node-red Helm chart

Name: node-red Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thl-charts

Scored 14 Sept 2026

A Helm chart for node-red app

Latest 0.1.0 2 years agoapp version 3.0.2-18 0Artifact Hub

node-red 0.1.0 deploys 1 container image: nodered/node-red. Across them, 186 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2024-6387 in openssh 9.6_p1-r0, fixed in 9.6_p1-r1.

Radar Score

2,8062563116

186 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
nodered/node-red	3.0.2-18	2563116	2,806

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

116 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.23.8	7.26.10
Low	GHSA-3p68-rc4w-qgx5	axios@1.6.5	1.15.0
Low	GHSA-wc9g-mqfw-jrwm	multer@1.4.5-lts.1	2.3.0
Low	ALPINE-CVE-2025-26519	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r5
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	GHSA-535w-7cp7-47q4	multer@1.4.5-lts.1	2.3.0
Low	GHSA-72gw-mp4g-v24j	multer@1.4.5-lts.1	2.2.0
Low	ALPINE-CVE-2024-12718	python3@3.11.6-r1	3.11.13-r0
Low	GHSA-42h9-826w-cgv3	axios@1.6.5	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.6.5	1.18.0
Low	GHSA-83g3-92jg-28cx	tar@6.1.11	7.5.8
Low	ALPINE-CVE-2025-48386	git@2.43.0-r0	2.43.7-r0
Low	GHSA-w8wr-v893-vjvp	tar@6.1.11	7.5.18
Low	GHSA-m7pr-hjqh-92cm	axios@1.6.5	1.15.1
Low	GHSA-mmx7-hfxf-jppx	axios@1.6.5	1.18.0
Low	ALPINE-CVE-2026-40200	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.1.0	4.1.1
Low	GHSA-cm22-4g7w-348p	serve-static@1.15.0	1.16.0
Low	GHSA-gvwx-54wh-qm9j	tar@6.1.11	7.5.17
Low	ALPINE-CVE-2024-2004	curl@8.5.0-r0	8.7.1-r0
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r15	1.36.1-r19
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r15	1.36.1-r17
Low	ALPINE-CVE-2024-50349	git@2.43.0-r0	2.43.6-r0
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r15	1.36.1-r16
Low	GHSA-m6fv-jmcg-4jfg	send@0.18.0	0.19.0
Low	GHSA-w9j2-pvgh-6h63	axios@1.6.5	1.15.1
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r15	1.36.1-r19
Low	ALPINE-CVE-2024-6874	curl@8.5.0-r0	8.9.0-r0
Low	ALPINE-CVE-2023-52426	expat@2.5.0-r2	2.6.0-r0
Low	GHSA-qw6h-vgh9-j6wx	express@4.18.1	4.20.0
Low	GHSA-mh29-5h37-fv8m	js-yaml@4.1.0	4.1.1
Low	GHSA-7q8q-rj6j-mhjq	axios@1.6.5	1.18.0
Low	ALPINE-CVE-2024-25629	c-ares@1.24.0-r1	1.27.0-r0
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.0	4.2.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	ALPINE-CVE-2024-11053	curl@8.5.0-r0	8.11.1-r0
Low	GHSA-vmf3-w455-68vh	tar@6.1.11	7.5.16
Low	GHSA-5c9x-8gcm-mpgx	axios@1.6.5	1.15.1
Low	GHSA-vf2m-468p-8v99	axios@1.6.5	1.15.1
Low	GHSA-663r-x48j-fg8p	jsonata@1.8.6	1.8.8
Low	ALPINE-CVE-2025-4516	python3@3.11.6-r1	3.11.12-r1
Low	GHSA-445q-vr5w-6q77	axios@1.6.5	1.15.1
Low	ALPINE-CVE-2024-13176	openssl@3.1.4-r4	3.1.8-r0
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@4.1.0	4.3.1
Low	GHSA-4mjr-xmp4-gh2g	qs@6.10.3	6.16.0
Low	GHSA-xx6v-rp6x-q39c	axios@1.6.5	1.15.1
Low	GHSA-898c-q2cr-xwhg	axios@1.6.5	1.16.0
Low	ALPINE-CVE-2025-5025	curl@8.5.0-r0	8.14.0-r0
Low	ALPINE-CVE-2025-0167	curl@8.5.0-r0	8.12.0-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	2 years ago	3.0.2-18	2563116	2,806

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thl-charts/node-red.svg)](https://charts.stackradar.io/charts/thl-charts/node-red)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.