istio Helm chart

Name: istio Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudposse

Scored 14 Sept 2026

Helm chart for all istio components

Latest 1.1.0 11 months agodeploys tag release-1.0-latest-daily 11Artifact Hub

istio 1.1.0 deploys 8 container images: gcr.io/istio-release/galley, gcr.io/istio-release/proxyv2, gcr.io/istio-release/mixer, gcr.io/istio-release/pilot and 4 more. Across the 3 measured, 1,256 findings — 20 critical, 62 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.15, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

23,9642062564610

1,256 findings over 3 of 8 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
gcr.io/istio-release/galley	release-1.0-latest-daily	—	not yet scanned
gcr.io/istio-release/proxyv2×5	release-1.0-latest-daily	1031282305	11,982
gcr.io/istio-release/mixer×2	release-1.0-latest-daily	—	not yet scanned
gcr.io/istio-release/pilot	release-1.0-latest-daily	1031282305	11,982
prom/prometheus	v2.3.1	0000	0
gcr.io/istio-release/citadel	release-1.0-latest-daily	—	not yet scanned
gcr.io/istio-release/sidecar_injector	release-1.0-latest-daily	—	not yet scanned
quay.io/coreos/hyperkube×2	v1.7.6_coreos.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

628 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2023-4641	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm4
Low	UBUNTU-CVE-2025-5278	coreutils@8.25-2ubuntu3~16.04	no fix listed
Low	UBUNTU-CVE-2025-6075	python3.5@3.5.2-2ubuntu0~16.04.5	3.5.2-2ubuntu0~16.04.13+esm20
Low	UBUNTU-CVE-2026-54370	acl@2.2.52-3	no fix listed
Low	UBUNTU-CVE-2026-18238	libpcap@1.7.4-2	no fix listed
Low	UBUNTU-CVE-2012-2663	iptables@1.6.0-2ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.1.0-7ubuntu0.16.04.3	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.1.0-7ubuntu0.16.04.3	no fix listed
Low	UBUNTU-CVE-2026-50219	expat@2.1.0-7ubuntu0.16.04.3	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.22.1-9ubuntu0.6	no fix listed
Low	UBUNTU-CVE-2026-0864	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed
Low	UBUNTU-CVE-2024-56433	shadow@1:4.2-3.1ubuntu5.4	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.6-4ubuntu1	1.6-4ubuntu1+esm2
Low	UBUNTU-CVE-2026-40226	systemd@229-4ubuntu21.21	no fix listed
Low	UBUNTU-CVE-2026-18374	glibc@2.23-0ubuntu11	no fix listed
Low	UBUNTU-CVE-2026-19617	lvm2@2:1.02.110-1ubuntu10	no fix listed
Low	UBUNTU-CVE-2021-36084	libsepol@2.4-2	2.4-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-18313	libpcap@1.7.4-2	no fix listed
Low	UBUNTU-CVE-2017-11544	tcpdump@4.9.2-0ubuntu0.16.04.1	no fix listed
Low	UBUNTU-CVE-2017-11545	tcpdump@4.9.2-0ubuntu0.16.04.1	no fix listed
Low	UBUNTU-CVE-2026-19542	glibc@2.23-0ubuntu11	no fix listed
Low	UBUNTU-CVE-2026-53613	util-linux@2.27.1-6ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-53615	util-linux@2.27.1-6ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-77117	glibc@2.23-0ubuntu11	no fix listed
Low	UBUNTU-CVE-2026-80489	glibc@2.23-0ubuntu11	no fix listed
Low	UBUNTU-CVE-2021-36085	libsepol@2.4-2	2.4-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2021-36087	libsepol@2.4-2	2.4-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2025-68160	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm14
Low	UBUNTU-CVE-2026-31911	libpcap@1.7.4-2	no fix listed
Low	UBUNTU-CVE-2026-31912	libpcap@1.7.4-2	no fix listed
Low	UBUNTU-CVE-2026-6244	libpcap@1.7.4-2	no fix listed
Low	UBUNTU-CVE-2026-6554	libpcap@1.7.4-2	no fix listed
Low	UBUNTU-CVE-2021-23239	sudo@1.8.16-0ubuntu1.7	1.8.16-0ubuntu1.10
Low	UBUNTU-CVE-2023-29383	shadow@1:4.2-3.1ubuntu5.4	no fix listed
Low	UBUNTU-CVE-2019-19126	glibc@2.23-0ubuntu11	2.23-0ubuntu11.2
Low	UBUNTU-CVE-2026-22185	lmdb@0.9.17-3	no fix listed
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.6-8	1.0.6-8ubuntu0.2+esm1
Low	UBUNTU-CVE-2026-32777	expat@2.1.0-7ubuntu0.16.04.3	no fix listed
Low	UBUNTU-CVE-2025-9820	gnutls28@3.4.10-4ubuntu1.5	3.4.10-4ubuntu1.9+esm3
Low	UBUNTU-CVE-2010-3192	glibc@2.23-0ubuntu11	no fix listed
Low	UBUNTU-CVE-2023-2602	libcap2@1:2.24-12	no fix listed
Low	UBUNTU-CVE-2026-76957	expat@2.1.0-7ubuntu0.16.04.3	no fix listed
Low	UBUNTU-CVE-2026-27456	util-linux@2.27.1-6ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-18508	tar@1.28-2.1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-45186	expat@2.1.0-7ubuntu0.16.04.3	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg@1.4.20-1ubuntu3.3	no fix listed
Low	UBUNTU-CVE-2026-32776	expat@2.1.0-7ubuntu0.16.04.3	no fix listed
Low	UBUNTU-CVE-2026-41080	expat@2.1.0-7ubuntu0.16.04.3	2.1.0-7ubuntu0.16.04.5+esm12
Low	UBUNTU-CVE-2026-57053	libidn@1.32-3ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2025-1795	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.0latest	11 months ago	release-1.0-latest-daily	2062564610	23,964

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudposse/istio.svg)](https://charts.stackradar.io/charts/cloudposse/istio)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.