zipkin 2.1.4 Helm chart

Name: zipkin Helm chart 2.1.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ygqygq2

Scored 14 Sept 2026

Zipkin is a distributed tracing system.

Version 2.1.4 3 years agoapp version 2.24 4Artifact Hub

zipkin 2.1.4 deploys 4 container images: openzipkin/zipkin, bitnami/bitnami-shell, bitnami/elasticsearch and openzipkin/zipkin-dependencies. Across the 2 measured, 158 findings — 1 critical, 11 high. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

2,7641114798

158 findings over 2 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
openzipkin/zipkin	2.24	032389	1,485
bitnami/bitnami-shell×3	10-debian-10-r403	—	unmeasured
bitnami/elasticsearch×3	7.17.3-debian-10-r0	—	unmeasured
openzipkin/zipkin-dependencies	2.6.4	18249	1,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

98 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2021-42374	busybox@1.31.1-r19	1.31.1-r21
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.3.31	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.100.Final	4.1.135.Final
Low	ALPINE-CVE-2026-40200	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.100.Final	4.1.129.Final
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.16.0	2.18.8
Low	ALPINE-CVE-2021-20227	sqlite@3.34.0-r0	3.32.1-r1
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.100.Final	4.1.135.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.100.Final	4.1.136.Final
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r15	1.36.1-r19
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r15	1.36.1-r17
Low	ALPINE-CVE-2022-0563	util-linux@2.36.1-r0	2.37.4-r0
Low	GHSA-xvr9-35cr-46v9	mariadb-java-client@2.7.11	2.7.14
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r15	1.36.1-r16
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.100.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.100.Final	4.1.115.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.100.Final	4.1.137.Final
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r15	1.36.1-r19
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.16.0	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.100.Final	4.1.118.Final
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.16.0	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.31	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.16.0	2.18.9
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.100.Final	4.1.136.Final
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.7.18	no fix listed
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.100.Final	4.1.133.Final
Low	GHSA-g9jj-cgmh-9f38	mariadb-java-client@2.7.11	2.7.14
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.31	5.3.39
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.100.Final	4.1.135.Final
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.100.Final	4.1.135.Final
Low	ALPINE-CVE-2024-13176	openssl@3.1.4-r2	3.1.8-r0
Low	GHSA-qxvw-fvwx-5cp7	mariadb-java-client@2.7.11	2.7.14
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.100.Final	4.1.135.Final
Low	GHSA-h2h4-5m64-m273	activemq-client@5.18.3	5.19.3
Low	ALPINE-CVE-2026-6042	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	GHSA-5m9f-rphj-c435	amqp-client@4.12.0	5.33.0
Low	GHSA-wh89-7897-x99h	netty-codec-haproxy@4.1.100.Final	4.1.136.Final
Low	GHSA-659m-px2c-25wj	spring-core@5.3.31	no fix listed
Low	GHSA-ggg2-9786-hwc8	spring-boot-autoconfigure@2.7.18	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@5.3.31	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.3.31	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.100.Final	4.1.135.Final
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-kqueue@4.1.100.Final	4.1.135.Final
Low	ALPINE-CVE-2025-46394	busybox@1.36.1-r15	1.36.1-r21
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.100.Final	4.1.125.Final
Low	ALPINE-CVE-2024-58251	busybox@1.36.1-r15	1.36.1-r21

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.1.4latest	3 years ago	2.24	1114798	2,764

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ygqygq2/zipkin.svg)](https://charts.stackradar.io/charts/ygqygq2/zipkin)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.