strimzi-user-operator 0.4.0 Helm chart

Name: strimzi-user-operator Helm chart 0.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

spartan

Scored 14 Sept 2026

Strimzi User Operator (standalone mode) pointed at an external Kafka cluster (e.g. AWS MSK). Deploys only namespace-scoped resources — Namespace, KafkaUser CRD definition, and cluster-scoped RBAC are the consumer's responsibility to bootstrap (typically via Terraform). This keeps the chart deployable from an ArgoCD AppProject without cluster-scoped resource whitelist entries. Manages Kafka ACL declaratively via KafkaUser CRDs. KafkaUser CRD instances live in the sibling `kafka-users` chart.

Version 0.4.0 4 months agoapp version 0.45.1 0Artifact Hub

strimzi-user-operator 0.4.0 deploys 1 container image: quay.io/strimzi/operator. Across them, 141 findings — 3 critical, 0 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.

Radar Score

1,8363022116

141 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/strimzi/operator	0.45.1	3022116	1,836

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

116 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:1478	python3.9@3.9.21-2.el9_6.2	0:3.9.25-3.el9_7
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.12.3	no fix listed
Low	RHSA-2026:2786	glibc@2.34-168.el9_6.23	0:2.34-231.el9_7.10
Low	RHSA-2026:7668	nghttp2@1.43.0-6.el9	0:1.43.0-6.el9_7.1
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.17.2	2.25.4
Low	RHSA-2026:10949	python3.9@3.9.21-2.el9_6.2	0:3.9.25-3.el9_7.3
Low	RHSA-2026:19216	python3.9@3.9.21-2.el9_6.2	0:3.9.25-7.el9_8
Low	RHSA-2026:19576	python3.9@3.9.21-2.el9_6.2	0:3.9.21-2.el9_6.6
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.118.Final	4.1.133.Final
Low	RHSA-2026:5080	libarchive@3.5.3-6.el9_6	0:3.5.3-7.el9_7
Low	RHSA-2026:54268	python3.9@3.9.21-2.el9_6.2	0:3.9.25-7.el9_8.3
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.9.1	3.9.2
Low	RHSA-2025:21174	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.118.Final	4.1.132.Final
Low	RHSA-2026:39798	python3.9@3.9.21-2.el9_6.2	0:3.9.25-7.el9_8.2
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.118.Final	4.1.133.Final
Low	RHSA-2026:55440	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.9
Low	RHSA-2026:65763	glib2@2.68.4-16.el9_6.2	0:2.68.4-16.el9_6.7
Low	GHSA-7xrh-hqfc-g7qr	zookeeper@3.8.4	3.8.6
Low	RHSA-2026:55439	curl@7.76.1-31.el9_6.1	0:7.76.1-40.el9_8.5
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.118.Final	4.1.137.Final
Low	RHSA-2026:28253	libtasn1@4.16.0-9.el9	0:4.16.0-10.el9_8
Low	RHSA-2026:42089	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.2
Low	RHSA-2026:15971	glib2@2.68.4-16.el9_6.2	0:2.68.4-18.el9_7.2
Low	RHSA-2026:19361	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.1
Low	RHSA-2026:19457	glib2@2.68.4-16.el9_6.2	0:2.68.4-16.el9_6.5
Low	RHSA-2026:19218	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-2.el9_8
Low	RHSA-2026:27744	openssl-fips-provider@3.0.7-6.el9_5	0:3.0.7-11.el9_8
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.118.Final	4.1.135.Final
Low	RHSA-2025:23043	curl@7.76.1-31.el9_6.1	0:7.76.1-31.el9_6.2
Low	RHSA-2026:52674	libarchive@3.5.3-6.el9_6	0:3.5.3-11.el9_8
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.2	2.25.5
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.118.Final	4.1.125.Final
Low	RHSA-2025:21773	expat@2.5.0-5.el9_6	0:2.5.0-5.el9_6.1
Low	RHSA-2026:4168	python3.9@3.9.21-2.el9_6.2	0:3.9.25-3.el9_7.1
Low	RHSA-2026:5218	python3.9@3.9.21-2.el9_6.2	0:3.9.21-2.el9_6.4
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.118.Final	4.1.133.Final
Low	RHSA-2026:23230	expat@2.5.0-5.el9_6	0:2.5.0-6.el9_8.1
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.118.Final	4.1.135.Final
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.17.2	2.25.3
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.118.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.118.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.118.Final	4.1.136.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.118.Final	4.1.136.Final
Low	RHSA-2026:18599	p11-kit@0.25.3-3.el9_5	0:0.26.2-1.el9
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.37.2	9.37.4
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.118.Final	4.1.135.Final
Low	RHSA-2026:42887	java-17-openjdk@1:17.0.16.0.8-2.el9	1:17.0.20.0.8-1.1.el9
Low	RHSA-2026:0936	glib2@2.68.4-16.el9_6.2	0:2.68.4-18.el9_7.1
Low	RHSA-2025:18821	java-17-openjdk@1:17.0.16.0.8-2.el9	1:17.0.17.0.10-1.el9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.0latest	4 months ago	0.45.1	3022116	1,836

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/spartan/strimzi-user-operator.svg)](https://charts.stackradar.io/charts/spartan/strimzi-user-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.