streama 1.0.1 Helm chart

Name: streama Helm chart 1.0.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

streama

Scored 14 Sept 2026

Self-hosted streaming media server

Version 1.0.1 4 years agoapp version 1.10.4 0Artifact Hub

streama 1.0.1 deploys 2 container images: just1not2/streama and bitnami/mysql. Across the 1 measured, 306 findings — 19 critical, 52 high — 7 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 4.3.6.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >=1.22.0; rendered for Kubernetes 1.22.0.

Radar Score

8,5541952131104

306 findings over 1 of 2 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
just1not2/streama	1.10.4	1952131104	8,554
bitnami/mysql	5.7	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

306 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.3.6.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@4.3.6.RELEASE	5.2.20.RELEASE
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.11	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.11	8.5.51
Critical	GHSA-p5hg-3xm3-gcjg	spring-messaging@4.3.6.RELEASE	4.3.16.RELEASE
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.17	2.0
Critical	GHSA-3rmv-2pg5-xvqj	spring-messaging@4.3.6.RELEASE	4.3.16.RELEASE
Critical	GHSA-xjgh-84hx-56c5KEV	tomcat-embed-core@8.5.11	8.5.23
Critical	GHSA-8vmx-qmch-mpqg	tomcat-embed-core@8.5.11	8.5.40
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	GHSA-9r24-gp44-h3pm	tika-core@1.12	1.18
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.3.3	2.7.9.2
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.11	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.11	no fix listed
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@8.5.11	8.5.57
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.3.3	2.6.7.1
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	GHSA-ghgj-3xqr-6jfm	jetty-server@8.1.15.v20140411	9.2.9.v20150224
High	GHSA-q4hg-rmq2-52q9	tomcat-embed-core@8.5.11	8.5.41
High	GHSA-qcxh-w3j9-58qr	tomcat-embed-core@8.5.11	8.5.38
High	GHSA-4wrc-f8pq-fpqp	spring-web@4.3.6.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.11	no fix listed
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.11	no fix listed
High	GHSA-4w82-r329-3q67	jackson-databind@2.3.3	2.6.7.4
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@4.3.6.RELEASE	no fix listed
High	GHSA-26vr-8j45-3r4w	jetty-server@8.1.15.v20140411	9.4.39
High	GHSA-r4x2-3cq5-hqvp	tomcat-embed-core@8.5.11	8.5.32
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.11	8.5.55
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.3.3	2.6.7.5
High	GHSA-6x9x-8qw9-9pp6	jetty-server@8.1.15.v20140411	9.2.25.v20180606
High	GHSA-q93h-jc49-78gg	jackson-databind@2.3.3	2.7.9.7
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.3.3	2.7.9.7
High	GHSA-xphj-m9cc-8fmq	groovy@2.4.7	2.4.8
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.11	8.5.94
High	GHSA-vgg8-72f2-qm23	jetty-server@8.1.15.v20140411	9.2.25.v20180606
High	GHSA-645p-88qh-w398	jackson-databind@2.3.3	2.6.7.3
High	GHSA-hh32-7344-cg2f	spring-security-web@4.1.4.RELEASE	5.4.11
High	GHSA-hh32-7344-cg2f	spring-security-core@3.0.4	5.4.11
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.17	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.11	8.5.55
High	GHSA-9gph-22xh-8x98	jackson-databind@2.3.3	2.6.7.5
High	GHSA-9mxf-g3x6-wv74	jackson-databind@2.8.6	2.8.11.3
High	GHSA-jjpq-gp5q-8q6w	tomcat-embed-core@8.5.11	8.5.40
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.3.3	2.6.7.3
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.3.3	2.6.7.3
High	GHSA-f9hv-mg5h-xcw9	jackson-databind@2.8.6	2.8.11.3
High	GHSA-mx9v-gmh4-mgqw	jackson-databind@2.8.6	2.8.11.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.1latest	4 years ago	1.10.4	1952131104	8,554

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/streama/streama.svg)](https://charts.stackradar.io/charts/streama/streama)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.