sn-platform Helm chart

Name: sn-platform Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

streamnative

Scored 14 Sept 2026

StreamNative Platform Chart

Latest 1.11.44 2 months agodeploys tag v1.5.0 2Artifact Hub

sn-platform 1.11.44 deploys 9 container images: quay.io/prometheus/node-exporter, jimmidyson/configmap-reload, quay.io/prometheus/alertmanager, streamnative/sn-platform and 5 more. Across the 7 measured, 1,385 findings — 4 critical, 31 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.22, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

15,4774311881,161

1,385 findings over 7 of 9 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.5.0	0314121	1,429
jimmidyson/configmap-reload×2	v0.8.0	00391	776
quay.io/prometheus/alertmanager	v0.25.0	0312125	1,411
streamnative/sn-platform×5	3.3.3.3	—	not yet scanned
streamnative/apache-pulsar-grafana-dashboard-k8s	0.1.2	414109503	7,642
quay.io/prometheus/prometheus	v2.43.0	0419142	1,716
docker-proxy.streamnative.io/streamnative/private-cloud-console×2	v2.3.23	—	unmeasured
library/busybox	1.37.0-uclibc	0000	0
streamnative/pulsar_vault_init×3	v1.0.7	0731179	2,503

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

721 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-449p-3h89-pw88	github.com/go-git/go-git/v5@v5.4.2	5.11.0
Medium	UBUNTU-CVE-2024-37371	krb5@1.17-6ubuntu4.4	1.17-6ubuntu4.6
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-cx63-2mw6-8hw5	setuptools@45.2.0	70.0.0
Medium	UBUNTU-CVE-2024-6345	python-pip@20.0.2-5ubuntu1.10	20.0.2-5ubuntu1.10+esm2
Medium	UBUNTU-CVE-2024-6345	setuptools@45.2.0-1ubuntu0.1	45.2.0-1ubuntu0.2
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-12ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2024-4741	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23
Medium	GHSA-v725-9546-7q7m	github.com/go-git/go-git/v5@v5.4.2	5.13.0
Medium	GO-2025-4153	github.com/grafana/grafana@v9.5.6	no fix listed
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.44.0	1.79.3
Medium	GHSA-qwmp-2cf2-g9g6	wheel@0.34.2	0.38.1
Medium	GHSA-r9hx-vwmv-q579	setuptools@45.2.0	65.5.1
Medium	UBUNTU-CVE-2026-19931	curl@7.68.0-1ubuntu2.22	no fix listed
Medium	GHSA-232p-vwff-86mp	github.com/docker/docker@v20.10.10+incompatible	20.10.24
Medium	GHSA-mrww-27vc-gghv	github.com/jackc/pgx@v3.3.0+incompatible	4.18.2
Medium	PYSEC-2025-49	setuptools@45.2.0	78.1.1
Medium	UBUNTU-CVE-2025-47273	setuptools@45.2.0-1ubuntu0.1	45.2.0-1ubuntu0.3
Medium	UBUNTU-CVE-2021-33560	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Medium	UBUNTU-CVE-2023-3446	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.fips.20
Medium	UBUNTU-CVE-2024-7592	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.12
Medium	UBUNTU-CVE-2016-20013	glibc@2.31-0ubuntu9.16	no fix listed
Medium	UBUNTU-CVE-2024-6232	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.12
Medium	UBUNTU-CVE-2023-31486	perl@5.30.0-9ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2018-5709	krb5@1.17-6ubuntu4.4	no fix listed
Medium	UBUNTU-CVE-2024-28757	expat@2.2.9-1ubuntu0.6	no fix listed
Medium	UBUNTU-CVE-2024-8088	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.12
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.4.0
Medium	UBUNTU-CVE-2018-20225	python-pip@20.0.2-5ubuntu1.10	no fix listed
Medium	UBUNTU-CVE-2023-52425	expat@2.2.9-1ubuntu0.6	no fix listed
Medium	GHSA-fwv2-65wh-2w8c	github.com/snowflakedb/gosnowflake@v1.6.3	1.6.19
Medium	UBUNTU-CVE-2011-10043	perl@5.30.0-9ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2022-2097	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.fips.16
Medium	UBUNTU-CVE-2025-13836	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.18+esm4
Medium	UBUNTU-CVE-2026-4176	perl@5.30.0-9ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2026-18924	curl@7.68.0-1ubuntu2.22	no fix listed
Medium	GHSA-8pgv-569h-w5rw	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.40.0	0.46.0
Medium	UBUNTU-CVE-2023-5678	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.fips.21
Medium	UBUNTU-CVE-2025-9230	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm1
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	UBUNTU-CVE-2026-11856	curl@7.68.0-1ubuntu2.22	7.68.0-1ubuntu2.25+esm6
Medium	UBUNTU-CVE-2017-20230	perl@5.30.0-9ubuntu0.5	no fix listed
Medium	GO-2024-2523	github.com/grafana/grafana@v9.5.6	no fix listed
Medium	GO-2026-4887	github.com/docker/docker@v20.10.10+incompatible	no fix listed
Medium	GHSA-rcjv-mgp8-qvmr	go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0	0.44.0
Medium	GHSA-rcjv-mgp8-qvmr	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0	0.44.0
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.6.13-2ubuntu1.11	3.6.13-2ubuntu1.12+esm2
Medium	UBUNTU-CVE-2025-59375	expat@2.2.9-1ubuntu0.6	2.2.9-1ubuntu0.8+esm1
Medium	UBUNTU-CVE-2024-8176	expat@2.2.9-1ubuntu0.6	no fix listed
Medium	UBUNTU-CVE-2024-45492	expat@2.2.9-1ubuntu0.6	2.2.9-1ubuntu0.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.11.44latest	2 months ago	v1.5.0	4311881,161	15,477

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/streamnative/sn-platform.svg)](https://charts.stackradar.io/charts/streamnative/sn-platform)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.