StackRadar

devportal 1.0.0 Helm chart

veecode-platform-nextVerified publisher

Scored 6 Oct 2026

A Helm chart for deploying VeeCode DevPortal, a VeeCode distribution of Backstage.

Version 1.0.0 3 days agoapp version 3.0.0 (not verified against the render) 0Artifact Hub

devportal 1.0.0 deploys 1 container image: veecode/devportal. Across them, 125 findings — 0 critical, 0 high. The highest contribution is GHSA-38jv-5279-wg99 in urllib3 2.2.2, fixed in 2.6.3. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

1,3060018107

125 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
veecode/devportal×2digest-pinned00181071,306

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

107 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-3wwx-pv8p-q78vundici@6.26.06.28.1
LowPYSEC-2026-3721pip@22.3.126.2
LowGHSA-3pph-fpjx-jg34multer@2.3.02.4.0
LowGHSA-mq26-g339-26xfpip@22.3.123.3
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.79.31.83.1
LowGHSA-fcv2-xgw5-pqxfgithub.com/sigstore/sigstore@v1.9.51.10.4
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.46.00.52.0
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.46.00.52.0
LowGO-2026-5025golang.org/x/net@v0.48.00.55.0
LowGHSA-h3mg-xc3c-68pwip-address@10.5.010.7.1
LowGHSA-2rp8-mm9q-fp49typeorm@1.0.01.1.0
LowGHSA-pq67-6m6q-mj2vurllib3@2.2.22.5.0
LowRHSA-2026:73512gawk@5.1.0-6.el90:5.1.0-6.el9_8.1
LowGHSA-p88m-4jfj-68fvundici@5.29.06.27.0
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.79.31.82.1
LowGHSA-65pc-fj4g-8rjxidna@3.73.15
LowGHSA-4mjr-xmp4-gh2gqs@6.15.26.16.0
LowGHSA-5v7r-6r5c-r473file-type@16.5.421.3.1
LowGHSA-q8mj-m7cp-5q26qs@6.14.26.15.2
LowGHSA-x86f-5xw2-fm2rgithub.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-8m3c-c648-2xjjnodemailer@8.0.119.1.1
LowGHSA-9xwg-3r6f-jcx2pymdown-extensions@10.19.111.0.0
LowGHSA-8988-4f7v-96qf@opentelemetry/core@2.7.12.8.0
LowGHSA-48p4-8xcf-vxj5urllib3@2.2.22.5.0
LowGHSA-xvg9-69gf-fjrfmkdocs-material@9.7.19.7.7
LowGHSA-8vvx-rff5-p5rqnodemailer@8.0.1110.0.2
LowGO-2026-5027golang.org/x/net@v0.48.00.55.0
LowGO-2026-5029golang.org/x/net@v0.48.00.55.0
LowGO-2026-5030golang.org/x/net@v0.48.00.55.0
LowGHSA-qccp-gfcp-xxvcurllib3@2.2.22.7.0
LowGHSA-59jp-pj84-45mrgithub.com/sigstore/fulcio@v1.7.11.8.5
LowGHSA-q2hr-2g5m-vwhrbrace-expansion@5.0.95.0.12
LowGHSA-rg2x-37c3-w2rhgithub.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-62q4-447f-wv8hpymdown-extensions@10.19.110.21.3
LowPYSEC-2026-2275requests@2.32.42.33.0
LowGHSA-38hq-7x33-php4@backstage/plugin-auth-backend@0.29.10.29.2
LowGHSA-hrr3-gc8f-f4qjfast-uri@3.1.73.1.8
LowGHSA-x5fp-wj9c-mxmxqs@6.15.26.16.0
LowGHSA-4992-7rv2-5pvqundici@5.29.06.24.0
LowGHSA-jp4c-xjxw-mgf9pip@22.3.126.1
LowGHSA-253c-mchw-3w2rmarkdown-it@14.2.014.3.1
LowGHSA-6vj9-mwq6-2f5vnodemailer@8.0.1110.0.2
LowGHSA-vp62-88p7-qqf5github.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-v3r7-h72x-cjcmundici@5.29.06.28.0
LowGHSA-v422-hmwv-36x6body-parser@1.20.41.20.6
LowGHSA-rgwj-5xj2-c3m3mysql2@3.22.53.23.1
LowGHSA-8xcm-r25x-g524undici@5.29.06.28.0
LowGHSA-58qw-9mgm-455vpip@22.3.126.1
LowGHSA-m8rv-5g2x-5cg5undici@5.29.06.28.0
LowGHSA-35p6-xmwp-9g52undici@5.29.06.27.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latesttoday3.0.100221261,562
1.0.03 days ago3.0.000181071,306
0.1.265 days ago3.0.0-beta.1000321872,296
0.1.257 days ago3.0.0-beta.900281822,169
0.1.2411 days ago3.0.0-beta.900281822,169
0.1.2321 days ago3.0.0-beta.600201641,866
0.1.2221 days ago3.0.0-beta.600181641,806
0.1.211 month ago3.0.0-beta.600181641,806

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/veecode-platform-next/devportal.svg)](https://charts.stackradar.io/charts/veecode-platform-next/devportal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 3 Oct 2026 · scanned 5 Oct 2026 · advisories as of 5 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.