node-red Helm chart

Name: node-red Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thl-charts

Scored 14 Sept 2026

A Helm chart for node-red app

Latest 0.1.0 2 years agoapp version 3.0.2-18 0Artifact Hub

node-red 0.1.0 deploys 1 container image: nodered/node-red. Across them, 186 findings — 2 critical, 5 high. The highest contribution is ALPINE-CVE-2024-6387 in openssh 9.6_p1-r0, fixed in 9.6_p1-r1.

Radar Score

2,8062563116

186 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
nodered/node-red	3.0.2-18	2563116	2,806

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

186 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-xf7r-hgr6-v32p	multer@1.4.5-lts.1	2.1.0
Medium	ALPINE-CVE-2025-31115	xz@5.4.5-r0	5.4.5-r1
Medium	ALPINE-CVE-2024-2379	curl@8.5.0-r0	8.7.1-r0
Medium	GHSA-8gq3-vp5j-2grp	jsonata@1.8.6	1.8.8
Medium	ALPINE-CVE-2025-9232	openssl@3.1.4-r4	3.1.8-r1
Medium	ALPINE-CVE-2025-4330	python3@3.11.6-r1	3.11.13-r0
Medium	GHSA-37ch-88jc-xwx2	path-to-regexp@0.1.7	0.1.13
Medium	GHSA-9wv6-86v2-598j	path-to-regexp@0.1.7	0.1.10
Medium	ALPINE-CVE-2025-0938	python3@3.11.6-r1	3.11.12-r0
Medium	ALPINE-CVE-2023-27043	python3@3.11.6-r1	3.11.10-r0
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	ALPINE-CVE-2024-32021	git@2.43.0-r0	2.43.4-r0
Medium	GHSA-p92q-9vqr-4j8v	axios@1.6.5	1.16.0
Medium	ALPINE-CVE-2024-2466	curl@8.5.0-r0	8.7.1-r0
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.20.0	1.20.3
Medium	GHSA-2943-5xfg-gq5f	jsonata@1.8.6	1.8.8
Medium	GHSA-96hv-2xvq-fx4p	ws@7.5.6	7.5.11
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.1.2	3.1.3
Medium	GHSA-pf86-5x62-jrwf	axios@1.6.5	1.15.1
Medium	GHSA-4pg4-qvpc-4q3h	multer@1.4.5-lts.1	2.0.0
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-44fp-w29j-9vj5	multer@1.4.5-lts.1	2.0.0
Low	ALPINE-CVE-2025-46835	git@2.43.0-r0	2.43.7-r0
Low	ALPINE-CVE-2025-0840	binutils@2.41-r0	2.41-r1
Low	GHSA-62hf-57xw-28j9	axios@1.6.5	1.15.1
Low	ALPINE-CVE-2024-9287	python3@3.11.6-r1	3.11.11-r0
Low	GHSA-34x7-hfp2-rc4v	tar@6.1.11	7.5.7
Low	GHSA-86vw-mfpg-wwv9	jsonata@1.8.6	1.8.9
Low	GHSA-q8qp-cvcw-x6jj	axios@1.6.5	1.15.2
Low	GHSA-fjgf-rc76-4x9p	multer@1.4.5-lts.1	2.0.2
Low	GHSA-g5hg-p3ph-g8qg	multer@1.4.5-lts.1	2.0.1
Low	GHSA-3g43-6gmg-66jw	axios@1.6.5	1.15.2
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.15.5	1.15.6
Low	GHSA-hfxv-24rg-xrqf	axios@1.6.5	1.16.0
Low	GHSA-j5f8-grm9-p9fc	axios@1.6.5	1.16.0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-f5x3-32g6-xq36	tar@6.1.11	6.2.1
Low	GHSA-pmwg-cvhr-8vh7	axios@1.6.5	1.15.1
Low	GHSA-qffp-2rhf-9h96	tar@6.1.11	7.5.10
Low	ALPINE-CVE-2025-27614	git@2.43.0-r0	2.43.7-r0
Low	GHSA-23hp-3jrh-7fpw	tar@6.1.11	7.5.19
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.0	4.3.0
Low	ALPINE-CVE-2023-51767	openssh@9.6_p1-r0	9.7_p1-r0
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.0	4.0.6
Low	GHSA-7r86-cg39-jmmj	minimatch@3.1.2	3.1.3
Low	ALPINE-CVE-2025-29087	sqlite@3.44.2-r0	3.44.2-r1
Low	ALPINE-CVE-2024-50602	expat@2.5.0-r2	2.6.4-r0
Low	GHSA-8qq5-rm4j-mr97	tar@6.1.11	7.5.3
Low	GHSA-776f-qx25-q3cc	xml2js@0.4.23	0.5.0
Low	GHSA-fvcv-3m26-pcqx	axios@1.6.5	1.15.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	2 years ago	3.0.2-18	2563116	2,806

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thl-charts/node-red.svg)](https://charts.stackradar.io/charts/thl-charts/node-red)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.