cadence Helm chart

Name: cadence Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wener

Not scored yet

Cadence is a distributed, scalable, durable, and highly available orchestration engine to execute asynchronous long-running business logic in a scalable and resilient way.

Latest 0.23.0 4 years agoapp version 0.23.2 0Artifact Hub

cadence 0.23.0 deploys 5 container images: library/busybox, library/cassandra, ubercadence/server, ghcr.io/banzaicloud/tcheck and 1 more. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 5 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×6	latest	0000	0
library/cassandra×15	3.11.3	144071	1,926
ubercadence/server×10	0.23.2	0532173	2,472
ghcr.io/banzaicloud/tcheck	latest	3847152	3,177
ubercadence/web	v3.29.5	066297	2,573

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

530 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-76p3-8jx3-jpfq	loader-utils@0.2.17	1.4.1
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.4.1	1.11.1
Medium	DSA-4453-1	openjdk-8@8u181-b13-2~deb9u1	8u212-b03-2~deb9u1
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
Medium	ALPINE-CVE-2022-28391	busybox@1.31.1-r16	1.31.1-r22
Medium	DLA-2628-1	python2.7@2.7.13-2+deb9u3	2.7.13-2+deb9u5
Medium	DLA-2935-1	expat@2.2.0-2+deb9u1	2.2.0-2+deb9u5
Medium	GHSA-wc69-rhjr-hc9g	moment@2.29.1	2.29.4
Medium	ALPINE-CVE-2021-39537	ncurses@6.2_p20200523-r0	6.2_p20200523-r1
Medium	GHSA-vx3p-948g-6vhq	ssri@6.0.1	6.0.2
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.5-r1	2.10.7-r0
Medium	ALPINE-CVE-2020-8286	curl@7.69.1-r1	7.69.1-r3
Medium	GHSA-ww39-953v-wcq6	glob-parent@5.1.1	5.1.2
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102	0.7.0
Medium	ALPINE-CVE-2021-22946	curl@7.69.1-r1	7.79.0-r0
Medium	GHSA-9r2w-394v-53qc	tar@4.4.13	4.4.16
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102	0.17.0
Medium	ALPINE-CVE-2020-8231	curl@7.69.1-r1	7.69.1-r2
Medium	GHSA-fwr7-v2mv-hh25	async@2.6.3	2.6.4
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1g-r0	1.1.1j-r0
Medium	GHSA-93q8-gq69-wqmw	ansi-regex@4.1.0	4.1.1
Medium	DLA-2919-1	python2.7@2.7.13-2+deb9u3	2.7.13-2+deb9u6
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.3.2	2.5.4
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1g-r0	1.1.1i-r0
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20201216223049-8b5274cf687f
Medium	GHSA-vx85-mj8c-4qm6	libthrift@0.9.2	0.12.0
Medium	ALPINE-CVE-2022-27775	curl@7.69.1-r1	7.79.1-r1
Medium	DLA-2337-1	python2.7@2.7.13-2+deb9u3	2.7.13-2+deb9u4
Medium	GHSA-668q-qrv7-99fm	logback-core@1.1.3	1.2.9
Medium	ALPINE-CVE-2021-22922	curl@7.69.1-r1	7.78.0-r0
Medium	GHSA-r8j5-h5cx-65gg	is-svg@2.1.0	4.3.0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.29.1	1.79.3
Medium	GHSA-5p4h-3377-7w67	golang.org/x/net@v0.0.0-20170114055629-f2499483f923	0.0.0-20180816102801-aaf60122140d
Medium	GHSA-fcf9-6fv2-fc5v	golang.org/x/net@v0.0.0-20170114055629-f2499483f923	0.0.0-20180921000356-2f5d2388922f
Medium	GHSA-c2qf-rxjj-qqgw	semver@6.3.0	6.3.1
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.11	1.31
Medium	ALPINE-CVE-2021-42380	busybox@1.31.1-r16	1.31.1-r21
Medium	ALPINE-CVE-2022-22576	curl@7.69.1-r1	7.79.1-r1
Medium	DLA-2836-1	nss@2:3.26.2-1.1+deb9u1	2:3.26.2-1.1+deb9u3
Medium	GHSA-vfw5-hrgq-h5wf	golang.org/x/net@v0.0.0-20170114055629-f2499483f923	0.0.0-20190125091013-d26f9f9a57f3
Medium	GHSA-29mw-wpgm-hmr9	lodash@4.17.20	4.17.21
Medium	GHSA-29mw-wpgm-hmr9	lodash-es@4.17.20	4.17.21
Medium	GHSA-mvr2-9pj6-7w5j	guava@18.0	24.1.1-android
Medium	GHSA-p6j9-7xhc-rhwp	urijs@1.19.5	1.19.6
Medium	ALPINE-CVE-2022-27776	curl@7.69.1-r1	7.79.1-r1
Medium	ALPINE-CVE-2021-42379	busybox@1.31.1-r16	1.31.1-r21
Medium	ALPINE-CVE-2021-42381	busybox@1.31.1-r16	1.31.1-r21
Medium	ALPINE-CVE-2021-42385	busybox@1.31.1-r16	1.31.1-r21

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.23.0latest	4 years ago	0.23.2	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wener/cadence.svg)](https://charts.stackradar.io/charts/wener/cadence)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.