togglr-backend 1.0.0 Helm chart

Name: togglr-backend Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

togglr

Scored 14 Sept 2026

A Helm chart for Togglr Feature Toggle Management System Backend

Version 1.0.0 10 months agoapp version 1.0.0 0Artifact Hub

togglr-backend 1.0.0 deploys 1 container image: gdrocha/togglr-backend. Across them, 208 findings — 4 critical, 7 high — 1 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.15, fixed in 10.1.35.

Radar Score

3,2214763134

208 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
gdrocha/togglr-backend	1.0.0	4763134	3,221

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

208 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-5m4m-73w9-8433	spring-data-commons@3.1.5	no fix listed
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.100.Final	4.1.115.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.15.3	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.100.Final	4.1.118.Final
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@3.1.5	no fix listed
Low	ALPINE-CVE-2026-22801	libpng@1.6.47-r0	1.6.54-r0
Low	ALPINE-CVE-2026-42769	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.15.3	2.18.8
Low	GHSA-xg2j-3hj6-pc24	spring-data-keyvalue@3.1.5	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.15.3	2.18.9
Low	ALPINE-CVE-2026-76957	expat@2.7.3-r0	2.8.4-r0
Low	ALPINE-CVE-2025-68973	gnupg@2.4.7-r0	2.4.9-r0
Low	ALPINE-CVE-2026-56403	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2025-64505	libpng@1.6.47-r0	1.6.51-r0
Low	ALPINE-CVE-2026-42014	gnutls@3.8.8-r0	3.8.13-r0
Low	GHSA-293q-567p-wmwq	spring-security-web@6.1.5	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@6.1.5	6.1.12
Low	ALPINE-CVE-2026-45446	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-25qh-j22f-pwp8	logback-core@1.4.11	1.5.19
Low	ALPINE-CVE-2026-56412	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-3832	gnutls@3.8.8-r0	3.8.13-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-32777	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2025-64506	libpng@1.6.47-r0	1.6.51-r0
Low	ALPINE-CVE-2025-15469	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-42768	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-32778	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-32776	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r10	1.2.5-r11
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-5419	gnutls@3.8.8-r0	3.8.13-r0
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@10.1.15	10.1.55
Low	ALPINE-CVE-2026-34757	libpng@1.6.47-r0	1.6.57-r0
Low	ALPINE-CVE-2025-68160	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2025-9820	gnutls@3.8.8-r0	3.8.12-r0
Low	GHSA-4wp7-92pw-q264	spring-context@6.0.13	no fix listed
Low	ALPINE-CVE-2025-68972	gnupg@2.4.7-r0	2.4.9-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.3-r0	2.8.1-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	10 months ago	1.0.0	4763134	3,221

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/togglr/togglr-backend.svg)](https://charts.stackradar.io/charts/togglr/togglr-backend)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.