thehive 1.1.1 Helm chart
strangebee-helmOfficialVerified publisherScored 13 Oct 2026
The official Helm Chart of TheHive for Kubernetes
Version 1.1.1 yesterdayapp version 5.8.1-1 4Artifact Hub
thehive 1.1.1 deploys 7 container images: quay.io/minio/minio, curlimages/curl, strangebee/thehive, bitnamilegacy/cassandra and 3 more. Across the 5 measured, 1,468 findings — 8 critical, 1 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >= 1.23.0-0; rendered for Kubernetes 1.23.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | RELEASE.2025-09-07T16-13-09Z | — | unmeasured |
| curlimages/ | 8.17.0 | 102133 | 771 |
| strangebee/ | 5.8.1-1 | 0032153 | 1,998 |
| bitnamilegacy/ | 4.1.7-debian-12-r3 | 2174311 | 4,467 |
| bitnamilegacy/ | 12-debian-12-r51 | 1059286 | 3,931 |
| bitnamilegacy/ | 9.1.2-debian-12-r0 | 4080410 | 5,802 |
| quay.io/ | RELEASE.2025-08-13T08-35-41Z | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-4878 | libcap2 | 1:2.66-4+deb12u3 |
| Low | DEBIAN-CVE-2026-13757 | p11-kit | no fix listed |
| Low | BIT-python-2026-6019 | python | 3.13.14 |
| Low | DEBIAN-CVE-2026-15534 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-56109 | alsa-lib | no fix listed |
| Low | BIT-python-2025-6069 | python | 3.9.24 |
| Low | DEBIAN-CVE-2026-4105 | systemd | 252.39-1~deb12u2 |
| Low | GHSA-vvgp-rfg2-7rr6 | jackson-databind | 2.18.9 |
| Low | BIT-python-2025-4516 | python | 3.9.23 |
| Low | BIT-elasticsearch-2025-37727 | elasticsearch | 8.18.8 |
| Low | BIT-java-2026-22021 | java | 1.8.0 |
| Low | BIT-elasticsearch-2025-68390 | elasticsearch | 8.19.8 |
| Low | GHSA-gphj-4h6p-37xq | x-pack-core | 9.1.8 |
| Low | DEBIAN-CVE-2025-14104 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2025-64505 | libpng1.6 | 1.6.39-2+deb12u1 |
| Low | DEBIAN-CVE-2023-4641 | shadow | 1:4.13+dfsg1-1+deb12u1 |
| Low | DEBIAN-CVE-2024-13176 | openssl | 3.0.16-1~deb12u1 |
| Low | DEBIAN-CVE-2026-56392 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-53615 | util-linux | no fix listed |
| Low | BIT-cassandra-2024-27137 | cassandra | 4.0.15 |
| Low | BIT-java-2026-70907 | java | 1.8.0 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | BIT-java-2024-21210 | java | 1.8.0 |
| Low | ALPINE-CVE-2026-42768 | openssl | 3.5.7-r0 |
| Low | DEBIAN-CVE-2025-8058 | glibc | 2.36-9+deb12u13 |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.3.16 |
| Low | DEBIAN-CVE-2026-35189 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-19542 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-56391 | coreutils | no fix listed |
| Low | BIT-java-2026-22013 | java | 1.8.0 |
| Low | DEBIAN-CVE-2026-39956 | jq | 1.6-2.1+deb12u2 |
| Low | BIT-python-2025-13837 | python | 3.10.20 |
| Low | BIT-python-2025-8291 | python | 3.9.24 |
| Low | BIT-python-2026-12345 | python | no fix listed |
| Low | DEBIAN-CVE-2026-18938 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2025-29088 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-1390 | libcap2 | 1:2.66-4+deb12u1 |
| Low | DEBIAN-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-9403 | jq | no fix listed |
| Low | DEBIAN-CVE-2017-14159 | openldap | no fix listed |
| Low | DEBIAN-CVE-2017-18018 | coreutils | no fix listed |
| Low | ALPINE-CVE-2026-42769 | openssl | 3.5.7-r0 |
| Low | DEBIAN-CVE-2025-10966 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-11850 | krb5 | no fix listed |
| Low | ALPINE-CVE-2025-15469 | openssl | 3.5.5-r0 |
| Low | GHSA-5mg8-w23w-74h3 | guava | 32.0.0-android |
| Low | DEBIAN-CVE-2026-75805 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-54370 | acl | no fix listed |
| Low | GHSA-mcr4-qmvw-px4g | lz4-java | 1.11.4 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.1latest | yesterday | 5.8.1-1 | 812661,193 | 16,969 |
| 1.1.0 | 23 days ago | 5.8.0-1 | 812691,199 | 17,094 |
| 1.0.7 | 27 days ago | 5.8.0-1 | 813181,376 | 19,790 |
| 1.0.6 | 1 month ago | 5.7.6-1 | 813091,358 | 19,398 |
| 1.0.5 | 2 months ago | 5.7.5-1 | 813121,360 | 19,503 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.