StackRadar

trino Helm chart

statcan

Scored 14 Sept 2026

Fast distributed SQL query engine for big data analytics that helps you explore your data universe

Latest 1.23.4 3 years agoapp version 405 0Artifact Hub

trino 1.23.4 deploys 2 container images: trinodb/trino and nginxinc/nginx-unprivileged. Across them, 809 findings — 17 critical, 44 high — 5 on CISA KEV. The highest contribution is GHSA-6jwp-4wvj-6597 in pinot-common 0.11.0, fixed in 1.3.0.

Radar Score

13,7671744251495

809 findings over 2 of 2 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
trinodb/trino×2405173723448912,965
nginxinc/nginx-unprivileged1.20-alpine07176802

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

809 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-rmpj-7c96-mrg8hadoop-common@3.1.33.2.3
MediumGHSA-g2fg-mr77-6vrmlibthrift@0.9.3-10.14.0
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.48.Final4.1.68.Final
MediumGHSA-9vjp-v76f-g363netty@3.10.5.Finalno fix listed
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.4.02.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.4.02.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.4.02.9.10.8
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.4.02.6.7.5
MediumGHSA-89qr-369f-5m5xjackson-databind@2.4.02.6.7.5
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.4.02.6.7.5
MediumGHSA-vfqx-33qm-g869jackson-databind@2.4.02.6.7.5
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.4.02.6.7.5
MediumGHSA-grg4-wf29-r9vvnetty@3.10.5.Finalno fix listed
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.48.Final4.1.68.Final
MediumUBUNTU-CVE-2022-48522perl@5.34.0-3ubuntu1.15.34.0-3ubuntu1.3
MediumUBUNTU-CVE-2026-45447openssl@3.0.2-0ubuntu1.73.0.2-0ubuntu1.25
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.4.02.6.7.3
MediumGHSA-p2v9-g2qv-p635netty@3.10.5.Finalno fix listed
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.4.02.6.7.3
MediumGHSA-xfv3-rrfm-f2rvnetty@3.2.6.Final3.9.8.Final
MediumGHSA-7vx9-xjhr-rw6hjetty-server@9.3.24.v201806059.3.26.v20190403
MediumGHSA-h2f4-v4c4-6wx4jetty-server@9.3.24.v201806059.3.25.v20180904
MediumALPINE-CVE-2022-32205curl@7.79.1-r17.79.1-r2
MediumGHSA-fj2m-w3wv-x9prcalcite-core@1.29.01.32.0
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.4.02.12.6.1
MediumGHSA-w7f5-jrpr-5c2mavatica-core@1.20.01.22.0
MediumALPINE-CVE-2023-0215openssl@1.1.1n-r01.1.1t-r0
MediumUBUNTU-CVE-2023-0215openssl@3.0.2-0ubuntu1.73.0.2-0ubuntu1.8
MediumGHSA-jhcr-hph9-g7wmhelix-core@1.0.41.3.0
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.4.02.9.10.4
MediumUBUNTU-CVE-2021-46848libtasn1-6@4.18.0-4build14.18.0-4ubuntu0.2
MediumUBUNTU-CVE-2024-45490expat@2.4.7-1ubuntu0.22.4.7-1ubuntu0.4
MediumGHSA-wgh7-54f2-x98rhttp2-hpack@9.4.49.v202209149.4.53
MediumALPINE-CVE-2023-0464openssl@1.1.1n-r01.1.1t-r1
MediumUBUNTU-CVE-2023-0464openssl@3.0.2-0ubuntu1.73.0.2-0ubuntu1.9
MediumALPINE-CVE-2023-27534curl@7.79.1-r18.0.1-r0
MediumUBUNTU-CVE-2023-27534curl@7.81.0-1ubuntu1.67.81.0-1ubuntu1.10
MediumGHSA-g3wg-6mcf-8jj6jetty-webapp@9.3.24.v201806059.4.33.v20201020
MediumALPINE-CVE-2022-32208curl@7.79.1-r17.79.1-r2
MediumGHSA-mmxm-8w33-wc4hhttp2-common@9.4.49.v202209149.4.58
MediumGHSA-7rpj-hg47-cx62h2@1.4.2002.0.202
MediumUBUNTU-CVE-2023-5363openssl@3.0.2-0ubuntu1.73.0.2-0ubuntu1.12
MediumUBUNTU-CVE-2024-37371krb5@1.19.2-21.19.2-2ubuntu0.4
MediumGHSA-98qh-xjc8-98pqpostgresql@42.5.042.7.11
MediumALPINE-CVE-2023-27533curl@7.79.1-r18.0.1-r0
MediumUBUNTU-CVE-2023-27533curl@7.81.0-1ubuntu1.67.81.0-1ubuntu1.10
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.124.5.13
MediumGHSA-vx85-mj8c-4qm6libthrift@0.9.3-10.12.0
MediumUBUNTU-CVE-2017-11164pcre3@2:8.39-13ubuntu0.22.04.1no fix listed
MediumGHSA-7286-pgfv-vxvhzookeeper@3.5.53.7.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.23.4latest3 years ago405174425149513,767

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/statcan/trino.svg)](https://charts.stackradar.io/charts/statcan/trino)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.