StackRadar

hermes Helm chart

toukVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Latest 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
apicurio/apicurio-registry-kafkasql2.1.0.Final83027632712,455
bitnami/zookeeper3.8.0-debian-11-r74—unmeasured
bitnami/kafka3.3.1-debian-11-r34—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

276 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumRHSA-2022:4991xz@5.2.4-3.el80:5.2.4-4.el8_6
MediumRHSA-2025:10541rsync@3.1.3-12.el80:3.1.3-12.el8_4.5
MediumRHSA-2022:0899libxml2@2.9.7-9.el8_4.20:2.9.7-12.el8_5
MediumRHSA-2022:1986python3@3.6.8-37.el80:3.6.8-45.el8
MediumGHSA-j8wc-gxx9-82hxxmlsec@2.1.52.1.7
MediumGHSA-r7pg-v2c8-mfg3avro@1.10.21.11.4
MediumRHSA-2023:0833python3@3.6.8-37.el80:3.6.8-48.el8_7.1
MediumGHSA-m72m-mhq2-9p6cjsoup@1.12.11.14.2
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.49.Final4.1.68.Final
MediumRHSA-2022:0658cyrus-sasl@2.1.27-5.el80:2.1.27-6.el8_5
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.49.Final4.1.68.Final
MediumRHSA-2021:4358glibc@2.28-151.el80:2.28-164.el8
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.12.12.12.6.1
MediumRHSA-2022:5313curl@7.61.1-18.el80:7.61.1-22.el8_6.3
MediumRHSA-2022:5314expat@2.2.5-4.el80:2.2.5-8.el8_6.2
MediumRHSA-2022:0896glibc@2.28-151.el80:2.28-164.el8_5.3
MediumRHSA-2021:4059curl@7.61.1-18.el80:7.61.1-18.el8_4.2
MediumRHSA-2026:26275openssl@1:1.1.1g-15.el8_31:1.1.1k-16.el8_6
MediumRHSA-2021:4288libjpeg-turbo@1.5.3-10.el80:1.5.3-12.el8
MediumRHSA-2021:4373pcre@8.42-4.el80:8.42-6.el8
MediumRHSA-2021:3582curl@7.61.1-18.el80:7.61.1-18.el8_4.1
MediumRHSA-2022:1441java-11-openjdk@1:11.0.12.0.7-0.el8_41:11.0.15.0.9-2.el8_4
MediumRHSA-2022:1442java-11-openjdk@1:11.0.12.0.7-0.el8_41:11.0.15.0.9-2.el8_5
MediumRHSA-2025:7540libjpeg-turbo@1.5.3-10.el80:1.5.3-14.el8_10
MediumRHSA-2021:3572nss@3.53.1-17.el8_30:3.67.0-6.el8_4
MediumRHSA-2021:3572nspr@4.25.0-2.el8_20:4.32.0-1.el8_4
MediumRHSA-2021:4451gnutls@3.6.14-8.el8_30:3.6.16-4.el8
MediumRHSA-2021:4451nettle@3.4.1-4.el8_30:3.4.1-7.el8
MediumRHSA-2022:5317libxml2@2.9.7-9.el8_4.20:2.9.7-13.el8_6.1
MediumRHSA-2022:7745freetype@2.9.1-4.el8_3.10:2.9.1-9.el8
MediumRHSA-2022:5809pcre2@10.32-2.el80:10.32-3.el8_6
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.104.5.13
MediumRHSA-2022:1860jansi@1.18-4.module+el8.3.0+6804+157bd82e0:1.18-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860plexus-interpolation@1.26-3.module+el8.3.0+6804+157bd82e0:1.26-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860plexus-sec-dispatcher@1.4-29.module+el8.3.0+6804+157bd82e0:1.4-29.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860plexus-containers@2.1.0-2.module+el8.3.0+6804+157bd82e0:2.1.0-2.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860maven-resolver@1.4.1-3.module+el8.3.0+6804+157bd82e0:1.4.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860httpcomponents-client@4.5.10-3.module+el8.3.0+6804+157bd82e0:4.5.10-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860httpcomponents-core@4.4.12-3.module+el8.3.0+6804+157bd82e0:4.4.12-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860cdi-api@2.0.1-3.module+el8.3.0+6804+157bd82e0:2.0.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860maven-shared-utils@3.2.1-0.4.module+el8.3.0+6804+157bd82e0:3.2.1-0.4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860plexus-cipher@1.7-17.module+el8.3.0+6804+157bd82e0:1.7-17.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860guava@28.1-3.module+el8.3.0+6804+157bd82e0:28.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860jsoup@1.12.1-3.module+el8.3.0+6804+157bd82e0:1.12.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860atinject@1-31.20100611svn86.module+el8.3.0+6804+157bd82e0:1-31.20100611svn86.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860maven-wagon@3.3.4-2.module+el8.3.0+6804+157bd82e0:3.3.4-2.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860geronimo-annotation@1.0-26.module+el8.3.0+6804+157bd82e0:1.0-26.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860apache-commons-lang3@3.9-4.module+el8.3.0+6804+157bd82e0:3.9-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860apache-commons-io@1:2.6-6.module+el8.3.0+6804+157bd82e1:2.6-6.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860google-guice@4.2.2-4.module+el8.3.0+6804+157bd82e0:4.2.2-4.module+el8.6.0+13337+afcb49ec

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.0latest3 years ago2.1.0.Final83027632712,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.