StackRadar

endpoint-auth-service 0.2.0 Helm chart

fiware

Scored 14 Oct 2026

A Helm chart for running the endpoint-auth-service on kubernetes.

Version 0.2.0 yesterdaydeploys tag 0.4.3 0Artifact Hub

endpoint-auth-service 0.2.0 deploys 4 container images: quay.io/fiware/endpoint-configuration-service, quay.io/fiware/envoy-configmap-updater, quay.io/fiware/ishare-auth-provider and expediagroup/kubernetes-sidecar-injector. Across them, 849 findings — 16 critical, 33 high — 7 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-7.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

14,7281633331469

849 findings over 4 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
quay.io/fiware/endpoint-configuration-service0.4.311241691857,598
quay.io/fiware/envoy-configmap-updater0.4.32452952,442
quay.io/fiware/ishare-auth-provider0.4.31454962,392
expediagroup/kubernetes-sidecar-injector1.0.12156932,296

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

585 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2025-3849stdlib@go1.18.51.23.12
LowGHSA-c2gf-v879-257jnetty-codec-http2@4.1.69.Final4.1.135.Final
LowGHSA-c69g-56f8-xwqjnetty-codec-http2@4.1.69.Final4.1.136.Final
LowGO-2026-6605stdlib@go1.18.51.26.9
LowGO-2026-6610golang.org/x/net@v0.0.0-20211209124913-491a49abca630.60.0
LowGO-2026-6610stdlib@go1.18.51.26.9
LowRHSA-2026:4772glibc@2.28-189.1.el80:2.28-251.el8_10.31
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.0.0-20211209124913-491a49abca630.55.0
LowGHSA-gx83-3vf8-gh7jjackson-databind@2.12.42.18.10
LowRHSA-2026:36730libsolv@0.7.20-1.el80:0.7.20-7.el8_10
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.69.Final4.1.137.Final
LowGO-2023-1621stdlib@go1.18.51.19.7
LowALPINE-CVE-2025-26519musl@1.2.3-r01.2.3-r4
LowGO-2025-3373stdlib@go1.18.51.22.11
LowGHSA-6cqp-g7gg-8hr5netty-codec-http@4.1.69.Final4.1.136.Final
LowRHSA-2025:0422java-17-openjdk@1:17.0.3.0.7-2.el8_61:17.0.14.0.7-3.el8
LowGO-2026-4970stdlib@go1.18.51.25.12
LowGHSA-4mp9-239f-g9hgnetty-codec-http@4.1.69.Final4.1.136.Final
LowRHSA-2024:1784gnutls@3.6.16-4.el80:3.6.16-8.el8_9.3
LowRHSA-2023:7836avahi@0.7-20.el80:0.7-21.el8_9.1
LowRHSA-2024:0418avahi@0.7-20.el80:0.7-20.el8_6.3
LowRHSA-2026:0596cups@1:2.2.6-44.el81:2.2.6-66.el8_10
LowGHSA-m4cv-j2px-7723netty-codec-http@4.1.69.Final4.1.133.Final
LowRHSA-2026:5585gnutls@3.6.16-4.el80:3.6.16-8.el8_10.5
LowRHSA-2026:66451glib2@2.56.4-158.el80:2.56.4-178.el8_10
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac90.52.0
LowRHSA-2026:20587glibc@2.28-189.1.el80:2.28-251.el8_10.37
LowRHSA-2026:55781java-17-openjdk@1:17.0.3.0.7-2.el8_61:17.0.20.1.1-1.1.el8
LowGHSA-pr98-23f8-jwxvlogback-core@1.2.31.3.15
LowGO-2025-4012stdlib@go1.18.51.24.8
LowGHSA-jhq6-gfmj-v8fxlogback-core@1.2.31.5.34
LowRHSA-2023:7190avahi@0.7-20.el80:0.7-21.el8
LowGHSA-h35f-9h28-mq5csetuptools@39.2.083.0.0
LowRHSA-2023:4770cups@1:2.2.6-44.el81:2.2.6-45.el8_6.3
LowRHSA-2026:33126glibc@2.28-189.1.el80:2.28-251.el8_10.38
LowGO-2026-4980stdlib@go1.18.51.25.10
LowGHSA-84h7-rjj3-6jx4netty-codec-http@4.1.69.Final4.1.129.Final
LowRHSA-2026:36733cups@1:2.2.6-44.el81:2.2.6-68.el8_10
LowGHSA-gcjf-9mgh-3p7gnetty-codec-http@4.1.69.Final4.1.136.Final
LowRHSA-2026:70390tar@2:1.30-5.el82:1.30-13.el8_10
LowGO-2024-2600stdlib@go1.18.51.21.8
LowGO-2026-4440golang.org/x/net@v0.0.0-20211209124913-491a49abca630.45.0
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.0.0-20200622213623-75b288015ac90.45.0
LowGO-2025-4011stdlib@go1.18.51.24.8
LowGO-2025-4015stdlib@go1.18.51.24.8
LowGO-2026-4441golang.org/x/net@v0.0.0-20211209124913-491a49abca630.45.0
LowRHSA-2026:47117libgcrypt@1.8.5-6.el80:1.8.5-8.el8_10
LowGHSA-38f8-5428-x5cvnetty-codec-http@4.1.69.Final4.1.133.Final
LowRHSA-2026:50077systemd@239-58.el80:239-58.el8_6.16
LowGHSA-wjgm-6hv5-3cvfjackson-databind@2.12.42.18.10

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.0latestyesterday0.4.3163333146914,728
0.1.48 months ago0.4.3163333146914,728

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fiware/endpoint-auth-service.svg)](https://charts.stackradar.io/charts/fiware/endpoint-auth-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 14 Oct 2026 · scanned 14 Oct 2026 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.