGHSA-fj2m-w3wv-x9prcalcite-core@1.10.01.32.0
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.4.02.12.6.1
MediumGHSA-wm9w-rjj3-j356tomcat-coyote@8.5.43no fix listed
MediumALPINE-CVE-2023-0215openssl@1.1.1l-r01.1.1t-r0
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.4.02.9.10.4
MediumALPINE-CVE-2023-0464openssl@1.1.1l-r01.1.1t-r1
MediumGHSA-g3wg-6mcf-8jj6jetty-webapp@7.6.0.v201201279.4.33.v20201020
MediumGHSA-r29c-68gh-xp6xtomcat-coyote@8.5.439.0.118
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.24.5.13
MediumGHSA-vx85-mj8c-4qm6libthrift@0.9.30.12.0
MediumGHSA-32w9-2qpc-5f9vmesos@0.21.11.4.3
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.9.41.11.0
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.4.02.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.4.02.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@2.5.03.25.5
MediumGHSA-3vrc-rrpw-r5pwjava-xmlbuilder@0.41.2
MediumGHSA-5m48-vr54-vmh3jersey-core@1.91.13
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.42.7
MediumGHSA-7jqf-v358-p8g7tomcat-coyote@8.5.43no fix listed
MediumGHSA-mvr2-9pj6-7w5jguava@14.0.124.1.1-android
MediumGHSA-x869-784m-jmj2mesos@0.21.11.1.3
MediumGHSA-v7wg-cpwc-24m4postgresql@9.4.1208.jre742.2.25
MediumGHSA-vpcv-78cp-whr3mesos@0.21.11.1.3
MediumGHSA-f256-j965-7f32netty@3.10.6.Finalno fix listed
MediumGHSA-fg2v-w576-w4v3json-smart@1.3.11.3.3
MediumGHSA-xc67-hjx6-cgg6jetty-server@9.2.5.v201411129.2.28.v20190418
MediumGHSA-hrmr-f5m6-m9pqcommons-compress@1.91.18
MediumGHSA-r6j3-px5g-cq3xtomcat-coyote@8.5.438.5.94
MediumGHSA-25xr-qj8w-c4vftomcat-coyote@8.5.43no fix listed
MediumGHSA-4j3c-42xv-3f84tomcat-coyote@8.5.43no fix listed
MediumGHSA-vp98-w2p3-mv35log4j@1.2.172.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.5latest4 years ago2.3.9-2.10.11247155728,198

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/slamdev/hive-metastore.svg)](https://charts.stackradar.io/charts/slamdev/hive-metastore)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.