zipkin Helm chart

Name: zipkin Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ygqygq2

Scored 14 Sept 2026

Zipkin is a distributed tracing system.

Latest 2.1.4 3 years agoapp version 2.24 4Artifact Hub

zipkin 2.1.4 deploys 4 container images: openzipkin/zipkin, bitnami/bitnami-shell, bitnami/elasticsearch and openzipkin/zipkin-dependencies. Across the 2 measured, 158 findings — 1 critical, 11 high. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

2,7641114798

158 findings over 2 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
openzipkin/zipkin	2.24	032389	1,485
bitnami/bitnami-shell×3	10-debian-10-r403	—	unmeasured
bitnami/elasticsearch×3	7.17.3-debian-10-r0	—	unmeasured
openzipkin/zipkin-dependencies	2.6.4	18249	1,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

158 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.100.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.100.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.100.Final	4.1.133.Final
Medium	ALPINE-CVE-2025-9232	openssl@3.1.4-r2	3.1.8-r1
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.100.Final	4.1.136.Final
Medium	GHSA-q6cq-mhr2-jmr5	netty-codec-haproxy@4.1.100.Final	4.1.136.Final
Medium	GHSA-5568-6qcg-g7fx	activemq-client@5.18.3	5.19.4
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.100.Final	4.1.135.Final
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.6.0	3.7.1
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.12.0	no fix listed
Low	ALPINE-CVE-2021-20205	libjpeg-turbo@2.0.6-r0	2.1.0-r0
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.22.0	2.25.4
Low	GHSA-445c-vh5m-36rj	log4j-core@2.22.0	2.25.4
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.100.Final	4.1.133.Final
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.6.0	3.9.2
Low	GHSA-68mj-5wr7-6fgg	amqp-client@4.12.0	5.33.1
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.100.Final	4.1.132.Final
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.100.Final	4.1.133.Final
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.100.Final	4.1.135.Final
Low	GHSA-93j5-89vc-pph4	amqp-client@4.12.0	5.33.1
Low	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.100.Final	4.1.135.Final
Low	GHSA-8wv5-x4w7-5gww	libthrift@0.15.0	0.24.0
Low	ALPINE-CVE-2022-1097	nss@3.60-r0	3.68.3-r0
Low	GHSA-7pwc-h2j2-rjgj	libthrift@0.15.0	0.23.0
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.100.Final	4.1.137.Final
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.100.Final	4.1.135.Final
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.100.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.22.0	2.25.5
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.100.Final	4.1.125.Final
Low	GHSA-jmp9-x22r-554x	spring-core@5.3.31	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.100.Final	4.1.133.Final
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.100.Final	4.1.135.Final
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.22.0	2.25.3
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.100.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.100.Final	4.1.136.Final
Low	ALPINE-CVE-2024-4603	openssl@3.1.4-r2	3.1.5-r0
Low	ALPINE-CVE-2024-12133	libtasn1@4.19.0-r2	4.20.0-r0
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.100.Final	4.1.135.Final
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.7.18	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.3.31	no fix listed
Low	ALPINE-CVE-2021-23839	openssl@1.1.1g-r0	1.1.1j-r0
Low	GHSA-6g32-pxv4-2wfj	amqp-client@4.12.0	5.33.0
Low	GHSA-mm8h-8587-p46h	amqp-client@4.12.0	5.18.0
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.100.Final	4.1.133.Final
Low	ALPINE-CVE-2025-26519	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r5
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.100.Final	4.1.137.Final
Low	GHSA-775g-4xr8-78h8	spring-expression@5.3.31	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.100.Final	4.1.136.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.1.4latest	3 years ago	2.24	1114798	2,764

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ygqygq2/zipkin.svg)](https://charts.stackradar.io/charts/ygqygq2/zipkin)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.