thingsboard-cluster Helm chart

Name: thingsboard-cluster Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thingsboard-cluster-betta

Scored 14 Sept 2026

Helm chart for Thingsboard cluster.

Latest 0.2.26 6 months agoapp version 3.6.0 2Artifact Hub

thingsboard-cluster 0.2.26 deploys 6 container images: thingsboard/tb-web-ui, bitnamilegacy/kafka, bitnamilegacy/postgresql, bitnamilegacy/redis and 2 more. Across them, 1,204 findings — 5 critical, 24 high — 11 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.73, fixed in 9.0.99.

Radar Score

14,566524196978

1,204 findings over 6 of 6 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
thingsboard/tb-web-ui	3.6.0	011581	1,209
bitnamilegacy/kafka	3.5.0-debian-11-r0	0533206	2,746
bitnamilegacy/postgresql	16.0.0-debian-11-r3	111486	1,241
bitnamilegacy/redis	7.2.1-debian-11-r0	2327114	1,840
bitnamilegacy/zookeeper	3.9.0-debian-11-r11	0233266	3,050
thingsboard/tb-node×2	3.6.0	21274225	4,480

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

749 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	BIT-redis-2026-25243	redis@7.2.1-0	6.2.22
Medium	BIT-redis-2026-25243	Redis (TM)@7.2.1	6.2.22
Medium	GHSA-3p86-9955-h393	org.eclipse.jgit@6.1.0.202203080745-r	6.6.1.202309021850-r
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.73	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.73	9.0.118
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.5.0	42.7.11
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.73	9.0.80
Medium	BIT-redis-2023-41056	redis@7.2.1-0	7.0.15
Medium	BIT-redis-2023-41056	Redis (TM)@7.2.1	7.0.15
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.26	5.3.33
Medium	GHSA-c4q5-6c82-3qpw	spring-security-web@5.7.7	5.7.13
Medium	BIT-zookeeper-2023-44981	Apache ZooKeeper@3.9.0	3.7.2
Medium	GHSA-7286-pgfv-vxvh	zookeeper@3.8.1	3.8.3
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.21.9	3.25.5
Medium	GHSA-c2qf-rxjj-qqgw	semver@7.3.7	7.5.2
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.73	9.0.118
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.73	9.0.83
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.73	9.0.90
Medium	BIT-postgresql-2024-7348	PostgreSQL@16.0.0	12.20.0
Medium	GHSA-g5h3-w546-pj7f	spring-boot-actuator-autoconfigure@2.7.10	2.7.11
Medium	GHSA-jq43-27x9-3v86	netty-codec-smtp@4.1.91.Final	4.1.128.Final
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.91.Final	4.1.118.Final
Medium	BIT-postgresql-2026-2005	PostgreSQL@16.0.0	14.21.0
Medium	BIT-redis-2025-27151	redis@7.2.1-0	7.2.9
Medium	BIT-redis-2025-27151	Redis (TM)@7.2.1	7.2.9
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.73	9.0.106
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.73	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.73	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.73	9.0.118
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.73	9.0.107
Medium	BIT-postgresql-2026-2004	PostgreSQL@16.0.0	14.21.0
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.73	9.0.107
Medium	GHSA-crhr-qqj8-rpxc	zookeeper@3.8.1	3.8.6
Medium	BIT-java-2023-25193	Java@11.0.20-8	11.0.20
Medium	BIT-java-2023-25193	java@11.0.20-8-3	11.0.20
Medium	BIT-postgresql-2026-2006	PostgreSQL@16.0.0	14.21.0
Medium	GHSA-qcwq-55hx-v3vh	snappy-java@1.1.8.4	1.1.10.1
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.91.Final	4.1.132.Final
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.73	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.73	9.0.121
Medium	BIT-kafka-2025-27818	kafka@3.5.0-0	3.9.1
Medium	BIT-kafka-2025-27818	Apache Kafka@3.5.0	3.9.1
Medium	GHSA-76qp-h5mr-frr4	kafka_2.12@3.5.0	3.9.1
Medium	BIT-zookeeper-2024-51504	Apache ZooKeeper@3.9.0	3.9.3
Medium	BIT-postgresql-2026-6473	PostgreSQL@16.0.0	14.23.0
Medium	GHSA-rc47-6667-2j5j	http-cache-semantics@4.1.0	4.1.1
Medium	GHSA-6mjq-h674-j845	netty-handler@4.1.91.Final	4.1.94.Final
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@5.3.26	5.3.34
Medium	GHSA-g93m-8x6h-g5gv	zookeeper@3.9.0	3.9.3
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.4	3.18.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.26latest	6 months ago	3.6.0	524196978	14,566

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thingsboard-cluster-betta/thingsboard-cluster.svg)](https://charts.stackradar.io/charts/thingsboard-cluster-betta/thingsboard-cluster)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.