spring-boot-helm-starter Helm chart

Name: spring-boot-helm-starter Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

test

Scored 28 Sept 2026

A Helm chart starter for deploying a Spring Boot app to Kubernetes

Latest 0.1.0deploys tag latest 0Artifact Hub

spring-boot-helm-starter 0.1.0 deploys 1 container image: alexandreroman/hello. Across them, 10,981 findings — 56 critical, 141 high — 46 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.9, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

121,945561411,5379,246

10,981 findings over 1 of 1 images measured

KEV ×46 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
alexandreroman/hello	latest	561411,5379,246	121,945

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

10,981 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2020-1472KEV	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.9	2:4.7.6+dfsg~ubuntu-0ubuntu2.20
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.1.6.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.1.6.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.1.4.RELEASE	2.5.12
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.17	9.0.99
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@9.0.17	9.0.31
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.0g-2ubuntu4.3	1.1.1-1ubuntu2.1~18.04.19
Critical	UBUNTU-CVE-2022-2068	openssl1.0@1.0.2n-1ubuntu5.3	1.0.2n-1ubuntu5.10
Critical	UBUNTU-CVE-2020-15999KEV	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.1
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.0g-2ubuntu4.3	1.1.1-1ubuntu2.1~18.04.13
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.0g-2ubuntu4.3	1.1.1-1ubuntu2.1~18.04.17
Critical	UBUNTU-CVE-2022-1292	openssl1.0@1.0.2n-1ubuntu5.3	1.0.2n-1ubuntu5.9
Critical	UBUNTU-CVE-2023-38408	openssh@1:7.6p1-4ubuntu0.3	1:7.6p1-4ubuntu0.7+esm1
Critical	UBUNTU-CVE-2021-3493KEV	linux@4.15.0-47.50	4.15.0-142.146
Critical	UBUNTU-CVE-2023-4863KEV	libwebp@0.6.1-2	0.6.1-2ubuntu0.18.04.2+esm1
Critical	UBUNTU-CVE-2023-5217KEV	libvpx@1.7.0-3	1.7.0-3ubuntu0.18.04.1+esm1
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.45+dfsg-1ubuntu1.1	2.4.45+dfsg-1ubuntu1.11
Critical	UBUNTU-CVE-2021-22555KEV	linux@4.15.0-47.50	4.15.0-144.148
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.23	2.0
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2+esm1
Critical	UBUNTU-CVE-2022-23521	git@1:2.17.1-1ubuntu0.4	1:2.17.1-1ubuntu0.15
Critical	UBUNTU-CVE-2025-48384KEV	git@1:2.17.1-1ubuntu0.4	1:2.17.1-1ubuntu0.18+esm2
Critical	UBUNTU-CVE-2021-44142	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.9	2:4.7.6+dfsg~ubuntu-0ubuntu2.28
Critical	UBUNTU-CVE-2023-0266KEV	linux@4.15.0-47.50	4.15.0-208.220
Critical	UBUNTU-CVE-2025-1094	postgresql-10@10.7-0ubuntu0.18.04.1	10.23-0ubuntu0.18.04.2+esm3
Critical	UBUNTU-CVE-2019-13272KEV	linux@4.15.0-47.50	4.15.0-58.64
Critical	UBUNTU-CVE-2021-1048KEV	linux@4.15.0-47.50	4.15.0-126.129
Critical	UBUNTU-CVE-2021-3156KEV	sudo@1.8.21p2-3ubuntu1	1.8.21p2-3ubuntu1.4
Critical	UBUNTU-CVE-2022-0492KEV	linux@4.15.0-47.50	4.15.0-173.182
Critical	UBUNTU-CVE-2024-1086KEV	linux@4.15.0-47.50	4.15.0-223.235
Critical	UBUNTU-CVE-2024-36971KEV	linux@4.15.0-47.50	4.15.0-230.242
Critical	UBUNTU-CVE-2024-53104KEV	linux@4.15.0-47.50	4.15.0-235.247
Critical	UBUNTU-CVE-2024-53197KEV	linux@4.15.0-47.50	4.15.0-239.251
Critical	UBUNTU-CVE-2026-31431KEV	linux@4.15.0-47.50	4.15.0-250.262
Critical	UBUNTU-CVE-2022-0435	linux@4.15.0-47.50	4.15.0-173.182
Critical	UBUNTU-CVE-2021-25216	bind9@1:9.11.3+dfsg-1ubuntu1.5	1:9.11.3+dfsg-1ubuntu1.15
Critical	UBUNTU-CVE-2019-14287	sudo@1.8.21p2-3ubuntu1	1.8.21p2-3ubuntu1.1
Critical	UBUNTU-CVE-2019-8457	sqlite3@3.22.0-1	3.22.0-1ubuntu0.1
Critical	UBUNTU-CVE-2019-8457	db5.3@5.3.28-13.1ubuntu1	5.3.28-13.1ubuntu1.1
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
Critical	UBUNTU-CVE-2023-50387	bind9@1:9.11.3+dfsg-1ubuntu1.5	1:9.11.3+dfsg-1ubuntu1.19+esm3
Critical	UBUNTU-CVE-2023-50387	unbound@1.6.7-1ubuntu2.2	no fix listed
Critical	UBUNTU-CVE-2022-41903	git@1:2.17.1-1ubuntu0.4	1:2.17.1-1ubuntu0.15
Critical	UBUNTU-CVE-2019-11477	linux@4.15.0-47.50	4.15.0-52.56
Critical	UBUNTU-CVE-2025-38352KEV	linux@4.15.0-47.50	4.15.0-243.255
Critical	UBUNTU-CVE-2025-10230	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.9	2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
Critical	GHSA-8wx2-9q48-vm9r	spring-webmvc@5.1.6.RELEASE	5.1.13.RELEASE
Critical	UBUNTU-CVE-2021-21300	git@1:2.17.1-1ubuntu0.4	1:2.17.1-1ubuntu0.8
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@9.0.17	9.0.37
Critical	UBUNTU-CVE-2020-36221	openldap@2.4.45+dfsg-1ubuntu1.1	2.4.45+dfsg-1ubuntu1.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	—	latest	561411,5379,246	121,945

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/test/spring-boot-helm-starter.svg)](https://charts.stackradar.io/charts/test/spring-boot-helm-starter)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.