StackRadar

hermes 0.6.0 Helm chart

toukVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Version 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
apicurio/apicurio-registry-kafkasql2.1.0.Final83027632712,455
bitnami/zookeeper3.8.0-debian-11-r74—unmeasured
bitnami/kafka3.3.1-debian-11-r34—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

641 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumRHSA-2023:7176python-pip@9.0.3-19.el80:9.0.3-23.el8
MediumGHSA-xqfj-vm6h-2x34commons-compress@1.201.21
MediumRHSA-2023:0110sqlite@3.26.0-13.el80:3.26.0-17.el8_7
MediumRHEA-2023:3850krb5@1.18.2-8.el80:1.18.2-25.el8_8
MediumGHSA-p9m8-27x8-rg87cron-utils@9.1.39.1.6
MediumRHSA-2021:3576krb5@1.18.2-8.el80:1.18.2-8.3.el8_4
MediumRHSA-2022:4834expat@2.2.5-4.el80:2.2.5-4.el8_4.3
MediumGHSA-rhgr-952r-6p8qmaven-shared-utils@3.2.13.3.3
MediumRHSA-2022:4797plexus-cipher@1.7-17.module+el8.3.0+6804+157bd82e0:1.7-17.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-classworlds@2.6.0-4.module+el8.3.0+6804+157bd82e0:2.6.0-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-containers@2.1.0-2.module+el8.3.0+6804+157bd82e0:2.1.0-2.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797aopalliance@1.0-20.module+el8.3.0+6804+157bd82e0:1.0-20.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-cli@1.4-7.module+el8.3.0+6804+157bd82e0:1.4-7.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-interpolation@1.26-3.module+el8.3.0+6804+157bd82e0:1.26-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-io@1:2.6-6.module+el8.3.0+6804+157bd82e1:2.6-6.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797geronimo-annotation@1.0-26.module+el8.3.0+6804+157bd82e0:1.0-26.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797maven@1:3.6.2-6.module+el8.4.0+9250+1786af371:3.6.2-7.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-utils@3.3.0-3.module+el8.3.0+6804+157bd82e0:3.3.0-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797sisu@0.3.4-2.module+el8.3.0+6804+157bd82e0:0.3.4-2.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797slf4j@1.7.28-3.module+el8.3.0+6804+157bd82e0:1.7.28-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-lang3@3.9-4.module+el8.3.0+6804+157bd82e0:3.9-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797guava@28.1-3.module+el8.3.0+6804+157bd82e0:28.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797jansi@1.18-4.module+el8.3.0+6804+157bd82e0:1.18-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797jsoup@1.12.1-3.module+el8.3.0+6804+157bd82e0:1.12.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797atinject@1-31.20100611svn86.module+el8.3.0+6804+157bd82e0:1-31.20100611svn86.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797maven-shared-utils@3.2.1-0.4.module+el8.3.0+6804+157bd82e0:3.2.1-0.5.module+el8.4.0+15048+bdaf849b
MediumRHSA-2022:4797maven-resolver@1.4.1-3.module+el8.3.0+6804+157bd82e0:1.4.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797jsr-305@0-0.25.20130910svn.module+el8.3.0+6804+157bd82e0:0-0.25.20130910svn.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797httpcomponents-client@4.5.10-3.module+el8.3.0+6804+157bd82e0:4.5.10-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797google-guice@4.2.2-4.module+el8.3.0+6804+157bd82e0:4.2.2-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797httpcomponents-core@4.4.12-3.module+el8.3.0+6804+157bd82e0:4.4.12-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797maven-wagon@3.3.4-2.module+el8.3.0+6804+157bd82e0:3.3.4-2.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797plexus-sec-dispatcher@1.4-29.module+el8.3.0+6804+157bd82e0:1.4-29.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797apache-commons-codec@1.13-3.module+el8.3.0+6804+157bd82e0:1.13-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:4797cdi-api@2.0.1-3.module+el8.3.0+6804+157bd82e0:2.0.1-3.module+el8.6.0+13337+afcb49ec
MediumGHSA-wm47-8v5p-wjpjnetty-codec-http2@4.1.49.Final4.1.60.Final
MediumRHSA-2025:0325rsync@3.1.3-12.el80:3.1.3-20.el8_10
MediumRHSA-2022:6457python3@3.6.8-37.el80:3.6.8-47.el8_6
MediumRHSA-2022:4991xz@5.2.4-3.el80:5.2.4-4.el8_6
MediumRHSA-2025:10541rsync@3.1.3-12.el80:3.1.3-12.el8_4.5
MediumRHSA-2022:0899libxml2@2.9.7-9.el8_4.20:2.9.7-12.el8_5
MediumRHSA-2022:1986python3@3.6.8-37.el80:3.6.8-45.el8
MediumGHSA-j8wc-gxx9-82hxxmlsec@2.1.52.1.7
MediumGHSA-r7pg-v2c8-mfg3avro@1.10.21.11.4
MediumRHSA-2023:0833python3@3.6.8-37.el80:3.6.8-48.el8_7.1
MediumGHSA-m72m-mhq2-9p6cjsoup@1.12.11.14.2
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.49.Final4.1.68.Final
MediumRHSA-2022:0658cyrus-sasl@2.1.27-5.el80:2.1.27-6.el8_5
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.49.Final4.1.68.Final
MediumRHSA-2021:4358glibc@2.28-151.el80:2.28-164.el8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.0latest3 years ago2.1.0.Final83027632712,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.