endpoint-auth-service 0.2.0 Helm chart

Name: endpoint-auth-service Helm chart 0.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Oct 2026

A Helm chart for running the endpoint-auth-service on kubernetes.

Version 0.2.0 yesterdaydeploys tag 0.4.3 0Artifact Hub

endpoint-auth-service 0.2.0 deploys 4 container images: quay.io/fiware/endpoint-configuration-service, quay.io/fiware/envoy-configmap-updater, quay.io/fiware/ishare-auth-provider and expediagroup/kubernetes-sidecar-injector. Across them, 849 findings — 16 critical, 33 high — 7 on CISA KEV. The highest contribution is RHSA-2022:9058 in prometheus-jmx-exporter 0.12.0-7.el8, fixed in 0:0.12.0-9.el8_7.

Radar Score

14,7281633331469

849 findings over 4 of 4 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/fiware/endpoint-configuration-service	0.4.3	1124169185	7,598
quay.io/fiware/envoy-configmap-updater	0.4.3	245295	2,442
quay.io/fiware/ishare-auth-provider	0.4.3	145496	2,392
expediagroup/kubernetes-sidecar-injector	1.0.1	215693	2,296

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

585 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:13285	libcap@2.48-2.el8	0:2.48-6.el8_10.1
Low	GHSA-xpw8-rcwv-8f8p	netty-codec-http2@4.1.69.Final	4.1.100.Final
Low	GHSA-7g45-4rm6-3mm3	guava@28.1-jre	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	RHSA-2026:55804	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.3
Low	GHSA-2c4m-59x9-fr2g	github.com/gin-gonic/gin@v1.7.4	1.9.1
Low	RHSA-2026:11349	libxml2@2.9.7-13.el8	0:2.9.7-21.el8_10.4
Low	RHSA-2026:56133	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
Low	GHSA-qxp5-gwg8-xv66	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.36.0
Low	GO-2025-3503	stdlib@go1.18.5	1.23.7
Low	GHSA-5mg8-w23w-74h3	guava@28.1-jre	32.0.0-android
Low	RHSA-2026:61248	libxml2@2.9.7-13.el8	0:2.9.7-21.el8_10.7
Low	GO-2026-4869	stdlib@go1.18.5	1.25.9
Low	GO-2026-6599	stdlib@go1.18.5	1.26.9
Low	GO-2026-6600	stdlib@go1.18.5	1.26.9
Low	GO-2026-6617	stdlib@go1.18.5	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.60.0
Low	RHSA-2023:7112	shadow-utils@2:4.6-16.el8	2:4.6-19.el8
Low	RHSA-2026:6436	rsync@3.1.3-14.el8_6.2	0:3.1.3-24.el8_10
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.12.4	2.13.0
Low	RHSA-2026:69964	coreutils@8.30-12.el8	0:8.30-21.el8_10
Low	GO-2025-3447	stdlib@go1.18.5	1.22.12
Low	RHSA-2026:73511	gawk@4.2.1-4.el8	0:4.2.1-5.el8_10
Low	GHSA-29wx-vh33-7x7r	github.com/golang-jwt/jwt/v4@v4.1.0	4.5.1
Low	RHBA-2026:47115	coreutils@8.30-12.el8	0:8.30-20.el8_10
Low	RHSA-2025:12980	glibc@2.28-189.1.el8	0:2.28-251.el8_10.25
Low	GO-2026-4403	stdlib@go1.18.5	1.23.9
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20200116001909-b77594299b42	0.44.0
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.69.Final	4.1.125.Final
Low	GHSA-p47f-322f-whfh	logback-core@1.2.3	1.5.33
Low	RHSA-2026:36734	libxml2@2.9.7-13.el8	0:2.9.7-21.el8_10.6
Low	GHSA-6v67-2wr5-gvf4	logback-core@1.2.3	1.3.15
Low	GO-2026-4602	stdlib@go1.18.5	1.25.8
Low	GHSA-qqpg-mvqg-649v	logback-core@1.2.3	1.5.25

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	yesterday	0.4.3	1633331469	14,728
0.1.4	8 months ago	0.4.3	1633331469	14,728

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/endpoint-auth-service.svg)](https://charts.stackradar.io/charts/fiware/endpoint-auth-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.