istio-discovery Helm chart

Name: istio-discovery Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

avesha

Scored 14 Sept 2026

Helm chart for istio control plane

Latest 1.16.0 3 years agoapp version 1.16.0 0Artifact Hub

istio-discovery 1.16.0 deploys 1 container image: istio/pilot. Across them, 535 findings — 4 critical, 16 high — 3 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.6, fixed in 7.81.0-1ubuntu1.14.

Radar Score

6,908416112403

535 findings over 1 of 1 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
istio/pilot	1.16.0	416112403	6,908

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

535 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2023-38545	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.14
Critical	UBUNTU-CVE-2023-4911KEV	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.4
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.1
Critical	UBUNTU-CVE-2024-2961	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.7
High	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.18
High	UBUNTU-CVE-2023-22809	sudo@1.9.9-1ubuntu2.1	1.9.9-1ubuntu2.2
High	UBUNTU-CVE-2023-0286	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
High	UBUNTU-CVE-2024-2398	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.16
High	UBUNTU-CVE-2023-2650	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.0.0-20231218163308-9d2ee975ef9f
High	UBUNTU-CVE-2023-48795	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.2
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v20.10.17+incompatible	23.0.15
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.23.0
High	UBUNTU-CVE-2024-28182	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.2
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17
High	UBUNTU-CVE-2024-3596	krb5@1.19.2-2	1.19.2-2ubuntu0.5
High	UBUNTU-CVE-2022-4450	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
High	UBUNTU-CVE-2022-43551	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.7
Medium	GO-2024-2687	stdlib@go1.19.3	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
Medium	UBUNTU-CVE-2022-42898	krb5@1.19.2-2	1.19.2-2ubuntu0.1
Medium	UBUNTU-CVE-2024-7264	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.17
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17
Medium	UBUNTU-CVE-2022-4304	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2022-48522	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.3
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.31.0
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.7.0
Medium	UBUNTU-CVE-2023-0215	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2021-46848	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.2
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.17.0
Medium	UBUNTU-CVE-2023-0464	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.9
Medium	UBUNTU-CVE-2023-27534	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.10
Medium	UBUNTU-CVE-2023-5363	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.12
Medium	UBUNTU-CVE-2024-37371	krb5@1.19.2-2	1.19.2-2ubuntu0.4
Medium	UBUNTU-CVE-2023-27533	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.10
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-13ubuntu0.22.04.1	no fix listed
Medium	UBUNTU-CVE-2024-4741	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17
Medium	UBUNTU-CVE-2022-28321	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.1
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.49.0	1.79.3
Medium	UBUNTU-CVE-2026-19931	curl@7.81.0-1ubuntu1.6	no fix listed
Medium	GHSA-232p-vwff-86mp	github.com/docker/docker@v20.10.17+incompatible	20.10.24
Medium	UBUNTU-CVE-2022-40735	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.16
Medium	UBUNTU-CVE-2023-3446	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.12
Medium	GHSA-qcvw-82hh-gq38	istio.io/istio@v0.0.0-20221111170945-8f2e2dc5d57f	1.1.13
Medium	UBUNTU-CVE-2016-20013	glibc@2.35-0ubuntu3.1	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.34.0-3ubuntu1.1	no fix listed
Medium	UBUNTU-CVE-2018-5709	krb5@1.19.2-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.16.0latest	3 years ago	1.16.0	416112403	6,908

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/avesha/istio-discovery.svg)](https://charts.stackradar.io/charts/avesha/istio-discovery)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.