StackRadar

sonarqube 0.10.3 Helm chart

stakaterVerified publisher

Scored 14 Sept 2026

Sonarqube is an open sourced code quality scanning tool

Version 0.10.3 5 years agoapp version 6.7.6 0Artifact Hub

sonarqube 0.10.3 deploys 2 container images: library/postgres and library/sonarqube. Across them, 505 findings13 critical, 57 high 8 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.9.1, fixed in 2.12.2.

Radar Score

11,8411357228207

505 findings over 2 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/postgres9.6.20130491,123
library/sonarqube6.7.6-community135619815810,718

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

225 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-h46c-h94j-95f3jackson-core@2.9.52.15.0
MediumDSA-4530-1expat@2.2.0-2+deb9u12.2.0-2+deb9u3
MediumGHSA-w37g-rhq8-7m4jsnakeyaml@1.151.32
MediumGHSA-5mcr-gq6c-3hq2netty-codec-http@4.1.13.Final4.1.59.Final
MediumGHSA-hh3j-x4mc-g48rtomcat-embed-core@8.5.238.5.49
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.13.Final4.1.133.Final
MediumDLA-1860-1libxslt@1.1.28-2+deb8u31.1.28-2+deb8u5
MediumGHSA-vwqq-5vrc-xw9hlog4j-core@2.9.12.12.3
MediumDLA-2293-1mercurial@4.0-1+deb9u14.0-1+deb9u2
MediumGHSA-3393-hvrj-w7v3elasticsearch@5.6.36.8.17
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.13.Final4.1.136.Final
MediumDLA-2734-1curl@7.52.1-5+deb9u97.52.1-5+deb9u15
MediumDSA-4668-1openjdk-8@8u212-b01-1~deb9u18u252-b09-1~deb9u1
MediumDSA-3982-1perl@5.20.2-3+deb8u65.20.2-3+deb8u9
MediumDLA-2972-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u6
MediumDSA-4425-1wget@1.18-5+deb9u21.18-5+deb9u3
MediumGHSA-3cqm-mf7h-prrjokhttp@3.7.04.9.2
MediumDSA-4475-1openssl@1.1.0j-1~deb9u11.1.0k-1~deb9u1
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.13.Final4.1.135.Final
MediumDSA-3861-1libtasn1-6@4.2-3+deb8u24.2-3+deb8u3
MediumDLA-2048-1libxml2@2.9.1+dfsg1-5+deb8u42.9.1+dfsg1-5+deb8u8
MediumGHSA-gx5v-xp9w-j4cgtomcat-embed-core@8.5.239.0.118
MediumGHSA-g5ww-5jh7-63cxprotobuf-java@3.1.03.16.3
MediumDLA-1925-1python2.7@2.7.9-2+deb8u12.7.9-2+deb8u5
MediumDLA-2664-1curl@7.52.1-5+deb9u97.52.1-5+deb9u14

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.10.3latest5 years ago6.7.6135722820711,841

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/stakater/sonarqube.svg)](https://charts.stackradar.io/charts/stakater/sonarqube)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.