sn-console Helm chart
streamnativeScored 14 Sept 2026
StreamNative Console Chart
Latest 1.13.0 5 months agodeploys tag v2.3.27-all 0Artifact Hub
sn-console 1.13.0 deploys 1 container image: streamnative/private-cloud-console. Across them, 166 findings — 0 critical, 0 high. The highest contribution is GHSA-r29c-68gh-xp6x in tomcat-embed-core 10.1.47, fixed in 10.1.55.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| streamnative/ | v2.3.27-all | 0029137 | 1,827 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-r29c-68gh-xp6x | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-98qh-xjc8-98pq | postgresql | 42.7.11 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | GHSA-h6fc-48rj-7qqh | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-5m62-pw8w-7w9f | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-w9fj-cfpg-grvv | netty-codec-http2 | 4.1.132.Final |
| Medium | GHSA-9xv2-5v5q-p794 | tomcat-embed-core | 10.1.58 |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | GHSA-h3x4-894j-xpx5 | tomcat-embed-core | 10.1.58 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | GHSA-gcx9-497g-6cp6 | tomcat-embed-core | 10.1.58 |
| Medium | ALPINE-CVE-2026-33416 | libpng | 1.6.56-r0 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | ALPINE-CVE-2026-31790 | openssl | 3.3.7-r0 |
| Medium | GHSA-cm33-6792-r9fm | netty-codec-dns | 4.1.133.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http | 4.1.133.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http2 | 4.1.133.Final |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.1.136.Final |
| Medium | GHSA-q6cq-mhr2-jmr5 | netty-codec-haproxy | 4.1.136.Final |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.3.7-r0 |
| Medium | GHSA-mf92-479x-3373 | spring-security-web | no fix listed |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.3.7-r0 |
| Medium | GHSA-gx5v-xp9w-j4cg | tomcat-embed-core | 10.1.55 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.3.7-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.3.7-r0 |
| Low | GHSA-g3pr-3p32-fp23 | micrometer-core | no fix listed |
| Low | ALPINE-CVE-2026-33636 | libpng | 1.6.56-r0 |
| Low | GHSA-6jv9-x5w9-2ccm | netty-codec-redis | 4.1.135.Final |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-rqfh-9r24-8c9r | assertj-core | 3.27.7 |
| Low | GHSA-vx9q-rhv9-3jvg | aircompressor | 2.0.3 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | GHSA-45q3-82m4-75jr | netty-handler-proxy | 4.1.133.Final |
| Low | GHSA-w737-wx49-qj23 | micrometer-core | 1.15.12 |
| Low | GHSA-h2qv-fj59-j46j | netty-codec-haproxy | 4.1.135.Final |
| Low | GHSA-cc37-9q2j-3hfv | netty-codec-haproxy | 4.1.135.Final |
| Low | GHSA-8wv5-x4w7-5gww | libthrift | 0.24.0 |
| Low | GHSA-5xrh-qmmq-w6ch | netty-transport-sctp | 4.1.135.Final |
| Low | GHSA-574f-3g2m-x479 | bcprov-jdk18on | 1.80.2 |
| Low | GHSA-7pwc-h2j2-rjgj | libthrift | 0.23.0 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | GHSA-fv25-8xcx-gqjc | tomcat-embed-core | 10.1.55 |
| Low | ALPINE-CVE-2026-31789 | openssl | 3.3.7-r0 |
| Low | GHSA-563x-q5rq-57qp | tomcat-embed-core | 10.1.52 |
| Low | GHSA-4qhr-g3c6-fcfx | netty-codec-xml | 4.1.136.Final |
| Low | GHSA-mgp5-rv84-w37q | tomcat-embed-core | 10.1.52 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.13.0latest | 5 months ago | v2.3.27-all | 0029137 | 1,827 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.