nordmart-review-instance Helm chart

Name: nordmart-review-instance Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

stakater

Scored 15 Sept 2026

A Helm chart for Kubernetes

Latest 1.0.0 4 years agodeploys tag 5.0.9-debian-10-r0 0Artifact Hub

nordmart-review-instance 1.0.0 deploys 3 container images: bitnami/mongodb, stakater/stakater-nordmart-review and stakater/stakater-nordmart-review-ui. Across the 2 measured, 651 findings — 10 critical, 35 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.65, fixed in 9.0.99.

Radar Score

11,5541035245361

651 findings over 2 of 3 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mongodb	5.0.9-debian-10-r0	—	unmeasured
stakater/stakater-nordmart-review	1.0.35	1031175177	7,949
stakater/stakater-nordmart-review-ui	1.0.14	0470184	3,605

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

651 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:13285	libcap@2.48-2.el8	0:2.48-6.el8_10.1
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.0	2.3.2
Low	DLA-3439-1	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u2
Low	GHSA-qw6h-vgh9-j6wx	express@4.17.1	4.20.0
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	DLA-3737-1	imagemagick@8:6.9.10.23+dfsg-2.1+deb10u1	8:6.9.10.23+dfsg-2.1+deb10u6
Low	RHSA-2026:64809	expat@2.2.5-8.el8_6.2	0:2.5.0-2.el8_10.2
Low	RHSA-2025:3828	glibc@2.28-189.5.el8_6	0:2.28-251.el8_10.16
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.22	no fix listed
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	RHSA-2026:50077	systemd@239-58.el8	0:239-58.el8_6.16
Low	RHSA-2026:20587	glibc@2.28-189.5.el8_6	0:2.28-251.el8_10.37
Low	RHSA-2024:0786	nss@3.67.0-7.el8_5	0:3.90.0-6.el8_9
Low	DLA-3699-1	libde265@1.0.3-1+b1	1.0.11-0+deb10u6
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.3	2.18.8
Low	RHSA-2026:43420	acl@2.2.53-1.el8	0:2.4.0-1.el8_10
Low	RHSA-2024:7417	python3@3.6.8-45.el8	0:3.6.8-47.el8_6.7
Low	RHSA-2025:1517	libxml2@2.9.7-13.el8_6.1	0:2.9.7-18.el8_10.2
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GHSA-f5vj-f2hx-8m93	webpack-dev-server@3.11.2	5.2.6
Low	RHSA-2025:21977	libssh@0.9.6-3.el8	0:0.9.6-16.el8_10
Low	GHSA-mwcw-c2x4-8c55	nanoid@3.1.23	3.3.8
Low	GHSA-hc43-m36c-8v33	spring-data-mongodb@3.4.2	no fix listed
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.22	no fix listed
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@5.0.1	7.0.3
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.3	2.18.9
Low	GHSA-vmf3-w455-68vh	tar@4.4.19	7.5.16
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.22	no fix listed
Low	DLA-3352-1	libde265@1.0.3-1+b1	1.0.11-0+deb10u4
Low	RHSA-2026:8861	giflib@5.1.4-3.el8	0:5.1.4-4.el8_10
Low	DLA-3583-1	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u5
Low	DLA-3814-1	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.7.3	no fix listed
Low	GHSA-qx2v-qp2m-jg93	postcss@8.3.0	8.5.10
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.22	5.3.39
Low	RHSA-2026:1852	util-linux@2.32.1-35.el8	0:2.32.1-48.el8_10
Low	GHSA-79cf-xcqc-c78w	webpack-dev-server@3.11.2	5.2.4
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@3.14.1	3.15.1
Low	GHSA-7g45-4rm6-3mm3	guava@28.1-jre	32.0.0-android
Low	DLA-3602-1	libx11@2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u4
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.11	1.3.16
Low	RHSA-2026:55804	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.3
Low	GHSA-4mjr-xmp4-gh2g	qs@6.5.2	6.16.0
Low	GHSA-48c2-rrv3-qjmp	yaml@1.10.2	1.10.3
Low	RHSA-2026:11349	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.4
Low	RHSA-2026:56133	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
Low	DLA-3110-1	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u4
Low	GHSA-5mg8-w23w-74h3	guava@28.1-jre	32.0.0-android
Low	GHSA-957g-f97v-vppc	spring-webmvc@5.3.22	no fix listed
Low	GHSA-9gqv-wp59-fq42	http-proxy-middleware@2.0.0	2.0.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	4 years ago	5.0.9-debian-10-r0	1035245361	11,554

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/stakater/nordmart-review-instance.svg)](https://charts.stackradar.io/charts/stakater/nordmart-review-instance)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.