nordmart-review Helm chart

Name: nordmart-review Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

stakater

Scored 14 Sept 2026

Chart for deploying nordmart review, nordmart review ui and mongodb

Latest 0.0.6 3 years agodeploys tag 5.0.9-debian-10-r0 0Artifact Hub

nordmart-review 0.0.6 deploys 3 container images: bitnami/mongodb, stakater/stakater-nordmart-review and stakater/stakater-nordmart-review-ui. Across the 2 measured, 651 findings — 11 critical, 34 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.65, fixed in 9.0.99.

Radar Score

11,5541134245361

651 findings over 2 of 3 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mongodb	5.0.9-debian-10-r0	—	unmeasured
stakater/stakater-nordmart-review	1.0.35	1130175177	7,950
stakater/stakater-nordmart-review-ui	1.0.14	0470184	3,604

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

651 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.65	9.0.99
Critical	RHSA-2022:9058	prometheus-jmx-exporter@0.12.0-7.el8	0:0.12.0-9.el8_7
Critical	RHSA-2024:2722	glibc@2.28-189.5.el8_6	0:2.28-236.el8_9.13
Critical	RHSA-2024:2799	glibc@2.28-189.5.el8_6	0:2.28-189.10.el8_6
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.30	2.0
Critical	RHSA-2025:3385KEV	freetype@2.9.1-4.el8_3.1	0:2.9.1-6.el8_6.3
Critical	RHSA-2023:5455KEV	glibc@2.28-189.5.el8_6	0:2.28-225.el8_8.6
Critical	RHSA-2023:5476KEV	glibc@2.28-189.5.el8_6	0:2.28-189.6.el8_6
Critical	RHSA-2023:5769KEV	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-4.el8_6.1
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.65	9.0.98
Critical	RHSA-2025:12010	sqlite@3.26.0-15.el8	0:3.26.0-20.el8_10
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.22	6.0.0
High	RHSA-2025:0083	cups@1:2.2.6-45.el8_6.2	1:2.2.6-62.el8_10
High	RHSA-2022:5818	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-7.el8_6
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.65	9.0.109
High	RHSA-2023:1405	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-9.el8_7
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.65	9.0.106
High	RHSA-2023:1441	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-8.el8_6
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.22	no fix listed
High	RHSA-2025:1301KEV	gcc@8.5.0-10.1.el8_6	0:8.5.0-23.el8_10
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.65	9.0.71
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	RHSA-2024:0538	libssh@0.9.6-3.el8	0:0.9.6-4.el8_6
High	RHSA-2024:0628	libssh@0.9.6-3.el8	0:0.9.6-13.el8_9
High	RHSA-2024:5654	curl@7.61.1-22.el8_6.3	0:7.61.1-34.el8_10.2
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.65	9.0.81
High	RHSA-2024:3763	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-4.el8_6.2
High	RHSA-2024:0430	python3@3.6.8-45.el8	0:3.6.8-47.el8_6.4
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	RHSA-2024:8794	krb5@1.18.2-14.el8	0:1.18.2-16.el8_6.2
High	RHSA-2023:0173	libxml2@2.9.7-13.el8_6.1	0:2.9.7-15.el8_7.1
High	RHSA-2024:0413	libxml2@2.9.7-13.el8_6.1	0:2.9.7-13.el8_6.4
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.65	9.0.86
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.65	9.0.109
High	RHSA-2022:6159	curl@7.61.1-22.el8_6.3	0:7.61.1-22.el8_6.4
High	RHSA-2023:3591	python3@3.6.8-45.el8	0:3.6.8-51.el8_8.1
High	RHSA-2023:3408	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-9.el8_6
High	RHSA-2025:21776	expat@2.2.5-8.el8_6.2	0:2.5.0-1.el8_10
High	RHSA-2025:22842	expat@2.2.5-8.el8_6.2	0:2.2.10-1.el8_6
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.65	9.0.98
High	GHSA-2f88-5hg8-9x2x	maven-compat@3.6.2	3.8.1
High	GHSA-2f88-5hg8-9x2x	maven-core@3.6.2	3.8.1
High	DLA-3570-1KEV	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
Medium	DLA-3736-1	unbound@1.9.0-2+deb10u2	1.9.0-2+deb10u4
Medium	GHSA-hrpp-h998-j3pp	qs@6.5.2	6.5.3
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.22	no fix listed
Medium	RHSA-2022:7106	zlib@1.2.11-18.el8_5	0:1.2.11-19.el8_6
Medium	RHSA-2022:7793	rsync@3.1.3-14.el8_6.2	0:3.1.3-19.el8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.6latest	3 years ago	5.0.9-debian-10-r0	1134245361	11,554

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/stakater/nordmart-review.svg)](https://charts.stackradar.io/charts/stakater/nordmart-review)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.