unifi 0.1.3 Helm chart

Name: unifi Helm chart 0.1.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

startechnica

Scored 14 Sept 2026

UniFi Network Application to manage UniFi devices

Version 0.1.3 4 years agoapp version v7.1.66 0Artifact Hub

unifi 0.1.3 deploys 2 container images: bitnami/mongodb and jacobalberty/unifi. Across the 1 measured, 1,017 findings — 17 critical, 30 high — 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.3.15, fixed in 5.3.18. Chart.yaml declares kubeVersion >=1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

14,4931730246722

1,017 findings over 1 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mongodb	4.4.11-debian-10-r12	—	unmeasured
jacobalberty/unifi	v7.1.66	1730246722	14,493

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,017 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.3.15	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.3.15	5.3.18
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.58	9.0.99
Critical	UBUNTU-CVE-2015-4852KEV	openjdk-8@8u312-b07-0ubuntu1~18.04	no fix listed
Critical	GHSA-599f-7c49-w659	commons-text@1.8	1.10.0
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.19
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.fips.2.1~18.04.13.2
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.fips.2.1~18.04.17
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.8.1-2ubuntu2.1	2.8.1-2ubuntu2.2+esm1
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
Critical	UBUNTU-CVE-2025-14847KEV	mongodb@1:3.6.3-0ubuntu1.4	1:3.6.3-0ubuntu1.4+esm2
Critical	GHSA-p66x-2cv9-qq3v	commons-beanutils@1.9.2	1.9.4
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.58	9.0.98
Critical	UBUNTU-CVE-2024-47175	cups@2.2.7-1ubuntu2.8	2.2.7-1ubuntu2.10+esm6
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.7+esm2
Critical	UBUNTU-CVE-2019-9513	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
Critical	UBUNTU-CVE-2024-2961	glibc@2.27-3ubuntu1.5	2.27-3ubuntu1.6+esm2
High	UBUNTU-CVE-2022-34169	openjdk-8@8u312-b07-0ubuntu1~18.04	8u342-b07-0ubuntu1~18.04
High	UBUNTU-CVE-2022-0778	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.fips.2.1~18.04.15
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.15	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.58	9.0.109
High	UBUNTU-CVE-2019-9511	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.58	9.0.106
High	UBUNTU-CVE-2023-0286	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.21
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.15	no fix listed
High	UBUNTU-CVE-2024-2398	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24+esm4
High	UBUNTU-CVE-2021-23840	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.fips.2.1~18.04.9.1
High	UBUNTU-CVE-2023-2650	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.58	9.0.71
High	UBUNTU-CVE-2021-3712	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.fips.2.1~18.04.13.2
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-0ubuntu2.1	1:1.2.11.dfsg-0ubuntu2.2
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.58	9.0.81
High	GHSA-w24x-87mr-4r23	spring-data-mongodb@1.10.23.RELEASE	3.3.5
High	UBUNTU-CVE-2021-3449	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.fips.2.1~18.04.9.1
High	UBUNTU-CVE-2024-28182	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.9.2	1.9.4
High	UBUNTU-CVE-2024-2511	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23+esm10
High	UBUNTU-CVE-2024-3596	krb5@1.16-2ubuntu0.2	1.16-2ubuntu0.4+esm3
High	GHSA-558x-2xjg-6232	spring-expression@5.3.15	5.3.17
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.58	9.0.86
High	UBUNTU-CVE-2022-35737	sqlite3@3.22.0-1ubuntu0.5	3.22.0-1ubuntu0.7
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.58	9.0.109
High	UBUNTU-CVE-2022-32206	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.19
High	UBUNTU-CVE-2020-9283	mongo-tools@3.6.3-0ubuntu1	no fix listed
High	UBUNTU-CVE-2022-4450	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.21
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.58	9.0.98
High	GHSA-hwj3-m3p6-hj38	dom4j@1.6.1	2.0.3
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.15	no fix listed
Medium	GO-2024-2687	stdlib@go1.18	1.21.9
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.5	2.8.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.3latest	4 years ago	v7.1.66	1730246722	14,493

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/startechnica/unifi.svg)](https://charts.stackradar.io/charts/startechnica/unifi)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.