StackRadar

sonarqube Helm chart

stakaterVerified publisher

Scored 14 Sept 2026

Sonarqube is an open sourced code quality scanning tool

Latest 0.10.3 5 years agoapp version 6.7.6 0Artifact Hub

sonarqube 0.10.3 deploys 2 container images: library/postgres and library/sonarqube. Across them, 505 findings — 13 critical, 57 high — 8 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.9.1, fixed in 2.12.2.

Radar Score

11,8411357228207

505 findings over 2 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/postgres9.6.20130491,123
library/sonarqube6.7.6-community135619815810,718

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

225 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.9.52.9.6
MediumGHSA-h4rc-386g-6m85jackson-databind@2.9.52.9.10.4
MediumGHSA-3ccq-5vw3-2p6xxstream@1.3.11.4.18
MediumGHSA-6w62-hx7r-mw68xstream@1.3.11.4.18
MediumGHSA-h7v4-7xg3-hxccxstream@1.3.11.4.18
MediumGHSA-hph2-m3g5-xxv4xstream@1.3.11.4.18
MediumGHSA-qrx8-8545-4wg2xstream@1.3.11.4.18
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.13.Final4.1.68.Final
MediumDLA-2388-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u2
MediumGHSA-64xx-cq4q-mf44xstream@1.3.11.4.18
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.9.52.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.9.52.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.9.52.9.10.8
MediumGHSA-2q8x-2p7f-574vxstream@1.3.11.4.18
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.9.52.9.10.8
MediumGHSA-89qr-369f-5m5xjackson-databind@2.9.52.9.10.8
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.9.52.9.10.8
MediumGHSA-vfqx-33qm-g869jackson-databind@2.9.52.9.10.8
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.9.52.9.10.8
MediumDLA-2646-1subversion@1.9.5-1+deb9u31.9.5-1+deb9u6
MediumGHSA-p7vm-phxx-g722commons-email@1.3.21.5
MediumGHSA-3mjj-mr4f-qxmxmercurial@4.04.6.1
MediumGHSA-58pp-9c76-5625jackson-databind@2.9.52.9.10.4
MediumGHSA-8jrj-525p-826vxstream@1.3.11.4.18
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.13.Final4.1.68.Final
MediumGHSA-rf6r-2c4q-2vwgjackson-databind@2.9.52.9.10.4
MediumGHSA-v3xw-c963-f5hcjackson-databind@2.9.52.9.10.4
MediumGHSA-758m-v56v-grj4jackson-databind@2.9.52.9.10.4
MediumGHSA-mc6h-4qgp-37qhjackson-databind@2.9.52.9.10.5
MediumDSA-4453-1openjdk-8@8u212-b01-1~deb9u18u212-b03-2~deb9u1
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.9.52.9.10
MediumGHSA-c2q3-4qrh-fm48jackson-databind@2.9.52.9.10.5
MediumGHSA-6v52-mj5r-7j2mtomcat-embed-core@8.5.238.5.32
MediumDLA-2628-1python2.7@2.7.13-2+deb9u32.7.13-2+deb9u5
MediumDLA-2935-1expat@2.2.0-2+deb9u12.2.0-2+deb9u5
MediumDLA-1911-1exim4@4.84.2-2+deb8u34.84.2-2+deb8u6
MediumGHSA-43gc-mjxg-gvrqxstream@1.3.11.4.16
MediumGHSA-p2v9-g2qv-p635netty-handler@4.1.13.Final4.1.45
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.9.52.9.9.1
MediumDSA-4581-1git@1:2.11.0-3+deb9u41:2.11.0-3+deb9u5
MediumGHSA-f4qf-m5gf-8jm8tomcat-embed-core@8.5.238.5.64
MediumGHSA-cxfm-5m4g-x7xpxstream@1.3.11.4.18
MediumGHSA-jv65-pf7v-f7p8hazelcast@3.8.63.11
MediumGHSA-95cm-88f5-f2c7jackson-databind@2.9.52.9.10.4
MediumGHSA-7hwc-46rm-65jhxstream@1.3.11.4.10
MediumGHSA-56p8-3fh9-4cvqxstream@1.3.11.4.16
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.9.52.12.6.1
MediumGHSA-hvr9-wr9p-grgrmercurial@4.04.3.1
MediumGHSA-4mr4-7vjv-9hm6mercurial@4.04.5.1
MediumGHSA-27xj-rqx5-2255jackson-databind@2.9.52.9.10.4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.10.3latest5 years ago6.7.6135722820711,841

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/stakater/sonarqube.svg)](https://charts.stackradar.io/charts/stakater/sonarqube)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.