hermes Helm chart

Name: hermes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

touk

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Latest 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
apicurio/apicurio-registry-kafkasql	2.1.0.Final	830276327	12,455
bitnami/zookeeper	3.8.0-debian-11-r74	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r34	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

327 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:48225	perl-Getopt-Long@1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-HTTP-Tiny@0.074-1.el8	0:0.078-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-MIME-Base64@3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-parent@1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-PathTools@3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Escapes@1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-podlators@4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Perldoc@3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Simple@1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Usage@4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Scalar-List-Utils@3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Socket@4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Storable@1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Term-ANSIColor@4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Term-Cap@1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Text-ParseWords@3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Text-Tabs+Wrap@2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-threads@1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-threads-shared@1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Time-Local@1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Unicode-Normalize@1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.49.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.49.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.49.Final	4.1.136.Final
Low	RHSA-2022:5056	cups@1:2.2.6-38.el8	1:2.2.6-45.el8_6.2
Low	RHSA-2024:3203	systemd@239-45.el8_4.3	0:239-82.el8
Low	GHSA-269q-hmxg-m83q	netty-codec-http@4.1.49.Final	4.1.77.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.49.Final	4.1.136.Final
Low	RHSA-2021:4393	cups@1:2.2.6-38.el8	1:2.2.6-40.el8
Low	RHSA-2025:12450	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.2
Low	RHSA-2021:4455	python-pip@9.0.3-19.el8	0:9.0.3-20.el8
Low	RHSA-2025:4049	libtasn1@4.13-3.el8	0:4.13-5.el8_10
Low	RHSA-2026:57462	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.13
Low	RHSA-2024:10779	python3@3.6.8-37.el8	0:3.6.8-69.el8_10
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.49.Final	4.1.135.Final
Low	GHSA-jw7r-rxff-gv24	apache-mime4j-core@0.8.3	0.8.10
Low	RHSA-2024:3347	python3@3.6.8-37.el8	0:3.6.8-62.el8_10
Low	RHSA-2026:17481	rsync@3.1.3-12.el8	0:3.1.3-25.el8_10
Low	RHSA-2024:3233	libssh@0.9.4-2.el8	0:0.9.6-14.el8
Low	RHSA-2026:62218	libssh@0.9.4-2.el8	0:0.9.6-17.el8_10
Low	RHSA-2022:0892	libarchive@3.3.3-1.el8	0:3.3.3-3.el8_5
Low	RHSA-2026:0241	libpng@2:1.6.34-5.el8	2:1.6.34-9.el8_10
Low	RHSA-2026:0321	libpng@2:1.6.34-5.el8	2:1.6.34-8.el8_4.1
Low	RHSA-2024:4456	python3@3.6.8-37.el8	0:3.6.8-39.el8_4.5
Low	RHSA-2026:0991	glib2@2.56.4-10.el8_4.1	0:2.56.4-168.el8_10
Low	RHSA-2023:3839	libssh@0.9.4-2.el8	0:0.9.6-10.el8_8
Low	RHSA-2023:0837	systemd@239-45.el8_4.3	0:239-68.el8_7.4
Low	RHSA-2024:0647	rpm@4.14.3-14.el8_4	0:4.14.3-28.el8_9
Low	RHSA-2025:2722	krb5@1.18.2-8.el8	0:1.18.2-31.el8_10
Low	RHSA-2026:36733	cups@1:2.2.6-38.el8	1:2.2.6-68.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.0latest	3 years ago	2.1.0.Final	830276327	12,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.