confluence :: RBAC ATLAS

Image CVEs: Trivy 0.76.1 + cve.now enrichment, as of 2026-11-07. Default chart images only; a CVE in an image is not proof it is exploitable in this workload. Methodology

Description

A chart for installing Confluence Data Center on Kubernetes

Overview

Identity	Namespace	Automount	Secrets	Permissions	Workloads	Risk	CVEs
`confluence`	default		—	0	1	—	High 3 crit · 39 high

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

`confluence`

Namespace: default | Automount:

Permissions (0)

No explicit RBAC bindings.

Workloads (1)

Kind	Name	Container	Image
StatefulSet	confluence	confluence	atlassian/confluence:10.2.20 High Likely 1 3 critical · 39 high Top 8 of 116 CVEs CVE-2020-13936 High CVSS 8.8 Likely org.apache.velocity:velocity no fix CVE-2026-47884 Critical CVSS 9.8 org.springframework:spring-webmvc fixed in 7.0.9 CVE-2026-47890 Critical CVSS 9.8 org.springframework:spring-webmvc fixed in 7.0.9 GHSA-6vxf-252m-8g79 Critical CVSS 9.2 dompurify fixed in 3.4.17 CVE-2026-108106 High CVSS 8.7 org.xerial.snappy:snappy-java fixed in 1.1.10.9 CVE-2026-75140 High CVSS 8.7 org.jsoup:jsoup fixed in 1.23.2 CVE-2026-93749 High CVSS 8.7 source-map-js fixed in 1.2.2 CVE-2026-104847 High CVSS 8.5 prosemirror-view fixed in 1.42.3 OS ubuntu 24.04 · fixable: 3 critical, 38 high · scanned 2026-11-07 as `docker.io/atlassian/confluence:10.2.20`