StackRadar

devportal 1.0.4 Helm chart

veecode-platform-nextVerified publisher

Scored 16 Oct 2026

A Helm chart for deploying VeeCode DevPortal, a VeeCode distribution of Backstage.

Version 1.0.4 2 days agoapp version 3.0.3 (not verified against the render) 0Artifact Hub

devportal 1.0.4 deploys 1 container image: veecode/devportal. Across them, 195 findings — 0 critical, 0 high. The highest contribution is GHSA-38jv-5279-wg99 in urllib3 2.2.2, fixed in 2.6.3. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

1,9770021174

195 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
veecode/devportal×2digest-pinned00211741,977

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

174 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-65pc-fj4g-8rjxidna@3.73.15
LowGHSA-5v7r-6r5c-r473file-type@16.5.421.3.1
LowGHSA-gxm5-99cw-xjw9@fastify/busboy@2.1.13.2.2
LowGHSA-4mjr-xmp4-gh2gqs@6.15.26.16.0
LowGHSA-q8mj-m7cp-5q26qs@6.14.26.15.2
LowGHSA-8m3c-c648-2xjjnodemailer@8.0.119.1.1
LowGHSA-9xwg-3r6f-jcx2pymdown-extensions@10.19.111.0.0
LowGHSA-8988-4f7v-96qf@opentelemetry/core@2.7.12.8.0
LowGHSA-hp3w-g68c-fv3csprintf-js@1.0.3no fix listed
LowGHSA-48p4-8xcf-vxj5urllib3@2.2.22.5.0
LowGHSA-x86f-5xw2-fm2rgithub.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-xvg9-69gf-fjrfmkdocs-material@9.7.19.7.7
LowGHSA-8vvx-rff5-p5rqnodemailer@8.0.1110.0.2
LowGO-2026-5027golang.org/x/net@v0.48.00.55.0
LowGO-2026-5029golang.org/x/net@v0.48.00.55.0
LowGO-2026-5030golang.org/x/net@v0.48.00.55.0
LowGHSA-qccp-gfcp-xxvcurllib3@2.2.22.7.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-mysql2@0.66.00.67.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-cassandra-driver@0.65.00.66.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-knex@0.64.00.65.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-mongoose@0.66.00.67.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-mysql@0.66.00.67.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-oracledb@0.45.00.46.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-pg@0.72.00.73.0
LowGHSA-qqmp-wf37-98f9@opentelemetry/instrumentation-tedious@0.39.00.40.0
LowGHSA-cm77-ch27-6w6v@backstage/plugin-techdocs-node@1.15.1+embedded1.15.4
LowGHSA-59jp-pj84-45mrgithub.com/sigstore/fulcio@v1.7.11.8.5
LowGHSA-29gx-h2m3-xw44@backstage/plugin-scaffolder-backend@4.0.14.1.0
LowGHSA-29gx-h2m3-xw44@backstage/plugin-scaffolder-backend-module-gitlab@0.11.7+embedded0.11.10
LowGHSA-29gx-h2m3-xw44@backstage/plugin-scaffolder-backend-module-github@0.9.10+embedded0.9.13
LowGHSA-q2hr-2g5m-vwhrbrace-expansion@2.1.62.1.7
LowGHSA-95p4-vv4g-jxxm@backstage/plugin-scaffolder-backend@4.0.14.1.0
LowGHSA-rg2x-37c3-w2rhgithub.com/docker/docker@v28.5.1+incompatibleno fix listed
LowGHSA-r9ph-3637-55px@backstage/plugin-kubernetes-backend@0.21.5+embedded0.21.8
LowGHSA-vwp5-f99x-x3rq@backstage/plugin-scaffolder-backend@4.0.14.1.0
LowGHSA-mfvq-x7vr-rgqg@backstage/plugin-scaffolder-backend@4.0.14.1.0
LowGHSA-62q4-447f-wv8hpymdown-extensions@10.19.110.21.3
LowPYSEC-2026-2275requests@2.32.42.33.0
LowGO-2026-6599stdlib@go1.26.71.26.9
LowGO-2026-6600stdlib@go1.26.71.26.9
LowGO-2026-6617golang.org/x/net@v0.48.00.60.0
LowGO-2026-6617stdlib@go1.26.71.26.9
LowGHSA-38hq-7x33-php4@backstage/plugin-auth-backend@0.29.10.29.2
LowGHSA-hrr3-gc8f-f4qjfast-uri@3.1.73.1.8
LowGHSA-x5fp-wj9c-mxmxqs@6.15.26.16.0
LowGHSA-4992-7rv2-5pvqundici@5.29.06.24.0
LowGHSA-gp6m-x9vw-5c5x@backstage/plugin-catalog-backend-module-gitlab@0.8.4+embedded0.8.7
LowGHSA-472h-9c5j-prrr@backstage/plugin-proxy-backend@0.6.140.6.18
LowGHSA-jp4c-xjxw-mgf9pip@22.3.126.1
LowGHSA-253c-mchw-3w2rmarkdown-it@14.2.014.3.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.0latesttoday3.1.000191311,573
1.0.42 days ago3.0.300211741,977
1.0.39 days ago3.0.300211741,977
1.0.110 days ago3.0.100221261,562
1.0.013 days ago3.0.000181071,306
0.1.2615 days ago3.0.0-beta.1000321872,296
0.1.2517 days ago3.0.0-beta.900281822,169
0.1.2421 days ago3.0.0-beta.900281822,169
0.1.2330 days ago3.0.0-beta.600201641,866
0.1.221 month ago3.0.0-beta.600181641,806
0.1.211 month ago3.0.0-beta.600181641,806

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/veecode-platform-next/devportal.svg)](https://charts.stackradar.io/charts/veecode-platform-next/devportal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 14 Oct 2026 · scanned 15 Oct 2026 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.