umsapp 1.0.0 Helm chart

Name: umsapp Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

stacksimplify

Scored 14 Sept 2026

User Management Web Application for learning Kubernetes, Docker, Helm and Terraform

Version 1.0.0 9 months agoapp version 1.0.0 0Artifact Hub

umsapp 1.0.0 deploys 3 container images: library/busybox, ghcr.io/stacksimplify/kube-usermgmt-webapp and bitnami/mysql. Across the 2 measured, 222 findings — 10 critical, 31 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.1.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

6,101103111962

222 findings over 2 of 3 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31	0000	0
ghcr.io/stacksimplify/kube-usermgmt-webapp	1.0.0-mysqldb	103111962	6,101
bitnami/mysql	8.0.34-debian-11-r4	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

62 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2018-1000654	libtasn1@4.12-r2	4.12-r4
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.3	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.3	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@9.0.21	9.0.81
Low	GHSA-7v6m-28jr-rg84	hibernate-validator@6.0.17.Final	6.2.0.CR1
Low	GHSA-cm59-pr5q-cw85	spring-boot@2.1.6.RELEASE	2.2.11.RELEASE
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.1.8.RELEASE	5.2.23.RELEASE
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@9.0.21	9.0.118
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@9.0.21	9.0.106
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@9.0.21	9.0.116
Low	GHSA-563x-q5rq-57qp	tomcat-coyote@8.0.51	9.0.116
Low	ALPINE-CVE-2018-20217	krb5@1.15.2-r1	1.15.4-r0
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.23	1.31
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@9.0.21	9.0.118
Low	ALPINE-CVE-2019-1563	openssl@1.0.2o-r0	1.0.2t-r0
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.21	9.0.117
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.21	9.0.113
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@9.0.21	9.0.110
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-qq5r-98hh-rxc9	tomcat-coyote@8.0.51	9.0.113
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.1.6.RELEASE	no fix listed
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@2.1.9.RELEASE	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.1.8.RELEASE	no fix listed
Low	GHSA-2rmj-mq67-h97g	spring-web@5.1.8.RELEASE	5.3.38
Low	ALPINE-CVE-2019-1547	openssl@1.0.2o-r0	1.0.2t-r0
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.21	9.0.116
Low	GHSA-775g-4xr8-78h8	spring-expression@5.1.8.RELEASE	no fix listed
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.0.17.Final	6.2.0.Final
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	ALPINE-CVE-2018-0495	libressl@2.6.3-r0	2.6.5-r0
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.1.8.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.1.8.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-5m4m-73w9-8433	spring-data-commons@2.1.9.RELEASE	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.9.9	2.18.8
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@2.1.9.RELEASE	no fix listed
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.9.9	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.1.8.RELEASE	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.9.9	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.1.8.RELEASE	no fix listed
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.1.5.RELEASE	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.1.6.RELEASE	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.1.8.RELEASE	5.3.39
Low	GHSA-293q-567p-wmwq	spring-security-web@5.1.5.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.1.5.RELEASE	5.7.14
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GHSA-957g-f97v-vppc	spring-webmvc@5.1.8.RELEASE	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	9 months ago	1.0.0	103111962	6,101

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/stacksimplify/umsapp.svg)](https://charts.stackradar.io/charts/stacksimplify/umsapp)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.