hermes Helm chart

Name: hermes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

touk

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Latest 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
apicurio/apicurio-registry-kafkasql	2.1.0.Final	830276327	12,455
bitnami/zookeeper	3.8.0-debian-11-r74	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r34	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

641 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2022:9058	prometheus-jmx-exporter@0.12.0-6.el8	0:0.12.0-9.el8_7
Critical	RHSA-2024:2722	glibc@2.28-151.el8	0:2.28-236.el8_9.13
Critical	RHSA-2024:3309	glibc@2.28-151.el8	0:2.28-151.el8_4.2
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.28	2.0
Critical	RHSA-2025:3382KEV	freetype@2.9.1-4.el8_3.1	0:2.9.1-7.el8_4
Critical	RHSA-2023:5455KEV	glibc@2.28-151.el8	0:2.28-225.el8_8.6
Critical	RHSA-2023:5768KEV	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-4.el8_4.1
Critical	RHSA-2025:12010	sqlite@3.26.0-13.el8	0:3.26.0-20.el8_10
High	RHSA-2022:5681	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.16.0.8-1.el8_4
High	RHSA-2022:5683	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.16.0.8-1.el8_6
High	RHSA-2022:0951	expat@2.2.5-4.el8	0:2.2.5-4.el8_5.3
High	RHSA-2022:1012	expat@2.2.5-4.el8	0:2.2.5-4.el8_4.2
High	RHSA-2022:1065	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-6.el8_5
High	RHSA-2025:0083	cups@1:2.2.6-38.el8	1:2.2.6-62.el8_10
High	RHSA-2022:5818	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-7.el8_6
High	RHSA-2022:1642	zlib@1.2.11-17.el8	0:1.2.11-18.el8_5
High	RHSA-2022:2198	rsync@3.1.3-12.el8	0:3.1.3-12.el8_4.1
High	RHSA-2023:1405	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-9.el8_7
High	RHSA-2023:1440	openssl@1:1.1.1g-15.el8_3	1:1.1.1g-18.el8_4
High	RHSA-2025:1301KEV	gcc@8.4.1-1.el8	0:8.5.0-23.el8_10
High	RHSA-2021:4424	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-4.el8
High	RHSA-2021:5226	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-5.el8_5
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	RHSA-2024:0628	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
High	RHSA-2025:22785	expat@2.2.5-4.el8	0:2.2.10-1.el8_4
High	RHSA-2021:4903	nss@3.53.1-17.el8_3	0:3.67.0-7.el8_5
High	RHSA-2024:5654	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.2
High	RHSA-2024:4252	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.1
High	RHSA-2024:8791	krb5@1.18.2-8.el8	0:1.18.2-9.el8_4.2
High	RHSA-2023:0173	libxml2@2.9.7-9.el8_4.2	0:2.9.7-15.el8_7.1
High	GHSA-jh7q-5mwf-qvhw	keycloak-core@12.0.4	13.0.0
High	RHSA-2022:6159	curl@7.61.1-18.el8	0:7.61.1-22.el8_6.4
High	RHSA-2023:3460	curl@7.61.1-18.el8	0:7.61.1-18.el8_4.3
High	RHSA-2023:3591	python3@3.6.8-37.el8	0:3.6.8-51.el8_8.1
High	RHSA-2025:21776	expat@2.2.5-4.el8	0:2.5.0-1.el8_10
High	RHSA-2021:4587	gcc@8.4.1-1.el8	0:8.5.0-4.el8_5
High	GHSA-2f88-5hg8-9x2x	maven-compat@3.6.2	3.8.1
High	GHSA-2f88-5hg8-9x2x	maven-core@3.6.2	3.8.1
Medium	RHSA-2022:7106	zlib@1.2.11-17.el8	0:1.2.11-19.el8_6
Medium	RHSA-2022:7793	rsync@3.1.3-12.el8	0:3.1.3-19.el8
Medium	RHSA-2021:4396	sqlite@3.26.0-13.el8	0:3.26.0-15.el8
Medium	GHSA-mc84-pj99-q6hh	commons-compress@1.20	1.21
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.0.3	5.4.0
Medium	GHSA-crv7-7245-f45f	commons-compress@1.20	1.21
Medium	RHSA-2021:3891	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.13.0.8-1.el8_4
Medium	GHSA-pcv5-m2wh-66j3	keycloak-core@12.0.4	13.0.0
Medium	GHSA-7hfm-57qf-j43q	commons-compress@1.20	1.21
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	RHSA-2022:7704	glib2@2.56.4-10.el8_4.1	0:2.56.4-159.el8
Medium	RHSA-2023:7151	python3@3.6.8-37.el8	0:3.6.8-56.el8_9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.0latest	3 years ago	2.1.0.Final	830276327	12,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.