canal-server 0.1.2 Helm chart

Name: canal-server Helm chart 0.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

xxl-job-admin

Scored 20 Sept 2026

Canal Server is capable of parsing MySQL binlog and subscribe to the data change, while Canal Client can be implemented to broadcast the change to anywhere, e.g. database and Apache Kafka.

Version 0.1.2 3 years agoapp version 1.1.6 0Artifact Hub

canal-server 0.1.2 deploys 2 container images: bitnami/zookeeper and ghcr.io/dellnoantechnp/canal-server. Across the 1 measured, 265 findings — 3 critical, 28 high — 3 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.0.5.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

5,706328111122

265 findings over 1 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/zookeeper×2	3.7.0-debian-10-r257	—	unmeasured
ghcr.io/dellnoantechnp/canal-server	v1.1.6	328111122	5,706

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

265 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.0.5.RELEASE	5.2.20.RELEASE
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.27	2.0
Critical	GHSA-p66x-2cv9-qq3v	commons-beanutils@1.9.2	1.9.4
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.6	2.9.10.3
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.6	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.6	2.9.10.4
High	GHSA-645p-88qh-w398	jackson-databind@2.9.6	2.9.7
High	GHSA-crf3-v9rr-v7hj	fastjson@1.2.69	no fix listed
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.9.2	1.9.4
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.19	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.6	2.9.10.8
High	GHSA-9mxf-g3x6-wv74	jackson-databind@2.9.6	2.9.7
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.6	2.9.10
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.9.6	2.9.8
High	GHSA-f9hv-mg5h-xcw9	jackson-databind@2.9.6	2.9.8
High	GHSA-mx9v-gmh4-mgqw	jackson-databind@2.9.6	2.9.8
High	GHSA-pv7h-hx5h-mgfj	fastjson@1.2.69	1.2.83
High	GHSA-558x-2xjg-6232	spring-expression@5.0.5.RELEASE	5.2.20.RELEASE
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.6	2.9.9.1
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.6	2.9.9
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.9.6	2.9.7
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.6	2.9.10.2
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.6	2.9.9.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.9.6	2.9.10.7
High	GHSA-x2w5-5m2g-7h5m	jackson-databind@2.9.6	2.9.7
High	GHSA-vmfg-rjjm-rjrj	logback-core@1.1.3	1.2.0
High	GHSA-vmfg-rjjm-rjrj	logback-classic@1.1.3	1.2.0
High	GHSA-cqqj-4p63-rrmm	netty@3.2.2.Final	no fix listed
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.6	2.9.10.8
High	DSA-5514-1KEV	glibc@2.31-13+deb11u3	2.31-13+deb11u7
High	DSA-5570-1KEV	nghttp2@1.43.0-1	1.43.0-1+deb11u1
Medium	DLA-3859-1	systemd@247.3-7	247.3-7+deb11u6
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.9.6	2.9.10.8
Medium	DSA-5673-1	glibc@2.31-13+deb11u3	2.31-13+deb11u9
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.6	2.8.9
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.9.6	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.9.6	2.9.10.4
Medium	GHSA-mc84-pj99-q6hh	commons-compress@1.9	1.21
Medium	DLA-3898-1	nghttp2@1.43.0-1	1.43.0-1+deb11u2
Medium	GHSA-mx7p-6679-8g3q	jackson-databind@2.9.6	2.9.10.1
Medium	GHSA-crv7-7245-f45f	commons-compress@1.9	1.21
Medium	GHSA-r3gr-cxrf-hg25	jackson-databind@2.9.6	2.9.10.8
Medium	GHSA-gjmw-vf9h-g25v	jackson-databind@2.9.6	2.9.10.1
Medium	DSA-5523-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u10
Medium	GHSA-h3cw-g4mq-c5x2	jackson-databind@2.9.6	2.9.10.6
Medium	GHSA-7hfm-57qf-j43q	commons-compress@1.9	1.21
Medium	DSA-5417-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u5
Medium	GHSA-85cw-hj65-qqv9	jackson-databind@2.9.6	2.9.10
Medium	GHSA-fmmc-742q-jg75	jackson-databind@2.9.6	2.9.10.1
Medium	GHSA-gwp4-hfv6-p7hw	jackson-databind@2.9.6	2.9.9.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.2latest	3 years ago	1.1.6	328111122	5,706

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/xxl-job-admin/canal-server.svg)](https://charts.stackradar.io/charts/xxl-job-admin/canal-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.