sonarqube Helm chart

Name: sonarqube Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

webencryptor

Scored 14 Sept 2026

SonarQube is an open sourced code quality scanning tool

Latest 6.7.3 5 years agoapp version 8.2-community 0Artifact Hub

sonarqube 6.7.3 deploys 3 container images: library/busybox, library/sonarqube and bitnami/postgresql. Across the 2 measured, 258 findings — 10 critical, 14 high — 7 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.

Radar Score

5,4601014108126

258 findings over 2 of 3 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31	0000	0
library/sonarqube	8.2-community	1014108126	5,460
bitnami/postgresql	11.7.0-debian-10-r26	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

126 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-jgx4-7v3v-vwfm	elasticsearch@6.8.4	7.17.21
Low	GHSA-hr65-qq6p-87r4	elasticsearch@6.8.4	6.8.15
Low	DLA-3165-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u6
Low	DLA-3118-1	unzip@6.0-23+deb10u1	6.0-23+deb10u3
Low	GHSA-cqgv-256r-m9r8	elasticsearch@6.8.4	6.8.14
Low	GHSA-8h4x-xvjp-vf99	hazelcast@3.12.3	no fix listed
Low	GHSA-22wj-vf5f-wrvj	h2@1.4.199	2.2.220
Low	DLA-3782-1	util-linux@2.33.1-0.1	2.33.1-0.1+deb10u1
Low	DLA-3586-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4
Low	DLA-3692-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u8
Low	DSA-4782-1	openldap@2.4.47+dfsg-3+deb10u1	2.4.47+dfsg-3+deb10u3
Low	DLA-3119-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5
Low	DLA-3763-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u9
Low	DLA-3263-1	libtasn1-6@4.13-3	4.13-3+deb10u1
Low	DLA-3398-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u6
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.32.Final	4.1.133.Final
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@8.5.41	9.0.116
Low	DLA-3070-1	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u9
Low	DLA-3783-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u7
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.32.Final	4.1.137.Final
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	DLA-3341-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u5
Low	DLA-3153-1	libksba@1.3.5-2	1.3.5-2+deb10u1
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	DLA-3740-1	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u12
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.32.Final	4.1.133.Final
Low	DLA-3248-1	libksba@1.3.5-2	1.3.5-2+deb10u2
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.18	1.26.0
Low	DLA-3321-1	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.32.Final	4.1.129.Final
Low	DLA-3167-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3
Low	DLA-3850-1	glibc@2.28-10	2.28-10+deb10u4
Low	DSA-4685-1	apt@1.8.2	1.8.2.1
Low	DLA-3660-1	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u11
Low	DLA-3107-1	sqlite3@3.27.2-3	3.27.2-3+deb10u2
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.32.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.32.Final	4.1.115.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.32.Final	4.1.137.Final
Low	DLA-3377-1	systemd@241-7~deb10u3	241-7~deb10u9
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.8.11	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.32.Final	4.1.118.Final
Low	GHSA-2hjr-vmf3-xwvp	elasticsearch@6.8.4	7.17.16
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.10.1	2.18.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.10.1	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.8	42.2.27
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.32.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.32.Final	4.1.133.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.7.3latest	5 years ago	8.2-community	1014108126	5,460

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/webencryptor/sonarqube.svg)](https://charts.stackradar.io/charts/webencryptor/sonarqube)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.