spring-boot-helm-starter Helm chart

Name: spring-boot-helm-starter Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

test

Scored 28 Sept 2026

A Helm chart starter for deploying a Spring Boot app to Kubernetes

Latest 0.1.0deploys tag latest 0Artifact Hub

spring-boot-helm-starter 0.1.0 deploys 1 container image: alexandreroman/hello. Across them, 10,981 findings — 56 critical, 141 high — 46 on CISA KEV. The highest contribution is UBUNTU-CVE-2020-1472 in samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.9, fixed in 2:4.7.6+dfsg~ubuntu-0ubuntu2.20.

Radar Score

121,945561411,5379,246

10,981 findings over 1 of 1 images measured

KEV ×46 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
alexandreroman/hello	latest	561411,5379,246	121,945

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

141 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.8	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.8	2.9.10.4
High	UBUNTU-CVE-2020-17525	subversion@1.9.7-4ubuntu1	1.9.7-4ubuntu1.1
High	UBUNTU-CVE-2019-5482	curl@7.58.0-2ubuntu3.6	7.58.0-2ubuntu3.8
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-0ubuntu2	1:1.2.11.dfsg-0ubuntu2.2
High	UBUNTU-CVE-2022-37434	klibc@2.0.4-9ubuntu2	2.0.4-9ubuntu2.2+esm1
High	UBUNTU-CVE-2022-37434	rsync@3.1.2-2.1ubuntu1	3.1.2-2.1ubuntu1.5
High	UBUNTU-CVE-2024-50302KEV	linux@4.15.0-47.50	4.15.0-236.248
High	UBUNTU-CVE-2025-39964KEV	linux@4.15.0-47.50	4.15.0-245.257
High	UBUNTU-CVE-2023-52755	linux@4.15.0-47.50	no fix listed
High	UBUNTU-CVE-2019-1352	git@1:2.17.1-1ubuntu0.4	1:2.17.1-1ubuntu0.5
High	UBUNTU-CVE-2019-1354	git@1:2.17.1-1ubuntu0.4	1:2.17.1-1ubuntu0.5
High	UBUNTU-CVE-2021-3518	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.4
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.17	9.0.81
High	UBUNTU-CVE-2022-2586KEV	linux@4.15.0-47.50	4.15.0-191.202
High	UBUNTU-CVE-2018-1000035	unzip@6.0-21ubuntu1	6.0-21ubuntu1.1
High	UBUNTU-CVE-2019-11478	linux@4.15.0-47.50	4.15.0-52.56
High	UBUNTU-CVE-2019-11479	linux@4.15.0-47.50	4.15.0-54.58
High	UBUNTU-CVE-2021-3449	openssl@1.1.0g-2ubuntu4.3	1.1.1-1ubuntu2.1~18.04.9
High	UBUNTU-CVE-2021-3449	postgresql-10@10.7-0ubuntu0.18.04.1	10.18-0ubuntu0.18.04.1
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.17	9.0.106
High	UBUNTU-CVE-2024-28182	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	UBUNTU-CVE-2022-0572	vim@2:8.0.1453-1ubuntu1	2:8.0.1453-1ubuntu1.13
High	UBUNTU-CVE-2019-12735	vim@2:8.0.1453-1ubuntu1	2:8.0.1453-1ubuntu1.1
High	UBUNTU-CVE-2021-30560	libxslt@1.1.29-5	1.1.29-5ubuntu0.3
High	UBUNTU-CVE-2019-16746	linux@4.15.0-47.50	4.15.0-72.81
High	UBUNTU-CVE-2025-22037	linux@4.15.0-47.50	no fix listed
High	UBUNTU-CVE-2019-14901	linux@4.15.0-47.50	4.15.0-74.84
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.23	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@9.0.17	9.0.35
High	UBUNTU-CVE-2022-1552	postgresql-10@10.7-0ubuntu0.18.04.1	10.21-0ubuntu0.18.04.1
High	UBUNTU-CVE-2024-3596	krb5@1.16-2ubuntu0.1	1.16-2ubuntu0.4+esm3
High	UBUNTU-CVE-2021-3517	libxml2@2.9.4+dfsg1-6.1ubuntu1.2	2.9.4+dfsg1-6.1ubuntu1.4
High	UBUNTU-CVE-2024-2511	openssl@1.1.0g-2ubuntu4.3	1.1.1-1ubuntu2.1~18.04.23+esm10
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.8	2.9.10
High	GHSA-mmrq-6999-72v8	openssl@2.1.0	2.1.2
High	UBUNTU-CVE-2021-31535	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4
High	UBUNTU-CVE-2019-19012	libonig@6.7.0-1	6.7.0-1ubuntu0.1~esm2
High	GHSA-558x-2xjg-6232	spring-expression@5.1.6.RELEASE	5.2.20.RELEASE
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.17	9.0.86
High	UBUNTU-CVE-2022-35737	sqlite3@3.22.0-1	3.22.0-1ubuntu0.7
High	UBUNTU-CVE-2022-43945	linux@4.15.0-47.50	4.15.0-202.213
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.8	2.9.9.1
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.8	2.9.9
High	UBUNTU-CVE-2019-18634	sudo@1.8.21p2-3ubuntu1	1.8.21p2-3ubuntu1.2
High	UBUNTU-CVE-2022-32206	curl@7.58.0-2ubuntu3.6	7.58.0-2ubuntu3.19
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.8	2.9.10.8
High	UBUNTU-CVE-2019-9948	python2.7@2.7.15~rc1-1ubuntu0.1	2.7.15-4ubuntu4~18.04.1
High	UBUNTU-CVE-2019-9948	python3.6@3.6.7-1~18.04	3.6.8-1~18.04.2
High	UBUNTU-CVE-2019-5010	python3.6@3.6.7-1~18.04	3.6.8-1~18.04.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	—	latest	561411,5379,246	121,945

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/test/spring-boot-helm-starter.svg)](https://charts.stackradar.io/charts/test/spring-boot-helm-starter)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.