hermes Helm chart

Name: hermes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

touk

Scored 14 Sept 2026

A Helm chart for Kubernetes of Hermes, a reliable and easy to use message broker built on top of Kafka.

Latest 0.6.0 3 years agodeploys tag 2.1.0.Final 0Artifact Hub

hermes 0.6.0 deploys 3 container images: apicurio/apicurio-registry-kafkasql, bitnami/zookeeper and bitnami/kafka. Across the 1 measured, 641 findings — 8 critical, 30 high — 4 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-6.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

12,455830276327

641 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
apicurio/apicurio-registry-kafkasql	2.1.0.Final	830276327	12,455
bitnami/zookeeper	3.8.0-debian-11-r74	—	unmeasured
bitnami/kafka	3.3.1-debian-11-r34	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

276 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	RHSA-2023:2963	curl@7.61.1-18.el8	0:7.61.1-30.el8
Medium	RHSA-2024:4567	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.24.0.8-3.el8
Medium	RHSA-2023:5996	python3@3.6.8-37.el8	0:3.6.8-39.el8_4.3
Medium	GHSA-3vqj-43w4-2q58	json@20201115	20230227
Medium	RHSA-2025:15702	cups@1:2.2.6-38.el8	1:2.2.6-63.el8_10
Medium	RHSA-2026:5588	python3@3.6.8-37.el8	0:3.6.8-74.el8_10
Medium	RHSA-2024:0253	sqlite@3.26.0-13.el8	0:3.26.0-19.el8_9
Medium	RHSA-2023:3018	libarchive@3.3.3-1.el8	0:3.3.3-5.el8
Medium	GHSA-qpq9-jpv4-6gwr	keycloak-core@12.0.4	15.1.0
Medium	GHSA-3x8x-79m2-3w2w	jackson-databind@2.12.1	2.12.6
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.12.1	2.18.8
Medium	RHSA-2023:1140	curl@7.61.1-18.el8	0:7.61.1-25.el8_7.3
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.12.1	2.18.8
Medium	RHSA-2023:0116	libtasn1@4.13-3.el8	0:4.13-4.el8_7
Medium	RHSA-2026:29898	libpng@2:1.6.34-5.el8	2:1.6.34-11.el8_10
Medium	GHSA-p4qx-6w5p-4rj2	graphql-java@17.3	17.5
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.49.Final	4.1.124.Final
Medium	GHSA-55g7-9cwv-5qfv	snappy-java@1.1.7.7	1.1.10.4
Medium	RHSA-2023:5249	ncurses@6.1-7.20180224.el8	0:6.1-9.20180224.el8_8.1
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.12.1	2.15.0
Medium	RHSA-2021:4385	glib2@2.56.4-10.el8_4.1	0:2.56.4-156.el8
Medium	RHSA-2022:7012	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.17.0.8-2.el8_6
Medium	RHSA-2025:11327	glib2@2.56.4-10.el8_4.1	0:2.56.4-166.el8_10
Medium	RHSA-2025:14990	glib2@2.56.4-10.el8_4.1	0:2.56.4-10.el8_4.2
Medium	RHBA-2024:5736	ca-certificates@2020.2.41-80.0.el8_2	0:2024.2.69_v8.0.303-80.0.el8_10
Medium	GHSA-w37g-rhq8-7m4j	snakeyaml@1.28	1.32
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.49.Final	4.1.133.Final
Medium	GHSA-5mcr-gq6c-3hq2	netty-codec-http@4.1.49.Final	4.1.59.Final
Medium	RHSA-2024:0234	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.22.0.7-1.el8_4
Medium	RHSA-2024:0266	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.22.0.7-2.el8
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.49.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.49.Final	4.1.133.Final
Medium	RHSA-2026:26408	rsync@3.1.3-12.el8	0:3.1.3-27.el8_10
Medium	RHSA-2024:8121	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.25.0.9-2.el8
Medium	GHSA-6hc9-cf8x-hf83	quarkus-oidc@1.13.2.Final	2.13.0.Final
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.49.Final	4.1.136.Final
Medium	GHSA-h9mq-f6q5-6c8m	graphql-java@17.3	19.11
Medium	RHSA-2022:7011	java-11-openjdk@1:11.0.12.0.7-0.el8_4	1:11.0.17.0.8-2.el8_4
Medium	RHSA-2023:0096	dbus@1:1.12.8-12.el8_4.2	1:1.12.8-23.el8_7.1
Medium	RHSA-2026:26354	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.5
Medium	RHSA-2026:40841	cdi-api@2.0.1-3.module+el8.3.0+6804+157bd82e	0:2.0.2-7.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	maven@1:3.6.2-6.module+el8.4.0+9250+1786af37	1:3.8.5-6.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	maven-resolver@1.4.1-3.module+el8.3.0+6804+157bd82e	1:1.7.3-6.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	maven-shared-utils@3.2.1-0.4.module+el8.3.0+6804+157bd82e	0:3.3.4-6.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	maven-wagon@3.3.4-2.module+el8.3.0+6804+157bd82e	0:3.5.1-3.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	atinject@1-31.20100611svn86.module+el8.3.0+6804+157bd82e	0:1.0.5-5.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	apache-commons-lang3@3.9-4.module+el8.3.0+6804+157bd82e	0:3.12.0-8.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	apache-commons-io@1:2.6-6.module+el8.3.0+6804+157bd82e	1:2.11.0-3.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	apache-commons-codec@1.13-3.module+el8.3.0+6804+157bd82e	0:1.15-8.module+el8.10.0+21301+657f54a3
Medium	RHSA-2026:40841	apache-commons-cli@1.4-7.module+el8.3.0+6804+157bd82e	0:1.5.0-5.module+el8.10.0+21301+657f54a3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.0latest	3 years ago	2.1.0.Final	830276327	12,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/touk/hermes.svg)](https://charts.stackradar.io/charts/touk/hermes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.