thehive 1.1.1 Helm chart
strangebee-helmOfficialVerified publisherScored 13 Oct 2026
The official Helm Chart of TheHive for Kubernetes
Version 1.1.1 todayapp version 5.8.1-1 4Artifact Hub
thehive 1.1.1 deploys 7 container images: quay.io/minio/minio, curlimages/curl, strangebee/thehive, bitnamilegacy/cassandra and 3 more. Across the 5 measured, 1,468 findings — 8 critical, 1 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >= 1.23.0-0; rendered for Kubernetes 1.23.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | RELEASE.2025-09-07T16-13-09Z | — | unmeasured |
| curlimages/ | 8.17.0 | 102133 | 771 |
| strangebee/ | 5.8.1-1 | 0032153 | 1,998 |
| bitnamilegacy/ | 4.1.7-debian-12-r3 | 2174311 | 4,467 |
| bitnamilegacy/ | 12-debian-12-r51 | 1059286 | 3,931 |
| bitnamilegacy/ | 9.1.2-debian-12-r0 | 4080410 | 5,802 |
| quay.io/ | RELEASE.2025-08-13T08-35-41Z | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-6395 | gnutls28 | 3.7.9-2+deb12u5 |
| Low | DEBIAN-CVE-2025-15281 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-r2xf-8xr9-62gw | jline-builtins | 3.30.15 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | DEBIAN-CVE-2026-5928 | glibc | no fix listed |
| Low | BIT-java-2026-21932 | java | 1.8.0 |
| Low | GHSA-7hhh-6rmp-j9qf | jackson-core | 2.18.11 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2026-82209 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-32316 | jq | 1.6-2.1+deb12u2 |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | GO-2026-5970 | golang.org/ | 0.39.0 |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | BIT-python-2025-12084 | python | 3.10.20 |
| Low | DEBIAN-CVE-2026-42497 | perl | 5.36.0-7+deb12u4 |
| Low | BIT-java-2026-47057 | java | 1.8.0 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | GHSA-jmp9-x22r-554x | spring-core | no fix listed |
| Low | DEBIAN-CVE-2026-13608 | curl | no fix listed |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | DEBIAN-CVE-2026-48962 | perl | 5.36.0-7+deb12u4 |
| Low | DSA-5867-1 | gnutls28 | 3.7.9-2+deb12u4 |
| Low | GHSA-676x-f7gg-47vc | netty-resolver-dns | 4.1.135.Final |
| Low | GHSA-vc5p-v9hr-52mj | log4j-core | 2.25.3 |
| Low | GHSA-cxp5-3px4-pw24 | jackson-databind | 2.18.11 |
| Low | GHSA-wv8q-qhhj-9h54 | jackson-databind | 2.18.11 |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | BIT-java-2026-41254 | java | 1.8.0 |
| Low | GHSA-qp49-qgx5-5m26 | bcprov-jdk18on | 1.85 |
| Low | GHSA-qp49-qgx5-5m26 | bc-fips | 1.0.2.7 |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2025-24528 | krb5 | 1.20.1-2+deb12u3 |
| Low | DEBIAN-CVE-2026-11822 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-2219 | dpkg | 1.21.23 |
| Low | DEBIAN-CVE-2025-7458 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-15661 | libssh2 | 1.10.0-3+deb12u1 |
| Low | BIT-python-2026-19553 | python | 3.10.22 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | DEBIAN-CVE-2026-75803 | openssl | 3.0.22-1~deb12u1 |
| Low | DEBIAN-CVE-2026-42012 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | GHSA-c3fc-8qff-9hwx | bcprov-jdk18on | 1.84 |
| Low | BIT-cassandra-2025-24860 | cassandra | 4.0.16 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.1latest | today | 5.8.1-1 | 812661,193 | 16,969 |
| 1.1.0 | 23 days ago | 5.8.0-1 | 812691,199 | 17,094 |
| 1.0.7 | 27 days ago | 5.8.0-1 | 813181,376 | 19,790 |
| 1.0.6 | 1 month ago | 5.7.6-1 | 813091,358 | 19,398 |
| 1.0.5 | 2 months ago | 5.7.5-1 | 813121,360 | 19,503 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.