devportal 1.0.4 Helm chart

Name: devportal Helm chart 1.0.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

veecode-platform-next

Scored 16 Oct 2026

A Helm chart for deploying VeeCode DevPortal, a VeeCode distribution of Backstage.

Version 1.0.4 2 days agoapp version 3.0.3 (not verified against the render) 0Artifact Hub

devportal 1.0.4 deploys 1 container image: veecode/devportal. Across them, 195 findings — 0 critical, 0 high. The highest contribution is GHSA-38jv-5279-wg99 in urllib3 2.2.2, fixed in 2.6.3. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

1,9770021174

195 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
veecode/devportal×2	digest-pinned	0021174	1,977

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

174 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-vxpw-j846-p89q	undici@5.29.0	6.27.0
Low	GO-2026-4918	golang.org/x/net@v0.48.0	0.53.0
Low	GHSA-qmw3-745m-w99g	@backstage/plugin-techdocs-node@1.15.1+embedded	1.15.4
Low	GHSA-vfj7-8cjw-p6xm	braces@3.0.3	no fix listed
Low	GHSA-hq3h-g68c-hp78	urllib@3.27.3	4.9.1
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-gm37-52c6-37mw	pymdown-extensions@10.19.1	11.0.1
Low	GHSA-vc2v-76pw-4v95	compression@1.8.1	1.8.2
Low	GO-2026-6603	golang.org/x/net@v0.48.0	0.60.0
Low	GO-2026-6603	stdlib@go1.26.7	1.26.9
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.2.0	no fix listed
Low	GO-2026-6611	stdlib@go1.26.7	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.48.0	0.60.0
Low	GHSA-wf93-45jw-7689	pip@22.3.1	26.1.2
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.2.2	2.8.0
Low	GO-2026-5942	golang.org/x/net@v0.48.0	0.56.0
Low	GHSA-r292-9mhp-454m	tar@7.5.19	7.5.21
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/selinux@v1.12.0	1.13.0
Low	RHSA-2026:81532	pcre2@10.40-6.el9	0:10.40-7.el9_8
Low	GO-2026-6355	golang.org/x/crypto@v0.46.0	0.56.0
Low	GHSA-x8mw-p69m-v3mx	@fastify/busboy@2.1.1	3.2.1
Low	GHSA-xvgh-hmx8-9xxf	@backstage/plugin-scaffolder-backend@4.0.1	4.1.0
Low	GHSA-4488-j8vj-vqqv	@backstage/plugin-techdocs-node@1.15.1+embedded	1.15.4
Low	GHSA-c475-qrg2-pj4r	basic-ftp@5.3.1	6.2.1
Low	GHSA-hmp2-4m7g-22cv	@backstage/plugin-scaffolder-backend@4.0.1	4.0.3
Low	GO-2026-5970	golang.org/x/text@v0.32.0	0.39.0
Low	GHSA-7mx3-vvmw-hjmv	@graphql-tools/utils@8.13.1	12.0.1
Low	RHSA-2026:80511	curl@7.76.1-40.el9_8.7	0:7.76.1-40.el9_8.8
Low	GHSA-86w9-cpqp-85rv	node-forge@1.4.0	no fix listed
Low	GHSA-8cw4-87c7-c6xx	csv-parse@5.6.0	7.0.2
Low	GHSA-f5mr-q85p-6hh6	github.com/sigstore/fulcio@v1.7.1	1.8.6
Low	GO-2026-6303	golang.org/x/crypto@v0.46.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.46.0	0.56.0
Low	GO-2026-6608	stdlib@go1.26.7	1.26.9
Low	GHSA-8w7q-29mw-gf5c	@backstage/plugin-techdocs-node@1.15.1+embedded	1.15.4
Low	GHSA-rfgv-xxqx-mfg5	undici@6.26.0	6.28.1
Low	GO-2026-6607	stdlib@go1.26.7	1.26.9
Low	RHSA-2026:73838	nodejs@1:24.19.0-1.module+el9.8.0+24708+e71d2e1d	1:24.21.0-1.module+el9.8.0+24924+cd677006
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v28.5.1+incompatible	no fix listed
Low	GO-2026-6609	stdlib@go1.26.7	1.26.9
Low	GHSA-w5hq-g745-h8pq	uuid@13.0.0	13.0.1
Low	RHSA-2026:77396	openssl@1:3.5.8-1.el9_8	1:3.5.8-2.el9_8
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GHSA-q38j-6vcm-2f5m	@backstage/plugin-techdocs-node@1.15.1+embedded	1.15.5
Low	GHSA-826h-28h9-65hg	@backstage/plugin-auth-backend-module-oidc-provider@0.4.17	0.4.20
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@5.0.9	5.0.10
Low	GHSA-qhr7-859c-m2p7	brace-expansion@5.0.9	5.0.11
Low	GHSA-qgvj-qcf8-xq73	@backstage/plugin-catalog-backend@3.8.0	3.9.1
Low	GHSA-p75x-jh7p-ppcx	@backstage/plugin-techdocs-node@1.15.1+embedded	1.15.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.0latest	today	3.1.0	0019131	1,573
1.0.4	2 days ago	3.0.3	0021174	1,977
1.0.3	9 days ago	3.0.3	0021174	1,977
1.0.1	10 days ago	3.0.1	0022126	1,562
1.0.0	13 days ago	3.0.0	0018107	1,306
0.1.26	15 days ago	3.0.0-beta.10	0032187	2,296
0.1.25	17 days ago	3.0.0-beta.9	0028182	2,169
0.1.24	21 days ago	3.0.0-beta.9	0028182	2,169
0.1.23	30 days ago	3.0.0-beta.6	0020164	1,866
0.1.22	1 month ago	3.0.0-beta.6	0018164	1,806
0.1.21	1 month ago	3.0.0-beta.6	0018164	1,806

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/veecode-platform-next/devportal.svg)](https://charts.stackradar.io/charts/veecode-platform-next/devportal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.