StackRadar

sn-platform 1.11.46 Helm chart

streamnative

Scored 1 Oct 2026

StreamNative Platform Chart

Version 1.11.46 yesterdaydeploys tag v1.5.0 2Artifact Hub

sn-platform 1.11.46 deploys 9 container images: quay.io/prometheus/node-exporter, jimmidyson/configmap-reload, quay.io/prometheus/alertmanager, streamnative/sn-platform and 5 more. Across the 7 measured, 8,072 findings — 11 critical, 44 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.22, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

73,73311445377,480

8,072 findings over 7 of 9 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
quay.io/prometheus/node-exporterv1.5.003161191,426
jimmidyson/configmap-reload×2v0.8.000391780
quay.io/prometheus/alertmanagerv0.25.003141231,408
streamnative/sn-platform×53.3.3.3—not yet scanned
streamnative/apache-pulsar-grafana-dashboard-k8s0.1.211274486,82765,888
quay.io/prometheus/prometheusv2.43.004221441,729
docker-proxy.streamnative.io/streamnative/private-cloud-console×2v2.3.23—unmeasured
library/busybox1.37.0-uclibc00000
streamnative/pulsar_vault_init×3v1.0.707341762,502

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

7,404 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-6wrf-mxfj-pf5pgithub.com/docker/docker@v20.10.10+incompatible20.10.24
MediumUBUNTU-CVE-2026-8376perl@5.30.0-9ubuntu0.55.30.0-9ubuntu0.5+esm2
MediumUBUNTU-CVE-2026-80714linux@5.4.0-182.202no fix listed
MediumGHSA-m7wr-2xf7-cm9pgithub.com/jackc/pgx@v3.3.0+incompatible4.18.2
MediumUBUNTU-CVE-2025-34034linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-74490linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2024-49997linux@5.4.0-182.2025.4.0-208.228
MediumUBUNTU-CVE-2026-80603linux@5.4.0-182.202no fix listed
MediumGHSA-r277-6w6q-xmqwgithub.com/getkin/kin-openapi@v0.112.00.144.0
MediumUBUNTU-CVE-2026-18924curl@7.68.0-1ubuntu2.227.68.0-1ubuntu2.25+esm9
MediumUBUNTU-CVE-2024-45491expat@2.2.9-1ubuntu0.62.2.9-1ubuntu0.7
MediumGHSA-p782-xgp4-8hr8golang.org/x/sys@v0.0.0-20220207234003-57398862261d0.0.0-20220412211240-33da011f77ad
MediumUBUNTU-CVE-2020-23026gcc-defaults@4:9.3.0-1ubuntu2no fix listed
MediumUBUNTU-CVE-2020-23026gcc-9@9.4.0-1ubuntu1~20.04.2no fix listed
MediumUBUNTU-CVE-2024-42284linux@5.4.0-182.2025.4.0-200.220
MediumUBUNTU-CVE-2025-40074linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-63072openssl@1.1.1f-1ubuntu2.221.1.1f-1ubuntu2.24+esm5
MediumUBUNTU-CVE-2026-97413linux@5.4.0-182.202no fix listed
MediumGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.44.01.82.2
MediumUBUNTU-CVE-2025-69720ncurses@6.2-0ubuntu2.16.2-0ubuntu2.1+esm1
MediumUBUNTU-CVE-2026-74345linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-53246linux@5.4.0-182.2025.4.0-238.258
MediumGHSA-4f99-4q7p-p3ghgithub.com/sirupsen/logrus@v1.8.11.8.3
MediumGHSA-4r8x-2p26-976pgithub.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac0.0.0-20230731152917-f99041a5c027
MediumUBUNTU-CVE-2024-42285linux@5.4.0-182.2025.4.0-200.220
MediumUBUNTU-CVE-2026-63825linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-9076openssl@1.1.1f-1ubuntu2.221.1.1f-1ubuntu2.24+esm4
MediumUBUNTU-CVE-2026-68097linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-68098linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-72420linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89537linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2025-68315linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-6100python3.8@3.8.10-0ubuntu1~20.04.9no fix listed
MediumUBUNTU-CVE-2025-69421openssl@1.1.1f-1ubuntu2.221.1.1f-1ubuntu2.24+esm2
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.44.01.83.1
MediumUBUNTU-CVE-2026-100075linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-53355linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-74581linux@5.4.0-182.202no fix listed
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.1.00.35.0
MediumGHSA-hqxw-f8mx-cpmwgithub.com/docker/distribution@v2.8.1+incompatible2.8.2-beta.1
MediumUBUNTU-CVE-2022-48655linux@5.4.0-182.2025.4.0-190.210
MediumUBUNTU-CVE-2024-35854linux@5.4.0-182.2025.4.0-189.209
MediumUBUNTU-CVE-2026-11972python3.8@3.8.10-0ubuntu1~20.04.9no fix listed
MediumUBUNTU-CVE-2026-43232linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89671linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-89672linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2024-27398linux@5.4.0-182.2025.4.0-192.212
MediumUBUNTU-CVE-2023-53751linux@5.4.0-182.202no fix listed
MediumUBUNTU-CVE-2026-23112linux@5.4.0-182.2025.4.0-229.249
MediumUBUNTU-CVE-2025-0938python3.8@3.8.10-0ubuntu1~20.04.93.8.10-0ubuntu1~20.04.16

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.11.46latestyesterdayv1.5.011445377,48073,733
1.11.459 days agov1.5.011445377,48073,733
1.11.443 months agov1.5.011445377,48073,733

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/streamnative/sn-platform.svg)](https://charts.stackradar.io/charts/streamnative/sn-platform)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 1 Oct 2026 · scanned 1 Oct 2026 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.