StackRadar

devportal 1.0.1 Helm chart

veecode-platform-nextVerified publisher

Scored 6 Oct 2026

A Helm chart for deploying VeeCode DevPortal, a VeeCode distribution of Backstage.

Version 1.0.1 todayapp version 3.0.1 (not verified against the render) 0Artifact Hub

devportal 1.0.1 deploys 1 container image: veecode/devportal. Across them, 148 findings — 0 critical, 0 high. The highest contribution is GHSA-38jv-5279-wg99 in urllib3 2.2.2, fixed in 2.6.3. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

1,5620022126

148 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
veecode/devportal×2digest-pinned00221261,562

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

148 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-x86f-5xw2-fm2rgithub.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-8m3c-c648-2xjjnodemailer@8.0.119.1.1
LowGHSA-9xwg-3r6f-jcx2pymdown-extensions@10.19.111.0.0
LowGHSA-8988-4f7v-96qf@opentelemetry/core@2.7.12.8.0
LowGHSA-48p4-8xcf-vxj5urllib3@2.2.22.5.0
LowGHSA-7mx3-vvmw-hjmv@graphql-tools/utils@8.9.012.0.1
LowGHSA-hp3w-g68c-fv3csprintf-js@1.1.3no fix listed
LowGHSA-xvg9-69gf-fjrfmkdocs-material@9.7.19.7.7
LowGHSA-8vvx-rff5-p5rqnodemailer@8.0.1110.0.2
LowGO-2026-5027golang.org/x/net@v0.48.00.55.0
LowGO-2026-5029golang.org/x/net@v0.48.00.55.0
LowGO-2026-5030golang.org/x/net@v0.48.00.55.0
LowGHSA-qccp-gfcp-xxvcurllib3@2.2.22.7.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-cassandra-driver@0.65.00.66.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-tedious@0.39.00.40.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-pg@0.72.00.73.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-oracledb@0.45.00.46.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-mysql2@0.66.00.67.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-mysql@0.66.00.67.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-mongoose@0.66.00.67.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-knex@0.64.00.65.0
LowGHSA-59jp-pj84-45mrgithub.com/sigstore/fulcio@v1.7.11.8.5
LowGHSA-q2hr-2g5m-vwhrbrace-expansion@5.0.95.0.12
LowGHSA-rg2x-37c3-w2rhgithub.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-62q4-447f-wv8hpymdown-extensions@10.19.110.21.3
LowPYSEC-2026-2275requests@2.32.42.33.0
LowGHSA-38hq-7x33-php4@backstage/plugin-auth-backend@0.29.10.29.2
LowGHSA-hrr3-gc8f-f4qjfast-uri@3.1.73.1.8
LowGHSA-x5fp-wj9c-mxmxqs@6.14.26.16.0
LowGHSA-4992-7rv2-5pvqundici@5.29.06.24.0
LowGHSA-jp4c-xjxw-mgf9pip@22.3.126.1
LowGHSA-253c-mchw-3w2rmarkdown-it@14.2.014.3.1
LowGHSA-6vj9-mwq6-2f5vnodemailer@8.0.1110.0.2
LowGHSA-vp62-88p7-qqf5github.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-v3r7-h72x-cjcmundici@5.29.06.28.0
LowGHSA-v422-hmwv-36x6body-parser@1.20.41.20.6
LowGHSA-rgwj-5xj2-c3m3mysql2@3.22.53.23.1
LowGHSA-8xcm-r25x-g524undici@5.29.06.28.0
LowGHSA-58qw-9mgm-455vpip@22.3.126.1
LowGHSA-m8rv-5g2x-5cg5undici@5.29.06.28.0
LowGHSA-35p6-xmwp-9g52undici@5.29.06.27.0
LowGHSA-r53p-7pc4-xj5rundici@5.29.06.28.1
LowGHSA-g8m3-5g58-fq7mundici@5.29.06.27.0
LowGO-2026-5932golang.org/x/crypto@v0.46.0no fix listed
LowGHSA-vpq2-c234-7xj6@tootallnate/once@2.0.02.0.1
LowGHSA-5239-wwwm-4pmqpygments@2.19.22.20.0
LowGO-2026-5024golang.org/x/sys@v0.39.00.44.0
LowGHSA-6vgw-5pg2-w6jppip@22.3.126.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latesttoday3.0.100221261,562
1.0.03 days ago3.0.000181071,306
0.1.265 days ago3.0.0-beta.1000321872,296
0.1.257 days ago3.0.0-beta.900281822,169
0.1.2411 days ago3.0.0-beta.900281822,169
0.1.2321 days ago3.0.0-beta.600201641,866
0.1.2221 days ago3.0.0-beta.600181641,806
0.1.211 month ago3.0.0-beta.600181641,806

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/veecode-platform-next/devportal.svg)](https://charts.stackradar.io/charts/veecode-platform-next/devportal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Oct 2026 · scanned 6 Oct 2026 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.