devportal 1.0.3 Helm chart

Name: devportal Helm chart 1.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

veecode-platform-next

Scored 7 Oct 2026

A Helm chart for deploying VeeCode DevPortal, a VeeCode distribution of Backstage.

Version 1.0.3 todayapp version 3.0.3 (not verified against the render) 0Artifact Hub

devportal 1.0.3 deploys 1 container image: veecode/devportal. Across them, 138 findings — 0 critical, 0 high. The highest contribution is GHSA-38jv-5279-wg99 in urllib3 2.2.2, fixed in 2.6.3. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

1,4210018120

138 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
veecode/devportal×2	digest-pinned	0018120	1,421

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

120 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-h35f-9h28-mq5c	setuptools@80.10.2	83.0.0
Low	GHSA-f83f-xpx7-ffpw	github.com/sigstore/fulcio@v1.7.1	1.8.3
Low	GHSA-3wwx-pv8p-q78v	undici@6.26.0	6.28.1
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.4	7.1.6
Low	PYSEC-2026-3721	pip@22.3.1	26.2
Low	GHSA-3pph-fpjx-jg34	multer@2.3.0	2.4.0
Low	GHSA-mq26-g339-26xf	pip@22.3.1	23.3
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	GHSA-fcv2-xgw5-pqxf	github.com/sigstore/sigstore@v1.9.5	1.10.4
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.46.0	0.52.0
Low	GO-2026-5025	golang.org/x/net@v0.48.0	0.55.0
Low	GHSA-h3mg-xc3c-68pw	ip-address@10.4.0	10.7.1
Low	GHSA-2rp8-mm9q-fp49	typeorm@1.0.0	1.1.0
Low	GHSA-pq67-6m6q-mj2v	urllib3@2.2.2	2.5.0
Low	RHSA-2026:73512	gawk@5.1.0-6.el9	0:5.1.0-6.el9_8.1
Low	GHSA-p88m-4jfj-68fv	undici@5.29.0	6.27.0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.79.3	1.82.1
Low	GHSA-65pc-fj4g-8rjx	idna@3.7	3.15
Low	GHSA-gxm5-99cw-xjw9	@fastify/busboy@2.1.1	3.2.2
Low	GHSA-4mjr-xmp4-gh2g	qs@6.15.2	6.16.0
Low	GHSA-5v7r-6r5c-r473	file-type@16.5.4	21.3.1
Low	GHSA-q8mj-m7cp-5q26	qs@6.14.2	6.15.2
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v28.5.1+incompatible	no fix listed
Low	GHSA-8m3c-c648-2xjj	nodemailer@8.0.11	9.1.1
Low	GHSA-9xwg-3r6f-jcx2	pymdown-extensions@10.19.1	11.0.0
Low	GHSA-8988-4f7v-96qf	@opentelemetry/core@2.7.1	2.8.0
Low	GHSA-48p4-8xcf-vxj5	urllib3@2.2.2	2.5.0
Low	GHSA-hp3w-g68c-fv3c	sprintf-js@1.0.3	no fix listed
Low	GHSA-xvg9-69gf-fjrf	mkdocs-material@9.7.1	9.7.7
Low	GHSA-8vvx-rff5-p5rq	nodemailer@8.0.11	10.0.2
Low	GO-2026-5027	golang.org/x/net@v0.48.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.48.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.48.0	0.55.0
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.2.2	2.7.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-cassandra-driver@0.65.0	0.66.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-knex@0.64.0	0.65.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-pg@0.72.0	0.73.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-oracledb@0.45.0	0.46.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-mysql2@0.66.0	0.67.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-mysql@0.66.0	0.67.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-mongoose@0.66.0	0.67.0
Low	GHSA-qqmp-wf37-98f9	@opentelemetry/instrumentation-tedious@0.39.0	0.40.0
Low	GHSA-59jp-pj84-45mr	github.com/sigstore/fulcio@v1.7.1	1.8.5
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@2.1.6	2.1.7
Low	GHSA-rg2x-37c3-w2rh	github.com/docker/docker@v28.5.1+incompatible	no fix listed
Low	GHSA-62q4-447f-wv8h	pymdown-extensions@10.19.1	10.21.3
Low	PYSEC-2026-2275	requests@2.32.4	2.33.0
Low	GHSA-38hq-7x33-php4	@backstage/plugin-auth-backend@0.29.1	0.29.2
Low	GHSA-hrr3-gc8f-f4qj	fast-uri@3.1.7	3.1.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.3latest	today	3.0.3	0018120	1,421
1.0.1	yesterday	3.0.1	0022126	1,562
1.0.0	4 days ago	3.0.0	0018107	1,306
0.1.26	6 days ago	3.0.0-beta.10	0032187	2,296
0.1.25	8 days ago	3.0.0-beta.9	0028182	2,169
0.1.24	12 days ago	3.0.0-beta.9	0028182	2,169
0.1.23	21 days ago	3.0.0-beta.6	0020164	1,866
0.1.22	22 days ago	3.0.0-beta.6	0018164	1,806
0.1.21	1 month ago	3.0.0-beta.6	0018164	1,806

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/veecode-platform-next/devportal.svg)](https://charts.stackradar.io/charts/veecode-platform-next/devportal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.