StackRadar

lodestar Helm chart

ethereum-helm-chartsVerified publisher

Scored 14 Sept 2026

Lodestar is a open-source TypeScript implementation of the Ethereum consensus engine.

Latest 1.2.2 1 month agoApp version not verified against the render 0Artifact Hub

lodestar 1.2.2 deploys 2 container images: library/busybox and chainsafe/lodestar. Across them, 255 findings — 0 critical, 1 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.21, fixed in 4.18.0.

Radar Score

2,5220129225

255 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.34.000000
chainsafe/lodestarlatest01292252,522

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

255 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
MediumDEBIAN-CVE-2019-1010022glibc@2.36-9+deb12u14no fix listed
MediumDEBIAN-CVE-2023-45853zlib@1:1.2.13.dfsg-1no fix listed
MediumDEBIAN-CVE-2018-20796glibc@2.36-9+deb12u14no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.36-9+deb12u14no fix listed
MediumGHSA-p9ff-h696-f583vite@6.1.66.4.2
MediumGHSA-5j98-mcp5-4vw2glob@11.0.011.1.0
MediumGHSA-mw96-cpmx-2vgcrollup@4.52.54.59.0
MediumGHSA-43fc-jf86-j433axios@1.13.31.13.5
MediumDEBIAN-CVE-2019-9192glibc@2.36-9+deb12u14no fix listed
MediumDEBIAN-CVE-2023-31486perl@5.36.0-7+deb12u3no fix listed
MediumGHSA-5xrq-8626-4rwpvitest@4.0.74.1.0
MediumGHSA-g8mr-85jm-7xhm@vitest/browser@4.0.74.1.8
MediumDEBIAN-CVE-2018-6829libgcrypt20@1.10.1-3+deb12u1no fix listed
MediumGHSA-35jp-ww65-95whaxios@1.13.31.16.0
MediumDEBIAN-CVE-2011-3389gnutls28@3.7.9-2+deb12u7no fix listed
MediumGHSA-3h5v-q93c-6h6qws@8.5.08.17.1
MediumGHSA-p63j-vcc4-9vmv@vitest/browser@4.0.74.1.10
MediumDEBIAN-CVE-2025-13151libtasn1-6@4.19.0-2+deb12u1no fix listed
MediumDEBIAN-CVE-2019-1010024glibc@2.36-9+deb12u14no fix listed
MediumDEBIAN-CVE-2026-5450glibc@2.36-9+deb12u14no fix listed
MediumGHSA-f23m-r3pf-42rhlodash@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.214.17.23
MediumDEBIAN-CVE-2026-8376perl@5.36.0-7+deb12u3no fix listed
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumGHSA-p92q-9vqr-4j8vaxios@1.13.31.16.0
MediumGHSA-96hv-2xvq-fx4pws@8.18.38.21.0
MediumGHSA-3ppc-4f35-3m26minimatch@10.0.310.2.1
MediumGHSA-pf86-5x62-jrwfaxios@1.13.31.15.1
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u14no fix listed
LowDEBIAN-CVE-2026-57433perl@5.36.0-7+deb12u3no fix listed
LowGHSA-7h2j-956f-4vf2@isaacs/brace-expansion@5.0.05.0.1
LowDEBIAN-CVE-2026-13221perl@5.36.0-7+deb12u3no fix listed
LowDEBIAN-CVE-2026-42496perl@5.36.0-7+deb12u3no fix listed
LowGHSA-62hf-57xw-28j9axios@1.13.31.15.1
LowGHSA-q8qp-cvcw-x6jjaxios@1.13.31.15.2
LowGHSA-3g43-6gmg-66jwaxios@1.13.31.15.2
LowGHSA-ph9p-34f9-6g65tmp@0.0.330.2.6
LowGHSA-83w8-p2f5-377r@fastify/static@8.0.110.1.1
LowGHSA-777c-7fjr-54vfaxios@1.13.31.16.0
LowGHSA-hfxv-24rg-xrqfaxios@1.13.31.16.0
LowDEBIAN-CVE-2026-12087perl@5.36.0-7+deb12u3no fix listed
LowGHSA-j5f8-grm9-p9fcaxios@1.13.31.16.0
LowGHSA-q3j6-qgpj-74h6fast-uri@3.1.03.1.1
LowDEBIAN-CVE-2023-50495ncurses@6.4-4no fix listed
LowGHSA-rgw5-rvv9-x895brace-expansion@5.0.75.0.9
LowDEBIAN-CVE-2026-85091zlib@1:1.2.13.dfsg-1no fix listed
LowGHSA-6g55-p6wh-862qpostcss@8.5.68.5.12
LowGHSA-pmwg-cvhr-8vh7axios@1.13.31.15.1
LowGHSA-fx2h-pf6j-xcffvite@6.1.66.4.3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.2.2latest1 month ago—01292252,522

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/ethereum-helm-charts/lodestar.svg)](https://charts.stackradar.io/charts/ethereum-helm-charts/lodestar)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.