StackRadar

hermes Helm chart

toukVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Latest 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
apicurio/apicurio-registry-kafkasql2.1.0.Final83027632712,455
bitnami/zookeeper3.8.0-debian-11-r74—unmeasured
bitnami/kafka3.3.1-debian-11-r34—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

276 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumRHSA-2022:1860maven-resolver@1.4.1-3.module+el8.3.0+6804+157bd82e0:1.4.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860maven@1:3.6.2-6.module+el8.4.0+9250+1786af371:3.6.2-7.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860geronimo-annotation@1.0-26.module+el8.3.0+6804+157bd82e0:1.0-26.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860google-guice@4.2.2-4.module+el8.3.0+6804+157bd82e0:4.2.2-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860guava@28.1-3.module+el8.3.0+6804+157bd82e0:28.1-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860httpcomponents-client@4.5.10-3.module+el8.3.0+6804+157bd82e0:4.5.10-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860httpcomponents-core@4.4.12-3.module+el8.3.0+6804+157bd82e0:4.4.12-3.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860jansi@1.18-4.module+el8.3.0+6804+157bd82e0:1.18-4.module+el8.6.0+13337+afcb49ec
MediumRHSA-2022:1860jsr-305@0-0.25.20130910svn.module+el8.3.0+6804+157bd82e0:0-0.25.20130910svn.module+el8.6.0+13337+afcb49ec
MediumRHSA-2023:7877openssl@1:1.1.1g-15.el8_31:1.1.1k-12.el8_9
MediumGHSA-cx63-2mw6-8hw5setuptools@39.2.070.0.0
MediumRHSA-2024:5078python-setuptools@39.2.0-6.el80:39.2.0-6.el8_4.1
MediumRHSA-2025:2600rsync@3.1.3-12.el80:3.1.3-21.el8_10
MediumGHSA-3j6g-hxx5-3q26kafka-clients@2.7.02.7.2
MediumRHSA-2021:4057python3@3.6.8-37.el80:3.6.8-39.el8_4
MediumRHSA-2022:6161systemd@239-45.el8_4.30:239-45.el8_4.12
MediumRHSA-2022:0185java-11-openjdk@1:11.0.12.0.7-0.el8_41:11.0.14.0.9-2.el8_5
MediumRHSA-2022:0211java-11-openjdk@1:11.0.12.0.7-0.el8_41:11.0.14.0.9-2.el8_4
MediumRHSA-2022:6831expat@2.2.5-4.el80:2.2.5-4.el8_4.4
MediumRHBA-2022:2065libtirpc@1.1.4-4.el80:1.1.4-6.el8
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.12.12.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.12.12.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.18.03.25.5
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.281.31
MediumRHSA-2022:6820prometheus-jmx-exporter@0.12.0-6.el80:0.12.0-8.el8_6
MediumRHSA-2024:7848openssl@1:1.1.1g-15.el8_31:1.1.1k-14.el8_6
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.62.7
MediumRHSA-2025:10698libxml2@2.9.7-9.el8_4.20:2.9.7-21.el8_10.1
MediumRHSA-2025:12241libxml2@2.9.7-9.el8_4.20:2.9.7-9.el8_4.6
MediumGHSA-v62j-cxhh-fq22graphql-java@17.317.4
MediumGHSA-q6w2-89hq-hq27keycloak-core@12.0.413.0.0
MediumGHSA-r9hx-vwmv-q579setuptools@39.2.065.5.1
MediumRHSA-2022:7089libksba@1.3.5-7.el80:1.3.5-8.el8_6
MediumRHSA-2023:0103expat@2.2.5-4.el80:2.2.5-10.el8_7.1
MediumPYSEC-2025-49setuptools@39.2.078.1.1
MediumGHSA-f256-j965-7f32netty-codec-http2@4.1.49.Final4.1.61.Final
MediumRHSA-2023:1889java-11-openjdk@1:11.0.12.0.7-0.el8_41:11.0.19.0.7-1.el8_4
MediumRHSA-2023:1895java-11-openjdk@1:11.0.12.0.7-0.el8_41:11.0.19.0.7-1.el8_7
MediumRHSA-2021:4409libgcrypt@1.8.5-4.el80:1.8.5-6.el8
MediumRHSA-2023:0624libksba@1.3.5-7.el80:1.3.5-9.el8_4
MediumRHSA-2024:6975python3@3.6.8-37.el80:3.6.8-67.el8_10
MediumRHSA-2023:7174perl-HTTP-Tiny@0.074-1.el80:0.074-2.el8
MediumRHSA-2024:1601curl@7.61.1-18.el80:7.61.1-33.el8_9.5
MediumRHSA-2021:4382json-c@0.13.1-0.4.el80:0.13.1-2.el8
MediumRHSA-2024:3214gmp@1:6.1.2-10.el81:6.1.2-11.el8
MediumRHSA-2022:6171rsync@3.1.3-12.el80:3.1.3-12.el8_4.2
MediumRHSA-2021:4374file@5.33-16.el8_3.10:5.33-20.el8
MediumRHSA-2021:4387libssh@0.9.4-2.el80:0.9.4-3.el8
MediumGHSA-63cq-ppq8-cw6gresteasy-client@4.5.9.Final4.6.0
MediumRHSA-2022:7105gnutls@3.6.14-8.el8_30:3.6.16-5.el8_6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.0latest3 years ago2.1.0.Final83027632712,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.