hermes Helm chart

Name: hermes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

touk

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Latest 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
apicurio/apicurio-registry-kafkasql	2.1.0.Final	830276327	12,455
bitnami/zookeeper	3.8.0-debian-11-r74	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r34	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

327 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-f8h5-v2vg-46rr	quarkus-core@1.13.2.Final	3.2.12.Final
Low	RHSA-2026:5585	gnutls@3.6.14-8.el8_3	0:3.6.16-8.el8_10.5
Low	RHSA-2023:4768	cups@1:2.2.6-38.el8	1:2.2.6-38.el8_4.2
Low	GHSA-wf66-mphr-4c4r	kafka-clients@2.7.0	3.9.2
Low	RHSA-2023:7190	avahi@0.7-20.el8	0:0.7-21.el8
Low	GHSA-h35f-9h28-mq5c	setuptools@39.2.0	83.0.0
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.49.Final	4.1.135.Final
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.20	1.26.0
Low	GHSA-3w4v-rvc4-2xpw	keycloak-core@12.0.4	15.1.0
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.49.Final	4.1.129.Final
Low	RHSA-2026:66451	glib2@2.56.4-10.el8_4.1	0:2.56.4-178.el8_10
Low	RHSA-2026:58938	sqlite@3.26.0-13.el8	0:3.26.0-21.el8_10
Low	RHSA-2026:59024	sqlite@3.26.0-13.el8	0:3.26.0-13.el8_4.2
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.49.Final	4.1.135.Final
Low	RHSA-2023:3840	sqlite@3.26.0-13.el8	0:3.26.0-18.el8_8
Low	RHSA-2026:47117	libgcrypt@1.8.5-4.el8	0:1.8.5-8.el8_10
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.49.Final	4.1.136.Final
Low	GHSA-9623-mj7j-p9v4	quarkus-vertx@1.13.2.Final	3.15.6
Low	RHSA-2025:15003	krb5@1.18.2-8.el8	0:1.18.2-9.el8_4.3
Low	RHSA-2026:0728	gnupg2@2.2.20-2.el8	0:2.2.20-4.el8_10
Low	RHSA-2023:0100	systemd@239-45.el8_4.3	0:239-68.el8_7.1
Low	RHSA-2024:1822	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.23.0.9-2.el8_4
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.49.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.49.Final	4.1.115.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.49.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.12.1	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.49.Final	4.1.118.Final
Low	RHSA-2025:8958	libxml2@2.9.7-9.el8_4.2	0:2.9.7-20.el8_10
Low	RHSA-2026:33126	glibc@2.28-151.el8	0:2.28-251.el8_10.38
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.49.Final	4.1.136.Final
Low	RHSA-2026:13285	libcap@2.26-4.el8	0:2.48-6.el8_10.1
Low	RHSA-2026:64809	expat@2.2.5-4.el8	0:2.5.0-2.el8_10.2
Low	RHSA-2025:3828	glibc@2.28-151.el8	0:2.28-251.el8_10.16
Low	RHSA-2026:50051	systemd@239-45.el8_4.3	0:239-45.el8_4.17
Low	RHSA-2026:20587	glibc@2.28-151.el8	0:2.28-251.el8_10.37
Low	RHSA-2024:0786	nss@3.53.1-17.el8_3	0:3.90.0-6.el8_9
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.12.1	2.18.8
Low	RHSA-2026:43420	acl@2.2.53-1.el8	0:2.4.0-1.el8_10
Low	RHSA-2025:1517	libxml2@2.9.7-9.el8_4.2	0:2.9.7-18.el8_10.2
Low	GHSA-rpj2-w6fr-79hc	keycloak-core@12.0.4	14.0.0
Low	RHSA-2025:21977	libssh@0.9.4-2.el8	0:0.9.6-16.el8_10
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.12.1	2.18.9
Low	RHSA-2021:4489	rpm@4.14.3-14.el8_4	0:4.14.3-19.el8
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.49.Final	4.1.136.Final
Low	RHSA-2026:8861	giflib@5.1.4-3.el8	0:5.1.4-4.el8_10
Low	GHSA-g4gc-rh26-m3p5	keycloak-core@12.0.4	24.0.7
Low	RHSA-2021:4408	libsolv@0.7.16-2.el8	0:0.7.19-1.el8
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.49.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.49.Final	4.1.133.Final
Low	GHSA-q84x-3476-8ff2	apache-mime4j-storage@0.8.3	0.8.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.0latest	3 years ago	2.1.0.Final	830276327	12,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.