sonarqube Helm chart

Name: sonarqube Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

webencryptor

Scored 14 Sept 2026

SonarQube is an open sourced code quality scanning tool

Latest 6.7.3 5 years agoapp version 8.2-community 0Artifact Hub

sonarqube 6.7.3 deploys 3 container images: library/busybox, library/sonarqube and bitnami/postgresql. Across the 2 measured, 258 findings — 10 critical, 14 high — 7 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.

Radar Score

5,4601014108126

258 findings over 2 of 3 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31	0000	0
library/sonarqube	8.2-community	1014108126	5,460
bitnami/postgresql	11.7.0-debian-10-r26	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

258 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.41	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.41	8.5.51
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.11.1	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.11.1	2.12.3
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.17	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.41	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.41	no fix listed
High	GHSA-8489-44mv-ggj8	log4j-core@2.11.1	2.12.4
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.41	no fix listed
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.41	no fix listed
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.41	8.5.55
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.41	8.5.94
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.17	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.41	8.5.55
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@8.5.41	8.5.99
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@8.5.41	8.5.63
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.1	2.10.5.1
High	GHSA-53x6-4x5p-rrvv	commons-compress@1.18	1.19
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.32.Final	4.1.44
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
High	DSA-4777-1KEV	freetype@2.9.1-3+deb10u1	2.9.1-3+deb10u2
Medium	DSA-5169-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u3
Medium	DLA-3807-1	glibc@2.28-10	2.28-10+deb10u3
Medium	DSA-4963-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u7
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.5	2.8.9
Medium	GHSA-mc84-pj99-q6hh	commons-compress@1.18	1.21
Medium	DLA-3804-1	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u3
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.0.3	5.4.0
Medium	DSA-4845-1	openldap@2.4.47+dfsg-3+deb10u1	2.4.47+dfsg-3+deb10u5
Medium	DSA-5139-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u2
Medium	GHSA-crv7-7245-f45f	commons-compress@1.18	1.21
Medium	GHSA-7hfm-57qf-j43q	commons-compress@1.18	1.21
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.2.8	42.2.28
Medium	DLA-3449-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u5
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@8.5.41	8.5.60
Medium	DSA-5103-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u8
Medium	GHSA-9xcj-c8cr-8c3c	tomcat-embed-core@8.5.41	8.5.50
Medium	GHSA-xqfj-vm6h-2x34	commons-compress@1.18	1.21
Medium	DSA-5140-1	openldap@2.4.47+dfsg-3+deb10u1	2.4.47+dfsg-3+deb10u7
Medium	DSA-4860-1	openldap@2.4.47+dfsg-3+deb10u1	2.4.47+dfsg-3+deb10u6
Medium	DSA-4875-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u6
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.32.Final	4.1.46
Medium	DLA-3325-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u4
Medium	DSA-5111-1	zlib@1:1.2.11.dfsg-1	1:1.2.11.dfsg-1+deb10u1
Medium	GHSA-jgwr-3qm3-26f3	tomcat-embed-core@8.5.41	8.5.61
Medium	DSA-4855-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u5
Medium	GHSA-j8wc-gxx9-82hx	xmlsec@2.1.4	2.1.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.7.3latest	5 years ago	8.2-community	1014108126	5,460

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/webencryptor/sonarqube.svg)](https://charts.stackradar.io/charts/webencryptor/sonarqube)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.