StackRadar

sn-platform 1.11.46 Helm chart

streamnative

Scored 1 Oct 2026

StreamNative Platform Chart

Version 1.11.46 yesterdaydeploys tag v1.5.0 2Artifact Hub

sn-platform 1.11.46 deploys 9 container images: quay.io/prometheus/node-exporter, jimmidyson/configmap-reload, quay.io/prometheus/alertmanager, streamnative/sn-platform and 5 more. Across the 7 measured, 8,072 findings — 11 critical, 44 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.22, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

73,73311445377,480

8,072 findings over 7 of 9 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
quay.io/prometheus/node-exporterv1.5.003161191,426
jimmidyson/configmap-reload×2v0.8.000391780
quay.io/prometheus/alertmanagerv0.25.003141231,408
streamnative/sn-platform×53.3.3.3—not yet scanned
streamnative/apache-pulsar-grafana-dashboard-k8s0.1.211274486,82765,888
quay.io/prometheus/prometheusv2.43.004221441,729
docker-proxy.streamnative.io/streamnative/private-cloud-console×2v2.3.23—unmeasured
library/busybox1.37.0-uclibc00000
streamnative/pulsar_vault_init×3v1.0.707341762,502

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

468 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2026-89530linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89550linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89652linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89676linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89686linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-90235linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-72098linux@5.4.0-182.202no fix listed
MediumGHSA-69ch-w2m2-3vjpgolang.org/x/text@v0.3.70.3.8
MediumUBUNTU-CVE-2026-52999linux@5.4.0-182.2025.4.0-234.254
MediumUBUNTU-CVE-2024-38612linux@5.4.0-182.2025.4.0-192.212
MediumGO-2024-2523github.com/grafana/grafana@v9.5.6no fix listed
MediumUBUNTU-CVE-2026-72472linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-74752linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89659linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89708linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-90036linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-90037linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2025-40343linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-72200linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89633linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89675linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89972linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-72421linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89637linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-52986linux@5.4.0-182.2025.4.0-234.254
MediumUBUNTU-CVE-2020-26559linux@5.4.0-182.202no fix listed
MediumGHSA-rcjv-mgp8-qvmrgo.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.00.44.0
MediumGHSA-rcjv-mgp8-qvmrgo.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.00.44.0
MediumUBUNTU-CVE-2025-68192linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-52924linux@5.4.0-182.2025.4.0-234.254
MediumUBUNTU-CVE-2026-7210python3.8@3.8.10-0ubuntu1~20.04.9no fix listed
MediumUBUNTU-CVE-2025-40252linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-64320linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-43037linux@5.4.0-182.2025.4.0-233.253
MediumUBUNTU-CVE-2026-53224linux@5.4.0-182.2025.4.0-238.258
MediumUBUNTU-CVE-2024-8176expat@2.2.9-1ubuntu0.6no fix listed
MediumUBUNTU-CVE-2025-59375expat@2.2.9-1ubuntu0.62.2.9-1ubuntu0.8+esm2
MediumUBUNTU-CVE-2026-89697linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-68300linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-43071linux@5.4.0-182.2025.4.0-234.254
MediumUBUNTU-CVE-2026-43117linux@5.4.0-182.2025.4.0-233.253
MediumUBUNTU-CVE-2026-43407linux@5.4.0-182.2025.4.0-233.253
MediumUBUNTU-CVE-2026-52958linux@5.4.0-182.2025.4.0-234.254
MediumUBUNTU-CVE-2026-53043linux@5.4.0-182.2025.4.0-238.258
MediumUBUNTU-CVE-2026-53186linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-53225linux@5.4.0-182.2025.4.0-238.258
MediumUBUNTU-CVE-2026-72296linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-74287linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-90414linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2025-68794linux@5.4.0-182.202no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.11.46latestyesterdayv1.5.011445377,48073,733
1.11.4510 days agov1.5.011445377,48073,733
1.11.443 months agov1.5.011445377,48073,733

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/streamnative/sn-platform.svg)](https://charts.stackradar.io/charts/streamnative/sn-platform)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 1 Oct 2026 · scanned 1 Oct 2026 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.