StackRadar

configserver Helm chart

twomartensVerified publisher

Scored 14 Sept 2026

Minimal Spring Boot config server

Latest 0.2.0 2 years agoApp version not verified against the render 0Artifact Hub

configserver 0.2.0 deploys 1 container image: 2martens/configserver. Across them, 126 findings — 3 critical, 8 high — 1 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.28, fixed in 10.1.35.

Radar Score

2,144383481

126 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
2martens/configserverlatest3834812,144

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

126 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-83qj-6fr2-vhqgKEVtomcat-embed-core@10.1.2810.1.35
CriticalGHSA-5j33-cvvr-w245tomcat-embed-core@10.1.2810.1.34
CriticalGHSA-3p2h-wqq4-wf4htomcat-embed-core@10.1.2810.1.40
HighALPINE-CVE-2025-15467openssl@3.3.1-r33.3.6-r0
HighGHSA-vgq5-3255-v292kafka-clients@3.7.13.9.1
HighALPINE-CVE-2024-6119openssl@3.3.1-r33.3.2-r0
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@10.1.2810.1.45
HighGHSA-h3gc-qfqq-6h8ftomcat-embed-core@10.1.2810.1.42
HighGHSA-g5vr-rgqm-vf78spring-webmvc@6.1.126.1.14
HighGHSA-vfww-5hm6-hx2jtomcat-embed-core@10.1.2810.1.45
HighGHSA-27hp-xhwr-wr2mtomcat-embed-core@10.1.2810.1.34
MediumGHSA-cx7f-g6mp-7hqmspring-webmvc@6.1.126.1.13
MediumGHSA-gqp3-2cvr-x8m3tomcat-embed-core@10.1.2810.1.44
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@10.1.2810.1.55
MediumGHSA-ff77-26x5-69crtomcat-embed-core@10.1.2810.1.40
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@10.1.2810.1.55
MediumGHSA-wc4r-xq3c-5cf3tomcat-embed-core@10.1.2810.1.42
MediumGHSA-wr62-c79q-cv37tomcat-embed-core@10.1.2810.1.43
MediumGHSA-5m62-pw8w-7w9ftomcat-embed-core@10.1.2810.1.55
MediumGHSA-25xr-qj8w-c4vftomcat-embed-core@10.1.2810.1.43
MediumGHSA-3qwq-q9vm-5j42spring-cloud-config-server@4.1.3no fix listed
MediumGHSA-h2fw-rfh5-95r3tomcat-embed-core@10.1.2810.1.41
MediumGHSA-9xv2-5v5q-p794tomcat-embed-core@10.1.2810.1.58
MediumALPINE-CVE-2025-9230openssl@3.3.1-r33.3.5-r0
MediumALPINE-CVE-2024-12797openssl@3.3.1-r33.3.3-r0
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.14.03.18.0
MediumALPINE-CVE-2025-9231openssl@3.3.1-r33.3.5-r0
MediumGHSA-qvf5-hvjx-wm27tomcat-embed-core@10.1.2810.1.31
MediumGHSA-6g23-24mc-hx6xspring-cloud-config-server@4.1.3no fix listed
MediumGHSA-h3x4-894j-xpx5tomcat-embed-core@10.1.2810.1.58
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.17.22.18.8
MediumALPINE-CVE-2024-9143openssl@3.3.1-r33.3.2-r1
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.17.22.18.8
MediumGHSA-gcx9-497g-6cp6tomcat-embed-core@10.1.2810.1.58
MediumALPINE-CVE-2026-31790openssl@3.3.1-r33.3.7-r0
MediumGHSA-r936-gwx5-v52fspring-webmvc@6.1.12no fix listed
MediumALPINE-CVE-2025-9232openssl@3.3.1-r33.3.5-r0
MediumALPINE-CVE-2026-28388openssl@3.3.1-r33.3.7-r0
MediumALPINE-CVE-2025-69421openssl@3.3.1-r33.3.6-r0
MediumGHSA-hf6x-8p5f-cgmfhttpcore5@5.2.55.4.3
MediumGHSA-v3jc-474w-2wm6httpcore5-h2@5.2.55.4.3
MediumALPINE-CVE-2026-28387openssl@3.3.1-r33.3.7-r0
MediumGHSA-gx5v-xp9w-j4cgtomcat-embed-core@10.1.2810.1.55
MediumALPINE-CVE-2026-28389openssl@3.3.1-r33.3.7-r0
MediumALPINE-CVE-2026-28390openssl@3.3.1-r33.3.7-r0
LowALPINE-CVE-2025-69420openssl@3.3.1-r33.3.6-r0
LowGHSA-g3pr-3p32-fp23micrometer-core@1.13.3no fix listed
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.23.12.25.4
LowGHSA-445c-vh5m-36rjlog4j-core@2.23.12.25.4
LowGHSA-5qcv-4rpc-jp93kafka-clients@3.7.13.9.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.0latest2 years ago—3834812,144

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/twomartens/configserver.svg)](https://charts.stackradar.io/charts/twomartens/configserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.