nordmart-review-instance 1.0.0 Helm chart
stakaterVerified publisherScored 14 Sept 2026
A Helm chart for Kubernetes
Version 1.0.0 4 years agodeploys tag 5.0.9-debian-10-r0 0Artifact Hub
nordmart-review-instance 1.0.0 deploys 3 container images: bitnami/mongodb, stakater/stakater-nordmart-review and stakater/stakater-nordmart-review-ui. Across the 2 measured, 651 findings — 11 critical, 34 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.65, fixed in 9.0.99.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnami/ | 5.0.9-debian-10-r0 | — | unmeasured |
| stakater/ | 1.0.35 | 1130175177 | 7,950 |
| stakater/ | 1.0.14 | 0470184 | 3,604 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2025:8686 | glibc | 0:2.28-251.el8_10.22 |
| Low | GHSA-8fr3-hfg3-gpgp | node-forge | 1.0.0 |
| Low | GHSA-x4m4-345f-5h5g | tomcat-embed-core | 9.0.117 |
| Low | GHSA-w27v-7q3p-w38r | svgo | 2.8.4 |
| Low | GHSA-73wf-gq98-2v4g | browserslist | 4.28.7 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-jjfh-589g-3hjx | spring-boot-actuator | 2.7.18 |
| Low | GHSA-jchw-25xp-jwwc | follow-redirects | 1.15.4 |
| Low | DLA-3626-1 | krb5 | 1.17-3+deb10u6 |
| Low | GHSA-rv95-896h-c2vc | express | 4.19.2 |
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | 9.0.113 |
| Low | RHSA-2024:3203 | systemd | 0:239-82.el8 |
| Low | GHSA-5whc-4q84-fj73 | spring-data-mongodb | no fix listed |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | 9.0.110 |
| Low | GHSA-xv26-6w52-cph6 | websocket-driver | 0.7.5 |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 2.3.2 |
| Low | RHSA-2025:12450 | libxml2 | 0:2.9.7-21.el8_10.2 |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | no fix listed |
| Low | RHSA-2025:4049 | libtasn1 | 0:4.13-5.el8_10 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | RHSA-2026:57462 | curl | 0:7.61.1-34.el8_10.13 |
| Low | RHSA-2024:10779 | python3 | 0:3.6.8-69.el8_10 |
| Low | GHSA-8h2f-7jc4-7m3m | urijs | 1.19.10 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 3.15.2 |
| Low | GHSA-rc42-6c7j-7h5r | spring-boot | no fix listed |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-r4q5-vmmm-2653 | follow-redirects | 1.16.0 |
| Low | RHSA-2024:3347 | python3 | 0:3.6.8-62.el8_10 |
| Low | RHSA-2024:4406 | python3 | 0:3.6.8-47.el8_6.6 |
| Low | RHSA-2026:17481 | rsync | 0:3.1.3-25.el8_10 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | GHSA-42wg-hm62-jcwg | tomcat-embed-core | 9.0.106 |
| Low | DLA-3114-1 | mariadb-10.3 | 1:10.3.36-0+deb10u1 |
| Low | DLA-3165-1 | expat | 2.2.6-2+deb10u6 |
| Low | RHSA-2024:3233 | libssh | 0:0.9.6-14.el8 |
| Low | RHSA-2026:62218 | libssh | 0:0.9.6-17.el8_10 |
| Low | DLA-3118-1 | unzip | 6.0-23+deb10u3 |
| Low | GHSA-9fw2-h3hf-293r | spring-data-commons | no fix listed |
| Low | DLA-3429-1 | imagemagick | 8:6.9.10.23+dfsg-2.1+deb10u5 |
| Low | GHSA-c83g-rgw3-j3cx | browserslist | 4.28.7 |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | no fix listed |
| Low | RHSA-2026:0241 | libpng | 2:1.6.34-9.el8_10 |
| Low | RHSA-2026:0322 | libpng | 2:1.6.34-8.el8_6.1 |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | RHSA-2026:0991 | glib2 | 0:2.56.4-168.el8_10 |
| Low | RHSA-2023:3839 | libssh | 0:0.9.6-10.el8_8 |
| Low | RHSA-2023:0837 | systemd | 0:239-68.el8_7.4 |
| Low | DLA-3782-1 | util-linux | 2.33.1-0.1+deb10u1 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.0.0latest | 4 years ago | 5.0.9-debian-10-r0 | 1134245361 | 11,554 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.