zahori-server 1.0.1 Helm chart

Name: zahori-server Helm chart 1.0.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

zahori

Scored 14 Sept 2026

Zahori Server Component with the core of the product

Version 1.0.1 3 years agoapp version 0.1.17 0Artifact Hub

zahori-server 1.0.1 deploys 2 container images: flyway/flyway and zahoriaut/zahori-server. Across them, 348 findings — 3 critical, 20 high — 2 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.71, fixed in 9.0.99.

Radar Score

5,846320123202

348 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
flyway/flyway	9.14.1-alpine	064762	1,884
zahoriaut/zahori-server	0.1.17	31476140	3,962

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

182 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-p5mm-xwgq-whfr	spring-data-rest-core@3.7.7	no fix listed
Low	GHSA-mwpv-rg79-863c	spring-data-rest-core@3.7.7	no fix listed
Low	GHSA-cjpg-rgq5-fr37	spring-webflux@5.3.25	no fix listed
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@5.3.25	no fix listed
Low	GHSA-g7vv-2v7x-gj9p	tqdm@4.64.1	4.66.3
Low	ALPINE-CVE-2026-22795	openssl@3.0.7-r2	3.0.19-r0
Low	GHSA-jp4c-xjxw-mgf9	pip@22.3.1	26.1
Low	GHSA-vqgp-pf68-6947	spring-webflux@5.3.25	no fix listed
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@9.0.71	9.0.118
Low	ALPINE-CVE-2025-68160	openssl@3.0.7-r2	3.0.19-r0
Low	GHSA-33g6-495w-v8j2	snowflake-jdbc@3.13.22	3.22.0
Low	GHSA-659m-px2c-25wj	spring-core@5.3.25	no fix listed
Low	GHSA-4hfh-6x8g-gwpp	spring-webflux@5.3.25	no fix listed
Low	GHSA-58qw-9mgm-455v	pip@22.3.1	26.1
Low	GHSA-ggg2-9786-hwc8	spring-boot-autoconfigure@2.7.8	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@5.3.25	no fix listed
Low	GHSA-vxf7-qj7q-83fh	spring-security-core@5.7.6	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@5.3.25	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webflux@5.3.25	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.3.25	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.87.Final	4.1.135.Final
Low	ALPINE-CVE-2025-69418	openssl@3.0.7-r2	3.0.19-r0
Low	GHSA-gx6c-pv62-9mcf	snowflake-jdbc@3.13.22	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webflux@5.3.25	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@5.3.25	no fix listed
Low	ALPINE-CVE-2015-2104	python3@3.10.9-r1	3.10.15-r0
Low	GHSA-5239-wwwm-4pmq	pygments@2.14.0	2.20.0
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.87.Final	4.1.125.Final
Low	GHSA-q298-375f-5q63	snowflake-jdbc@3.13.22	3.23.1
Low	GHSA-6vgw-5pg2-w6jp	pip@22.3.1	26.0
Low	GHSA-6hcq-hmm3-jj3c	spring-webmvc@5.3.25	no fix listed
Low	GHSA-6hcq-hmm3-jj3c	spring-webflux@5.3.25	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.1latest	3 years ago	0.1.17	320123202	5,846

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/zahori/zahori-server.svg)](https://charts.stackradar.io/charts/zahori/zahori-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.