nordmart-review-instance 1.0.0 Helm chart
stakaterVerified publisherScored 15 Sept 2026
A Helm chart for Kubernetes
Version 1.0.0 4 years agodeploys tag 5.0.9-debian-10-r0 0Artifact Hub
nordmart-review-instance 1.0.0 deploys 3 container images: bitnami/mongodb, stakater/stakater-nordmart-review and stakater/stakater-nordmart-review-ui. Across the 2 measured, 651 findings — 10 critical, 35 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.65, fixed in 9.0.99.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnami/ | 5.0.9-debian-10-r0 | — | unmeasured |
| stakater/ | 1.0.35 | 1031175177 | 7,949 |
| stakater/ | 1.0.14 | 0470184 | 3,605 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-fpj8-gq4v-p354 | tomcat-embed-core | 9.0.113 |
| Low | RHSA-2024:3203 | systemd | 0:239-82.el8 |
| Low | GHSA-5whc-4q84-fj73 | spring-data-mongodb | no fix listed |
| Low | GHSA-hgrr-935x-pq79 | tomcat-embed-core | 9.0.110 |
| Low | GHSA-xv26-6w52-cph6 | websocket-driver | 0.7.5 |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 2.3.2 |
| Low | RHSA-2025:12450 | libxml2 | 0:2.9.7-21.el8_10.2 |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | no fix listed |
| Low | RHSA-2025:4049 | libtasn1 | 0:4.13-5.el8_10 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | RHSA-2026:57462 | curl | 0:7.61.1-34.el8_10.13 |
| Low | RHSA-2024:10779 | python3 | 0:3.6.8-69.el8_10 |
| Low | GHSA-8h2f-7jc4-7m3m | urijs | 1.19.10 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 3.15.2 |
| Low | GHSA-rc42-6c7j-7h5r | spring-boot | no fix listed |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-r4q5-vmmm-2653 | follow-redirects | 1.16.0 |
| Low | RHSA-2024:3347 | python3 | 0:3.6.8-62.el8_10 |
| Low | RHSA-2024:4406 | python3 | 0:3.6.8-47.el8_6.6 |
| Low | RHSA-2026:17481 | rsync | 0:3.1.3-25.el8_10 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | GHSA-42wg-hm62-jcwg | tomcat-embed-core | 9.0.106 |
| Low | DLA-3114-1 | mariadb-10.3 | 1:10.3.36-0+deb10u1 |
| Low | DLA-3165-1 | expat | 2.2.6-2+deb10u6 |
| Low | RHSA-2024:3233 | libssh | 0:0.9.6-14.el8 |
| Low | RHSA-2026:62218 | libssh | 0:0.9.6-17.el8_10 |
| Low | DLA-3118-1 | unzip | 6.0-23+deb10u3 |
| Low | GHSA-9fw2-h3hf-293r | spring-data-commons | no fix listed |
| Low | DLA-3429-1 | imagemagick | 8:6.9.10.23+dfsg-2.1+deb10u5 |
| Low | GHSA-c83g-rgw3-j3cx | browserslist | 4.28.7 |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | no fix listed |
| Low | RHSA-2026:0241 | libpng | 2:1.6.34-9.el8_10 |
| Low | RHSA-2026:0322 | libpng | 2:1.6.34-8.el8_6.1 |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | RHSA-2026:0991 | glib2 | 0:2.56.4-168.el8_10 |
| Low | RHSA-2023:3839 | libssh | 0:0.9.6-10.el8_8 |
| Low | RHSA-2023:0837 | systemd | 0:239-68.el8_7.4 |
| Low | DLA-3782-1 | util-linux | 2.33.1-0.1+deb10u1 |
| Low | RHSA-2024:0424 | rpm | 0:4.14.3-26.el8_6 |
| Low | RHSA-2024:0647 | rpm | 0:4.14.3-28.el8_9 |
| Low | DLA-3586-1 | ncurses | 6.1+20181013-2+deb10u4 |
| Low | DLA-3692-1 | curl | 7.64.0-4+deb10u8 |
| Low | DLA-3119-1 | expat | 2.2.6-2+deb10u5 |
| Low | RHSA-2025:2722 | krb5 | 0:1.18.2-31.el8_10 |
| Low | GHSA-2328-f5f3-gj25 | node-forge | 1.4.0 |
| Low | DLA-3763-1 | curl | 7.64.0-4+deb10u9 |
| Low | DLA-3263-1 | libtasn1-6 | 4.13-3+deb10u1 |
| Low | DLA-3758-1 | tiff | 4.1.0+git191117-2~deb10u9 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.0.0latest | 4 years ago | 5.0.9-debian-10-r0 | 1035245361 | 11,554 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.