hermes Helm chart

Name: hermes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

touk

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Latest 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
apicurio/apicurio-registry-kafkasql	2.1.0.Final	830276327	12,455
bitnami/zookeeper	3.8.0-debian-11-r74	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r34	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

276 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	RHSA-2024:4734	krb5@1.18.2-8.el8	0:1.18.2-9.el8_4.1
Medium	RHSA-2024:5312	krb5@1.18.2-8.el8	0:1.18.2-29.el8_10
Medium	RHSA-2024:1615	expat@2.2.5-4.el8	0:2.2.5-11.el8_9.1
Medium	RHSA-2023:4163	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.20.0.8-1.el8_4
Medium	RHSA-2023:4175	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.20.0.8-2.el8
Medium	RHSA-2024:2980	harfbuzz@1.7.5-3.el8	0:1.7.5-4.el8
Medium	GHSA-4f4r-wgv2-jjvg	quarkus-vertx-http@1.13.2.Final	2.16.11.Final
Medium	GHSA-4f4r-wgv2-jjvg	quarkus-undertow@1.13.2.Final	2.16.11.Final
Medium	GHSA-rhrv-645h-fjfh	avro@1.10.2	1.11.3
Medium	RHSA-2024:0114	python3@3.6.8-37.el8	0:3.6.8-56.el8_9.2
Medium	GHSA-qcwq-55hx-v3vh	snappy-java@1.1.7.7	1.1.10.1
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.49.Final	4.1.132.Final
Medium	GHSA-wx5j-54mm-rqqq	netty-codec-http@4.1.49.Final	4.1.71.Final
Medium	RHSA-2026:20611	gnutls@3.6.14-8.el8_3	0:3.6.16-8.el8_10.6
Medium	RHSA-2026:33125	libtasn1@4.13-3.el8	0:4.13-3.el8_4.1
Medium	RHSA-2026:33125	gnutls@3.6.14-8.el8_3	0:3.6.14-10.el8_4.1
Medium	RHSA-2024:6989	expat@2.2.5-4.el8	0:2.2.5-15.el8_10
Medium	GHSA-wrvw-hg22-4m67	protobuf-java@3.18.0	3.18.2
Medium	RHSA-2024:4264	openldap@2.4.46-17.el8_4	0:2.4.46-19.el8_10
Medium	GHSA-9w3m-gqgf-c4p9	snakeyaml@1.28	1.32
Medium	RHSA-2024:0627	gnutls@3.6.14-8.el8_3	0:3.6.16-8.el8_9.1
Medium	RHSA-2021:4326	libX11@1.6.8-4.el8	0:1.6.8-5.el8
Medium	RHSA-2024:8922	bzip2@1.0.6-26.el8	0:1.0.6-27.el8_10
Medium	GHSA-6mjq-h674-j845	netty-handler@4.1.49.Final	4.1.94.Final
Medium	RHSA-2022:7108	sqlite@3.26.0-13.el8	0:3.26.0-16.el8_6
Medium	RHSA-2023:7029	libX11@1.6.8-4.el8	0:1.6.8-6.el8
Medium	RHSA-2025:23853	rsync@3.1.3-12.el8	0:3.1.3-12.el8_4.6
Medium	RHSA-2025:10128	python3@3.6.8-37.el8	0:3.6.8-70.el8_10
Medium	RHSA-2025:2660	libxml2@2.9.7-9.el8_4.2	0:2.9.7-9.el8_4.5
Medium	RHSA-2025:2686	libxml2@2.9.7-9.el8_4.2	0:2.9.7-19.el8_10
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.12.0	3.18.0
Medium	RHSA-2021:4060	libsolv@0.7.16-2.el8	0:0.7.16-3.el8_4
Medium	GHSA-4jq9-2xhw-jpx7	json@20201115	20231013
Medium	RHSA-2024:3626	libxml2@2.9.7-9.el8_4.2	0:2.9.7-18.el8_10.1
Medium	RHSA-2024:3344	glibc@2.28-151.el8	0:2.28-251.el8_10.2
Medium	RHSA-2023:1569	gnutls@3.6.14-8.el8_3	0:3.6.16-6.el8_7
Medium	RHSA-2021:4510	lua@5.3.4-11.el8	0:5.3.4-12.el8
Medium	RHSA-2022:6463	gnupg2@2.2.20-2.el8	0:2.2.20-3.el8_6
Medium	GHSA-c4r9-r8fh-9vj2	snakeyaml@1.28	1.31
Medium	RHSA-2023:1252	nss@3.53.1-17.el8_3	0:3.79.0-11.el8_7
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.6	2.14.0
Medium	RHSA-2025:3913	expat@2.2.5-4.el8	0:2.2.5-17.el8_10
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.49.Final	4.1.135.Final
Medium	RHSA-2025:11036	python-setuptools@39.2.0-6.el8	0:39.2.0-9.el8_10
Medium	RHSA-2023:0835	python-setuptools@39.2.0-6.el8	0:39.2.0-6.el8_7.1
Medium	RHSA-2023:7165	cups@1:2.2.6-38.el8	1:2.2.6-54.el8_9
Medium	RHSA-2026:8534	libarchive@3.3.3-1.el8	0:3.3.3-7.el8_10
Medium	RHSA-2026:9592	libarchive@3.3.3-1.el8	0:3.3.3-1.el8_4.2
Medium	GHSA-755v-r4x4-qf7m	keycloak-core@12.0.4	20.0.0
Medium	GHSA-98wm-3w3q-mw94	snakeyaml@1.28	1.31

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.0latest	3 years ago	2.1.0.Final	830276327	12,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.