verdaccio 4.35.3 Helm chart
wenermeScored 23 Oct 2026
A lightweight private node.js proxy registry
Version 4.35.3 5 days agoapp version 6.10.6 0Artifact Hub
verdaccio 4.35.3 deploys 1 container image: verdaccio/verdaccio. Across them, 14 findings — 0 critical, 0 high. The highest contribution is GHSA-vfj7-8cjw-p6xm in braces 3.0.3, with no fix listed.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| verdaccio/ | 6.10.6 | 00014 | 146 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-vfj7-8cjw-p6xm | braces | no fix listed |
| Low | GHSA-ch52-4w7c-c8xp | http-cache-semantics | no fix listed |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | GHSA-rfgv-xxqx-mfg5 | undici | 6.28.1 |
| Low | GHSA-6j4f-fj2g-mc7p | brace-expansion | 5.0.10 |
| Low | GHSA-qhr7-859c-m2p7 | brace-expansion | 5.0.11 |
| Low | GHSA-2vr4-cq9g-pvrc | ip-address | 10.5.1 |
| Low | GHSA-rpw4-54j3-4h4q | ip-address | 10.5.1 |
| Low | GHSA-j6r3-76f7-8jcv | ip-address | 10.7.1 |
| Low | GHSA-3wwx-pv8p-q78v | undici | 6.28.1 |
| Low | GHSA-rj75-hqrm-r3gf | postcss-selector-parser | 7.1.6 |
| Low | GHSA-h3mg-xc3c-68pw | ip-address | 10.7.1 |
| Low | GHSA-q2hr-2g5m-vwhr | brace-expansion | 5.0.12 |
| Low | GHSA-r53p-7pc4-xj5r | undici | 6.28.1 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 4.35.4latest | yesterday | 6.10.7 | 0002 | 23 |
| 4.35.3 | 5 days ago | 6.10.6 | 00014 | 146 |
| 4.35.2 | 19 days ago | 6.10.5 | 00133 | 375 |
| 4.35.1 | 1 month ago | 6.10.2 | 00032 | 331 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.