thehive 2.0.0 Helm chart
strangebee-helmOfficialVerified publisherScored 21 Oct 2026
The official Helm Chart of TheHive for Kubernetes
Version 2.0.0 yesterdayapp version 6.0.0-1 4Artifact Hub
thehive 2.0.0 deploys 7 container images: quay.io/minio/minio, curlimages/curl, strangebee/thehive, bitnamilegacy/cassandra and 3 more. Across the 5 measured, 1,514 findings — 8 critical, 1 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >= 1.23.0-0; rendered for Kubernetes 1.23.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | RELEASE.2025-09-07T16-13-09Z | — | unmeasured |
| curlimages/ | 8.17.0 | 102133 | 783 |
| strangebee/ | 6.0.0-1 | 0027157 | 1,785 |
| bitnamilegacy/ | 4.1.7-debian-12-r3 | 2170318 | 4,409 |
| bitnamilegacy/ | 12-debian-12-r51 | 1056305 | 3,917 |
| bitnamilegacy/ | 9.1.2-debian-12-r0 | 4076442 | 5,892 |
| quay.io/ | RELEASE.2025-08-13T08-35-41Z | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | BIT-java-2026-21932 | java | 1.8.0 |
| Low | DEBIAN-CVE-2025-6395 | gnutls28 | 3.7.9-2+deb12u5 |
| Low | GHSA-r2xf-8xr9-62gw | jline-builtins | 3.30.15 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | DEBIAN-CVE-2026-5928 | glibc | no fix listed |
| Low | GHSA-7hhh-6rmp-j9qf | jackson-core | 2.18.11 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | DEBIAN-CVE-2025-15281 | glibc | 2.36-9+deb12u14 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2026-82209 | curl | no fix listed |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | GO-2026-5970 | golang.org/ | 0.39.0 |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | BIT-python-2025-12084 | python | 3.10.20 |
| Low | DEBIAN-CVE-2026-42497 | perl | 5.36.0-7+deb12u4 |
| Low | BIT-java-2026-47057 | java | 1.8.0 |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | GHSA-jmp9-x22r-554x | spring-core | no fix listed |
| Low | DEBIAN-CVE-2026-13608 | curl | no fix listed |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | DEBIAN-CVE-2026-48962 | perl | 5.36.0-7+deb12u4 |
| Low | DEBIAN-CVE-2026-42011 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DSA-5867-1 | gnutls28 | 3.7.9-2+deb12u4 |
| Low | GHSA-676x-f7gg-47vc | netty-resolver-dns | 4.1.135.Final |
| Low | GHSA-vc5p-v9hr-52mj | log4j-core | 2.25.3 |
| Low | DEBIAN-CVE-2025-7458 | sqlite3 | no fix listed |
| Low | GHSA-cxp5-3px4-pw24 | jackson-databind | 2.18.11 |
| Low | GHSA-wv8q-qhhj-9h54 | jackson-databind | 2.18.11 |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | GHSA-qp49-qgx5-5m26 | bc-fips | 1.0.2.7 |
| Low | GHSA-qp49-qgx5-5m26 | bcprov-jdk18on | 1.85 |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2025-24528 | krb5 | 1.20.1-2+deb12u3 |
| Low | DEBIAN-CVE-2026-11822 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-2219 | dpkg | 1.21.23 |
| Low | DEBIAN-CVE-2025-15661 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GO-2026-6617 | golang.org/ | 0.60.0 |
| Low | GO-2026-6617 | stdlib | 1.26.9 |
| Low | BIT-python-2026-19553 | python | 3.10.22 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | DEBIAN-CVE-2026-75803 | openssl | 3.0.22-1~deb12u1 |
| Low | DEBIAN-CVE-2026-42012 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | GHSA-c3fc-8qff-9hwx | bcprov-jdk18on | 1.84 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.0latest | yesterday | 6.0.0-1 | 812501,255 | 16,786 |
| 1.1.1 | 9 days ago | 5.8.1-1 | 812551,266 | 17,052 |
| 1.1.0 | 1 month ago | 5.8.0-1 | 812581,257 | 17,124 |
| 1.0.7 | 1 month ago | 5.8.0-1 | 813071,434 | 19,820 |
| 1.0.6 | 1 month ago | 5.7.6-1 | 812981,416 | 19,428 |
| 1.0.5 | 2 months ago | 5.7.5-1 | 813011,418 | 19,533 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.