nordmart-review-instance Helm chart
stakaterVerified publisherScored 14 Sept 2026
A Helm chart for Kubernetes
Latest 1.0.0 4 years agodeploys tag 5.0.9-debian-10-r0 0Artifact Hub
nordmart-review-instance 1.0.0 deploys 3 container images: bitnami/mongodb, stakater/stakater-nordmart-review and stakater/stakater-nordmart-review-ui. Across the 2 measured, 651 findings — 11 critical, 34 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.65, fixed in 9.0.99.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnami/ | 5.0.9-debian-10-r0 | — | unmeasured |
| stakater/ | 1.0.35 | 1130175177 | 7,950 |
| stakater/ | 1.0.14 | 0470184 | 3,604 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-m6fv-jmcg-4jfg | send | 0.19.0 |
| Low | DLA-3377-1 | systemd | 241-7~deb10u9 |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | GHSA-mp7j-qc5w-4988 | websocket-driver | 0.7.5 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | RHSA-2025:8958 | libxml2 | 0:2.9.7-20.el8_10 |
| Low | GHSA-4vpr-x523-8j87 | svgo | 2.8.4 |
| Low | RHSA-2026:33126 | glibc | 0:2.28-251.el8_10.38 |
| Low | DLA-3676-1 | libde265 | 1.0.11-0+deb10u5 |
| Low | GHSA-5vpf-xvv7-c8vh | spring-data-commons | no fix listed |
| Low | RHSA-2026:13285 | libcap | 0:2.48-6.el8_10.1 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | DLA-3439-1 | libwebp | 0.6.1-2+deb10u2 |
| Low | GHSA-qw6h-vgh9-j6wx | express | 4.20.0 |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 3.14.2 |
| Low | DLA-3737-1 | imagemagick | 8:6.9.10.23+dfsg-2.1+deb10u6 |
| Low | RHSA-2026:64809 | expat | 0:2.5.0-2.el8_10.2 |
| Low | RHSA-2025:3828 | glibc | 0:2.28-251.el8_10.16 |
| Low | GHSA-3chg-m5w7-qfv5 | spring-webmvc | no fix listed |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 3.15.0 |
| Low | RHSA-2026:50077 | systemd | 0:239-58.el8_6.16 |
| Low | RHSA-2026:20587 | glibc | 0:2.28-251.el8_10.37 |
| Low | RHSA-2024:0786 | nss | 0:3.90.0-6.el8_9 |
| Low | DLA-3699-1 | libde265 | 1.0.11-0+deb10u6 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | RHSA-2026:43420 | acl | 0:2.4.0-1.el8_10 |
| Low | RHSA-2024:7417 | python3 | 0:3.6.8-47.el8_6.7 |
| Low | RHSA-2025:1517 | libxml2 | 0:2.9.7-18.el8_10.2 |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.16 |
| Low | GHSA-f5vj-f2hx-8m93 | webpack-dev-server | 5.2.6 |
| Low | RHSA-2025:21977 | libssh | 0:0.9.6-16.el8_10 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GHSA-hc43-m36c-8v33 | spring-data-mongodb | no fix listed |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | no fix listed |
| Low | GHSA-5c6j-r48x-rmvq | serialize-javascript | 7.0.3 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | no fix listed |
| Low | DLA-3352-1 | libde265 | 1.0.11-0+deb10u4 |
| Low | RHSA-2026:8861 | giflib | 0:5.1.4-4.el8_10 |
| Low | DLA-3583-1 | glib2.0 | 2.58.3-2+deb10u5 |
| Low | DLA-3814-1 | glib2.0 | 2.58.3-2+deb10u6 |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | GHSA-qx2v-qp2m-jg93 | postcss | 8.5.10 |
| Low | GHSA-9cmq-m9j5-mvww | spring-expression | 5.3.39 |
| Low | RHSA-2026:1852 | util-linux | 0:2.32.1-48.el8_10 |
| Low | GHSA-79cf-xcqc-c78w | webpack-dev-server | 5.2.4 |
| Low | GHSA-5p4m-2wfm-xmqj | js-yaml | 3.15.1 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | DLA-3602-1 | libx11 | 2:1.6.7-1+deb10u4 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.0.0latest | 4 years ago | 5.0.9-debian-10-r0 | 1134245361 | 11,554 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.