is-pattern-1 5.11.0 Helm chart

Name: is-pattern-1 Helm chart 5.11.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wso2is-pattern1

Scored 14 Sept 2026

A Helm chart for the deployment of WSO2 Identity And Access Management pattern 1

Version 5.11.0 5 years agoapp version 5.11.0 0Artifact Hub

is-pattern-1 5.11.0 deploys 2 container images: bitnami/mysql and massimolauri/wso2is. Across the 1 measured, 204 findings — 17 critical, 27 high — 5 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in pax-logging-log4j2 1.11.3, fixed in 1.11.10.

Radar Score

6,213172710555

204 findings over 1 of 2 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mysql	8.0.22-debian-10-r44	—	unmeasured
massimolauri/wso2is	5.11.0-centos	172710555	6,213

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

204 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	pax-logging-log4j2@1.11.3	1.11.10
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.12.1	2.12.2
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.1.2.RELEASE	5.2.20.RELEASE
Critical	GHSA-599f-7c49-w659	commons-text@1.6	1.10.0
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.12.1	2.12.2
Critical	GHSA-7rjr-3q55-vv33KEV	pax-logging-log4j2@1.11.3	1.11.11
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.12.1	2.12.3
Critical	GHSA-p6xc-xr62-6r2g	pax-logging-log4j2@1.11.3	1.11.12
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.23	2.0
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.5.4	2.7.9.2
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.5.4	2.6.7.1
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	GHSA-ghgj-3xqr-6jfm	jetty-server@8.1.15.v20140411	9.2.9.v20150224
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.1.2.RELEASE	6.0.0
High	GHSA-8489-44mv-ggj8	pax-logging-log4j2@1.11.3	1.11.13
High	GHSA-8489-44mv-ggj8	log4j-core@2.12.1	2.12.4
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.9.2	2.9.10.3
High	GHSA-26vr-8j45-3r4w	jetty-server@8.1.15.v20140411	9.4.39
High	GHSA-76h9-2vwh-w278	mina-core@2.0.19	2.0.27
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.5.4	2.6.7.5
High	GHSA-6x9x-8qw9-9pp6	jetty-server@8.1.15.v20140411	9.2.25.v20180606
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.9.2	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.9.2	2.9.10.4
High	GHSA-vgg8-72f2-qm23	jetty-server@8.1.15.v20140411	9.2.25.v20180606
High	GHSA-645p-88qh-w398	jackson-databind@2.5.4	2.6.7.3
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.23	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.9.2	2.9.10.8
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.9.2	2.9.10
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.5.4	2.6.7.3
High	GHSA-558x-2xjg-6232	spring-expression@5.1.2.RELEASE	5.2.20.RELEASE
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.5.4	2.6.7.3
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.5.4	2.6.7.3
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.5.4	2.7.9.5
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.9.2	2.9.10.2
High	GHSA-h592-38cm-4ggp	jackson-databind@2.5.4	2.6.7.3
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.5.4	2.7.9.6
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.5	2.10.5.1
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.9.2	2.9.10.8
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.9.9.2	2.9.10.8
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.5	2.8.9
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.9.9.2	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.9.9.2	2.9.10.4
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@6.2.1	6.4.0
Medium	GHSA-qr7j-h6gg-jmgc	jackson-databind@2.5.4	2.7.9.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.11.0latest	5 years ago	5.11.0	172710555	6,213

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wso2is-pattern1/is-pattern-1.svg)](https://charts.stackradar.io/charts/wso2is-pattern1/is-pattern-1)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.