thingsboard-cluster 0.2.26 Helm chart

Name: thingsboard-cluster Helm chart 0.2.26: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thingsboard-cluster-betta

Scored 14 Sept 2026

Helm chart for Thingsboard cluster.

Version 0.2.26 6 months agoapp version 3.6.0 2Artifact Hub

thingsboard-cluster 0.2.26 deploys 6 container images: thingsboard/tb-web-ui, bitnamilegacy/kafka, bitnamilegacy/postgresql, bitnamilegacy/redis and 2 more. Across them, 1,204 findings — 5 critical, 24 high — 11 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.73, fixed in 9.0.99.

Radar Score

14,566524196978

1,204 findings over 6 of 6 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
thingsboard/tb-web-ui	3.6.0	011581	1,209
bitnamilegacy/kafka	3.5.0-debian-11-r0	0533206	2,746
bitnamilegacy/postgresql	16.0.0-debian-11-r3	111486	1,241
bitnamilegacy/redis	7.2.1-debian-11-r0	2327114	1,840
bitnamilegacy/zookeeper	3.9.0-debian-11-r11	0233266	3,050
thingsboard/tb-node×2	3.6.0	21274225	4,480

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

749 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.69	1.78
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.91.Final	4.1.135.Final
Low	GHSA-r6q2-hw4h-h46w	tar@6.1.11	7.5.4
Low	GHSA-mjmq-gwgm-5qhm	sshd-sftp@2.8.0	2.9.3
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.0	4.3.2
Low	GHSA-v626-r774-j7f8	tinymce@5.10.7	5.10.9
Low	GHSA-x873-6rgc-94jc	spring-security-core@5.7.7	5.7.8
Low	BIT-postgresql-2026-14679	PostgreSQL@16.0.0	14.24.0
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.7.10	no fix listed
Low	GHSA-r292-9mhp-454m	tar@6.1.11	7.5.21
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.69	1.84
Low	DSA-5478-1	openjdk-11@11.0.18+10-1~deb11u1	11.0.20+8-1~deb11u1
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.1	1.16.0
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.51.v20230217	9.4.52
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.69	1.78
Low	GHSA-42wg-hm62-jcwg	tomcat-embed-core@9.0.73	9.0.106
Low	GHSA-2qj4-mmr9-4v2f	netty-transport-sctp@4.1.91.Final	4.1.137.Final
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.69	no fix listed
Low	BIT-java-2026-41254	java@11.0.20-8-3	1.8.0
Low	BIT-java-2026-41254	Java@11.0.20-8	1.8.0
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@2.7.10	no fix listed
Low	GHSA-v2xm-76pq-phcf	classgraph@4.8.83	4.8.112
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.3.26	no fix listed
Low	BIT-java-2026-47058	java@11.0.20-8-3	1.8.0
Low	BIT-java-2026-47058	Java@11.0.20-8	1.8.0
Low	DEBIAN-CVE-2026-47058	openjdk-11@11.0.18+10-1~deb11u1	11.0.32+9-2~deb11u1
Low	BIT-postgresql-2025-4207	PostgreSQL@16.0.0	13.21.0
Low	DLA-4251-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u8
Low	GHSA-w4pp-8pjf-rmxw	pacote@13.6.1	21.5.1
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	GHSA-v65r-p3vv-jjfv	tinymce@5.10.7	5.10.8
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.51.v20230217	9.4.54
Low	GHSA-9ppj-qmqm-q256	tar@6.1.11	7.5.11
Low	GHSA-hgqx-r2hp-jr38	tinymce@5.10.7	5.10.8
Low	GO-2026-4341	stdlib@go1.19.12	1.24.12
Low	GHSA-6g32-pxv4-2wfj	amqp-client@4.8.0	5.33.0
Low	GHSA-fmxf-pm6p-7xgm	async-http-client@2.12.1	2.15.0
Low	GHSA-2rmj-mq67-h97g	spring-web@5.3.26	5.3.38
Low	GO-2024-2887	stdlib@go1.19.12	1.21.11
Low	GHSA-mm8h-8587-p46h	amqp-client@4.8.0	5.18.0
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.91.Final	4.1.133.Final
Low	BIT-postgresql-2026-6638	PostgreSQL@16.0.0	16.14.0
Low	GHSA-9hcv-j9pv-qmph	tinymce@5.10.7	5.11.0
Low	GHSA-w9jx-4g6g-rp7x	tinymce@5.10.7	5.11.0
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.73	9.0.116
Low	DSA-5726-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u5
Low	BIT-java-2025-30761	Java@11.0.20-8	1.8.0
Low	BIT-java-2025-30761	java@11.0.20-8-3	1.8.0
Low	DEBIAN-CVE-2025-30761	openjdk-11@11.0.18+10-1~deb11u1	11.0.28+6-1~deb11u1
Low	BIT-kafka-2024-56128	Apache Kafka@3.5.0	3.8.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.26latest	6 months ago	3.6.0	524196978	14,566

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thingsboard-cluster-betta/thingsboard-cluster.svg)](https://charts.stackradar.io/charts/thingsboard-cluster-betta/thingsboard-cluster)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.