StackRadar

hermes 0.6.0 Helm chart

toukVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Version 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
apicurio/apicurio-registry-kafkasql2.1.0.Final83027632712,455
bitnami/zookeeper3.8.0-debian-11-r74—unmeasured
bitnami/kafka3.3.1-debian-11-r34—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

276 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumRHSA-2022:7106zlib@1.2.11-17.el80:1.2.11-19.el8_6
MediumRHSA-2022:7793rsync@3.1.3-12.el80:3.1.3-19.el8
MediumRHSA-2021:4396sqlite@3.26.0-13.el80:3.26.0-15.el8
MediumGHSA-mc84-pj99-q6hhcommons-compress@1.201.21
MediumGHSA-3f7h-mf4q-vrm4woodstox-core@5.0.35.4.0
MediumGHSA-crv7-7245-f45fcommons-compress@1.201.21
MediumRHSA-2021:3891java-11-openjdk@1:11.0.12.0.7-0.el8_41:11.0.13.0.8-1.el8_4
MediumGHSA-pcv5-m2wh-66j3keycloak-core@12.0.413.0.0
MediumGHSA-7hfm-57qf-j43qcommons-compress@1.201.21
MediumRHSA-2025:11035lz4@1.8.3-3.el8_40:1.8.3-5.el8_10
MediumRHSA-2022:7704glib2@2.56.4-10.el8_4.10:2.56.4-159.el8
MediumRHSA-2023:7151python3@3.6.8-37.el80:3.6.8-56.el8_9
MediumRHSA-2023:7176python-pip@9.0.3-19.el80:9.0.3-23.el8
MediumGHSA-xqfj-vm6h-2x34commons-compress@1.201.21
MediumRHSA-2023:0110sqlite@3.26.0-13.el80:3.26.0-17.el8_7
MediumRHEA-2023:3850krb5@1.18.2-8.el80:1.18.2-25.el8_8
MediumGHSA-p9m8-27x8-rg87cron-utils@9.1.39.1.6
MediumRHSA-2021:3576krb5@1.18.2-8.el80:1.18.2-8.3.el8_4
MediumRHSA-2022:4834expat@2.2.5-4.el80:2.2.5-4.el8_4.3
MediumGHSA-rhgr-952r-6p8qmaven-shared-utils@3.2.13.3.3
MediumRHSA-2022:4797maven-resolver@1.4.1-3.module+el8.3.0+6804+157bd82e0:1.4.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797httpcomponents-client@4.5.10-3.module+el8.3.0+6804+157bd82e0:4.5.10-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797guava@28.1-3.module+el8.3.0+6804+157bd82e0:28.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-codec@1.13-3.module+el8.3.0+6804+157bd82e0:1.13-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-io@1:2.6-6.module+el8.3.0+6804+157bd82e1:2.6-6.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797cdi-api@2.0.1-3.module+el8.3.0+6804+157bd82e0:2.0.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-cipher@1.7-17.module+el8.3.0+6804+157bd82e0:1.7-17.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-interpolation@1.26-3.module+el8.3.0+6804+157bd82e0:1.26-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797jsr-305@0-0.25.20130910svn.module+el8.3.0+6804+157bd82e0:0-0.25.20130910svn.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797maven@1:3.6.2-6.module+el8.4.0+9250+1786af371:3.6.2-7.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797maven-shared-utils@3.2.1-0.4.module+el8.3.0+6804+157bd82e0:3.2.1-0.5.module+el8.4.0+15048+bdaf849b
MediumRHSA-2022:4797plexus-containers@2.1.0-2.module+el8.3.0+6804+157bd82e0:2.1.0-2.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797geronimo-annotation@1.0-26.module+el8.3.0+6804+157bd82e0:1.0-26.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797slf4j@1.7.28-3.module+el8.3.0+6804+157bd82e0:1.7.28-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797atinject@1-31.20100611svn86.module+el8.3.0+6804+157bd82e0:1-31.20100611svn86.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797google-guice@4.2.2-4.module+el8.3.0+6804+157bd82e0:4.2.2-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797jansi@1.18-4.module+el8.3.0+6804+157bd82e0:1.18-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-lang3@3.9-4.module+el8.3.0+6804+157bd82e0:3.9-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797httpcomponents-core@4.4.12-3.module+el8.3.0+6804+157bd82e0:4.4.12-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-utils@3.3.0-3.module+el8.3.0+6804+157bd82e0:3.3.0-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797jsoup@1.12.1-3.module+el8.3.0+6804+157bd82e0:1.12.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797maven-wagon@3.3.4-2.module+el8.3.0+6804+157bd82e0:3.3.4-2.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-classworlds@2.6.0-4.module+el8.3.0+6804+157bd82e0:2.6.0-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-sec-dispatcher@1.4-29.module+el8.3.0+6804+157bd82e0:1.4-29.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797aopalliance@1.0-20.module+el8.3.0+6804+157bd82e0:1.0-20.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-cli@1.4-7.module+el8.3.0+6804+157bd82e0:1.4-7.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797sisu@0.3.4-2.module+el8.3.0+6804+157bd82e0:0.3.4-2.module+el8.6.0+13337+afcb49ec
MediumGHSA-wm47-8v5p-wjpjnetty-codec-http2@4.1.49.Final4.1.60.Final
MediumRHSA-2025:0325rsync@3.1.3-12.el80:3.1.3-20.el8_10
MediumRHSA-2022:6457python3@3.6.8-37.el80:3.6.8-47.el8_6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.0latest3 years ago2.1.0.Final83027632712,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.