thehive 2.0.0 Helm chart
strangebee-helmOfficialVerified publisherScored 21 Oct 2026
The official Helm Chart of TheHive for Kubernetes
Version 2.0.0 yesterdayapp version 6.0.0-1 4Artifact Hub
thehive 2.0.0 deploys 7 container images: quay.io/minio/minio, curlimages/curl, strangebee/thehive, bitnamilegacy/cassandra and 3 more. Across the 5 measured, 1,514 findings — 8 critical, 1 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >= 1.23.0-0; rendered for Kubernetes 1.23.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | RELEASE.2025-09-07T16-13-09Z | — | unmeasured |
| curlimages/ | 8.17.0 | 102133 | 783 |
| strangebee/ | 6.0.0-1 | 0027157 | 1,785 |
| bitnamilegacy/ | 4.1.7-debian-12-r3 | 2170318 | 4,409 |
| bitnamilegacy/ | 12-debian-12-r51 | 1056305 | 3,917 |
| bitnamilegacy/ | 9.1.2-debian-12-r0 | 4076442 | 5,892 |
| quay.io/ | RELEASE.2025-08-13T08-35-41Z | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-34757 | libpng1.6 | 1.6.39-2+deb12u5 |
| Low | BIT-java-2026-22018 | java | 1.8.0 |
| Low | BIT-java-2026-60589 | java | 1.8.0 |
| Low | DEBIAN-CVE-2026-54872 | openssl | no fix listed |
| Low | BIT-java-2026-47010 | java | 1.8.0 |
| Low | DEBIAN-CVE-2026-43895 | jq | 1.6-2.1+deb12u2 |
| Low | DEBIAN-CVE-2026-96674 | alsa-lib | no fix listed |
| Low | DEBIAN-CVE-2026-77696 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-96675 | alsa-lib | no fix listed |
| Low | DEBIAN-CVE-2026-27456 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-41991 | gzip | no fix listed |
| Low | DEBIAN-CVE-2026-18508 | tar | no fix listed |
| Low | DEBIAN-CVE-2025-68972 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2026-112060 | rtmpdump | no fix listed |
| Low | DEBIAN-CVE-2023-4016 | procps | no fix listed |
| Low | DEBIAN-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2026-102474 | dash | no fix listed |
| Low | BIT-virtualenv-2026-22702 | virtualenv | 20.36.1 |
| Low | GHSA-597g-3phw-6986 | virtualenv | 20.36.1 |
| Low | BIT-python-2026-0864 | python | 3.10.21 |
| Low | ALPINE-CVE-2025-69418 | openssl | 3.5.5-r0 |
| Low | DEBIAN-CVE-2025-69418 | openssl | 3.0.18-1~deb12u2 |
| Low | DEBIAN-CVE-2007-5686 | shadow | no fix listed |
| Low | BIT-python-2024-3220 | python | 3.14.0 |
| Low | DEBIAN-CVE-2026-18477 | tar | no fix listed |
| Low | ALPINE-CVE-2025-46394 | busybox | 1.37.0-r20 |
| Low | GO-2026-6809 | stdlib | 1.26.10 |
| Low | DEBIAN-CVE-2026-95818 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-105712 | gnupg2 | no fix listed |
| Low | GHSA-fghv-69vj-qj49 | netty-codec-http | 4.1.125.Final |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | GHSA-p47f-322f-whfh | logback-core | 1.5.33 |
| Low | DEBIAN-CVE-2026-40228 | systemd | no fix listed |
| Low | BIT-python-2026-15310 | python | 3.10.22 |
| Low | DEBIAN-CVE-2026-57062 | gnupg2 | no fix listed |
| Low | BIT-java-2026-34268 | java | 1.8.0 |
| Low | GHSA-6vgw-5pg2-w6jp | pip | 26.0 |
| Low | GHSA-6v67-2wr5-gvf4 | logback-core | 1.3.15 |
| Low | DEBIAN-CVE-2026-53910 | diffutils | no fix listed |
| Low | BIT-java-2026-22007 | java | 1.8.0 |
| Low | BIT-python-2026-6879 | python | 3.10.21 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | ALPINE-CVE-2024-58251 | busybox | 1.37.0-r20 |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
| Low | BIT-python-2026-18503 | python | 3.10.21 |
| Low | DEBIAN-CVE-2026-88648 | gnutls28 | no fix listed |
| Low | DEBIAN-CVE-2026-5958 | sed | 4.9-1+deb12u1 |
| Low | DEBIAN-CVE-2026-6368 | glibc | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.0latest | yesterday | 6.0.0-1 | 812501,255 | 16,786 |
| 1.1.1 | 9 days ago | 5.8.1-1 | 812551,266 | 17,052 |
| 1.1.0 | 1 month ago | 5.8.0-1 | 812581,257 | 17,124 |
| 1.0.7 | 1 month ago | 5.8.0-1 | 813071,434 | 19,820 |
| 1.0.6 | 1 month ago | 5.7.6-1 | 812981,416 | 19,428 |
| 1.0.5 | 2 months ago | 5.7.5-1 | 813011,418 | 19,533 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.