sonarqube 6.7.3 Helm chart

Name: sonarqube Helm chart 6.7.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

webencryptor

Scored 14 Sept 2026

SonarQube is an open sourced code quality scanning tool

Version 6.7.3 5 years agoapp version 8.2-community 0Artifact Hub

sonarqube 6.7.3 deploys 3 container images: library/busybox, library/sonarqube and bitnami/postgresql. Across the 2 measured, 258 findings — 10 critical, 14 high — 7 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.

Radar Score

5,4601014108126

258 findings over 2 of 3 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31	0000	0
library/sonarqube	8.2-community	1014108126	5,460
bitnami/postgresql	11.7.0-debian-10-r26	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

258 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DLA-3783-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u7
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.32.Final	4.1.137.Final
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	DLA-3341-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u5
Low	DLA-3153-1	libksba@1.3.5-2	1.3.5-2+deb10u1
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	DLA-3740-1	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u12
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.32.Final	4.1.133.Final
Low	DLA-3248-1	libksba@1.3.5-2	1.3.5-2+deb10u2
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.18	1.26.0
Low	DLA-3321-1	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.32.Final	4.1.129.Final
Low	DLA-3167-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3
Low	DLA-3850-1	glibc@2.28-10	2.28-10+deb10u4
Low	DSA-4685-1	apt@1.8.2	1.8.2.1
Low	DLA-3660-1	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u11
Low	DLA-3107-1	sqlite3@3.27.2-3	3.27.2-3+deb10u2
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.32.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.32.Final	4.1.115.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.32.Final	4.1.137.Final
Low	DLA-3377-1	systemd@241-7~deb10u3	241-7~deb10u9
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.8.11	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.32.Final	4.1.118.Final
Low	GHSA-2hjr-vmf3-xwvp	elasticsearch@6.8.4	7.17.16
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.10.1	2.18.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.10.1	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.8	42.2.27
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.32.Final	4.1.133.Final
Low	GHSA-7g45-4rm6-3mm3	guava@26.0-jre	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GHSA-5mg8-w23w-74h3	guava@26.0-jre	32.0.0-android
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.32.Final	4.1.135.Final
Low	GHSA-g9fw-9x87-rmrj	elasticsearch@6.8.4	6.8.13
Low	DSA-4850-1	libzstd@1.3.8+dfsg-3	1.3.8+dfsg-3+deb10u1
Low	DLA-3474-1	systemd@241-7~deb10u3	241-7~deb10u10
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.8.11	2.13.0
Low	DSA-4808-1	apt@1.8.2	1.8.2.2
Low	GHSA-5v8f-xx9m-wj44	elasticsearch@6.8.4	7.17.23
Low	DSA-4859-1	libzstd@1.3.8+dfsg-3	1.3.8+dfsg-3+deb10u2
Low	DLA-3755-1	tar@1.30+dfsg-6	1.30+dfsg-6+deb10u1
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@8.5.41	9.0.118
Low	DLA-3112-1	bzip2@1.0.6-9.2~deb10u1	1.0.6-9.2~deb10u2
Low	DLA-3134-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u7
Low	DLA-3161-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u8
Low	DLA-3366-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u10
Low	DLA-3412-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.7.3latest	5 years ago	8.2-community	1014108126	5,460

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/webencryptor/sonarqube.svg)](https://charts.stackradar.io/charts/webencryptor/sonarqube)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.