zahori-server Helm chart

Name: zahori-server Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

zahori

Scored 14 Sept 2026

Zahori Server Component with the core of the product

Latest 1.0.1 3 years agoapp version 0.1.17 0Artifact Hub

zahori-server 1.0.1 deploys 2 container images: flyway/flyway and zahoriaut/zahori-server. Across them, 348 findings — 3 critical, 20 high — 2 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.71, fixed in 9.0.99.

Radar Score

5,846320123202

348 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
flyway/flyway	9.14.1-alpine	064762	1,884
zahoriaut/zahori-server	0.1.17	31476140	3,962

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

98 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.25	no fix listed
Medium	GHSA-cx7f-g6mp-7hqm	spring-webflux@5.3.25	no fix listed
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.4.3	42.4.4
Medium	ALPINE-CVE-2024-5535	openssl@3.0.7-r2	3.0.14-r0
Medium	ALPINE-CVE-2022-4304	openssl@3.0.7-r2	3.0.8-r0
Medium	GHSA-3h6f-g5f3-gc4w	spring-security-config@5.7.6	5.7.10
Medium	GHSA-7phw-cxx7-q9vq	spring-webmvc@5.3.25	5.3.26
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.25	5.3.32
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.71	9.0.90
Medium	ALPINE-CVE-2023-0215	openssl@3.0.7-r2	3.0.8-r0
Medium	ALPINE-CVE-2023-0464	openssl@3.0.7-r2	3.0.8-r1
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.71	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.71	9.0.118
Medium	ALPINE-CVE-2023-5363	openssl@3.0.7-r2	3.0.12-r0
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.4.3	42.7.11
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.71	9.0.80
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.25	5.3.33
Medium	ALPINE-CVE-2024-6345	py3-setuptools@65.6.0-r0	70.3.0-r0
Medium	GHSA-cx63-2mw6-8hw5	setuptools@65.6.0	70.0.0
Medium	GHSA-c4q5-6c82-3qpw	spring-security-web@5.7.6	5.7.13
Medium	ALPINE-CVE-2024-45492	expat@2.5.0-r0	2.6.3-r0
Medium	ALPINE-CVE-2024-4741	openssl@3.0.7-r2	3.0.14-r0
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.21.7	3.25.5
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.71	9.0.118
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.30	1.31
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.71	9.0.83
Medium	GHSA-6phf-6h5g-97j2	sqlite-jdbc@3.34.0	3.41.2.2
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.71	9.0.90
Medium	ALPINE-CVE-2024-45491	expat@2.5.0-r0	2.6.3-r0
Medium	GHSA-g5h3-w546-pj7f	spring-boot-actuator-autoconfigure@2.7.8	2.7.11
Medium	PYSEC-2025-49	setuptools@65.6.0	78.1.1
Medium	ALPINE-CVE-2023-3446	openssl@3.0.7-r2	3.0.9-r3
Medium	ALPINE-CVE-2024-7592	python3@3.10.9-r1	3.10.15-r0
Medium	ALPINE-CVE-2024-6232	python3@3.10.9-r1	3.10.15-r0
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.71	9.0.106
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.71	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.71	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.71	9.0.118
Medium	ALPINE-CVE-2024-28757	expat@2.5.0-r0	2.6.2-r0
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.71	9.0.107
Medium	ALPINE-CVE-2024-8088	python3@3.10.9-r1	3.10.14-r2
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.71	9.0.107
Medium	ALPINE-CVE-2023-0216	openssl@3.0.7-r2	3.0.8-r0
Medium	ALPINE-CVE-2023-0217	openssl@3.0.7-r2	3.0.8-r0
Medium	ALPINE-CVE-2023-0401	openssl@3.0.7-r2	3.0.8-r0
Medium	ALPINE-CVE-2023-52425	expat@2.5.0-r0	2.6.0-r0
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.87.Final	4.1.132.Final
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.71	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.71	9.0.121
Medium	ALPINE-CVE-2024-45490	expat@2.5.0-r0	2.6.3-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.1latest	3 years ago	0.1.17	320123202	5,846

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/zahori/zahori-server.svg)](https://charts.stackradar.io/charts/zahori/zahori-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.