shenyu Helm chart

Name: shenyu Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

test-helm

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 2.4.21 4 years agodeploys tag 2.4.2 0Artifact Hub

shenyu 2.4.21 deploys 2 container images: apache/shenyu-admin and apache/shenyu-bootstrap. Across them, 543 findings — 28 critical, 47 high — 12 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.2.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

12,5132847231237

543 findings over 2 of 2 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
apache/shenyu-admin	2.4.2	1719111120	6,190
apache/shenyu-bootstrap	2.4.2	1128120117	6,323

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

380 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.43.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.64	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.64	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@5.2.2.RELEASE	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.38.Final	4.1.136.Final
Low	ALPINE-CVE-2020-28928	musl@1.1.20-r4	1.1.20-r6
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.2.2.RELEASE	5.2.18
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.0.18.Final	6.2.0.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.38.Final	4.1.136.Final
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.38.Final	4.1.133.Final
Low	GHSA-5843-p793-ghmm	spring-webflux@5.2.2.RELEASE	no fix listed
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-wf66-mphr-4c4r	kafka-clients@2.3.1	3.9.2
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.2.2.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.2.2.RELEASE	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.43.Final	4.1.135.Final
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.38.Final	4.1.129.Final
Low	GHSA-fcvm-3cpj-f9qx	shiro-core@1.7.0	2.2.0
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.43.Final	4.1.136.Final
Low	GHSA-72pg-x5f8-j25j	spring-webflux@5.2.2.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.2.2.RELEASE	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webflux@5.2.2.RELEASE	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.2.2.RELEASE	no fix listed
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.38.Final	4.1.133.Final
Low	GHSA-5m4m-73w9-8433	spring-data-commons@2.2.3.RELEASE	no fix listed
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.38.Final	4.1.115.Final
Low	GHSA-6gf2-pvqw-37ph	spring-core@5.2.2.RELEASE	5.2.19
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.38.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.10.1	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.38.Final	4.1.118.Final
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.38.Final	4.1.136.Final
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@2.2.3.RELEASE	no fix listed
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.2.2.RELEASE	no fix listed
Low	GHSA-c6r4-qjmw-cvj2	shiro-web@1.7.0	2.2.0
Low	GHSA-83f7-v6px-pp3h	spring-webflux@5.2.2.RELEASE	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.10.1	2.18.8
Low	GHSA-xg2j-3hj6-pc24	spring-data-keyvalue@2.2.3.RELEASE	no fix listed
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.2.2.RELEASE	no fix listed
Low	GHSA-c244-p6m5-vqj6	shiro-spring@1.7.0	2.1.0
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.10.1	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.8	42.2.27
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.2.2.RELEASE	no fix listed
Low	GHSA-6p4f-wcwh-5vvm	spring-webflux@5.2.2.RELEASE	no fix listed
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.2.1.RELEASE	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.2.2.RELEASE	no fix listed
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.38.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.38.Final	4.1.133.Final
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.2.2.RELEASE	5.3.39
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.43.Final	4.1.135.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.4.21latest	4 years ago	2.4.2	2847231237	12,513

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/test-helm/shenyu.svg)](https://charts.stackradar.io/charts/test-helm/shenyu)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.