galoy-deps Helm chart

Name: galoy-deps Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

galoymoney

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.10.20 1 year agodeploys tag 0.111.0 0Artifact Hub

galoy-deps 0.10.20 deploys 9 container images: otel/opentelemetry-collector-k8s, quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook and 5 more. Across them, 1,116 findings — 4 critical, 24 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

11,961424134954

1,116 findings over 9 of 9 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-k8s	0.111.0	0112119	1,201
quay.io/jetstack/cert-manager-cainjector	v1.14.3	01381	694
quay.io/jetstack/cert-manager-controller	v1.14.3	0111113	1,166
quay.io/jetstack/cert-manager-webhook	v1.14.3	0111104	1,077
registry.k8s.io/ingress-nginx/controller	v1.8.1	2724113	1,951
ayushsobti/kube-monkey	v0.5.2	029105	1,128
quay.io/strimzi/operator	0.39.0	2854133	3,018
quay.io/jetstack/cert-manager-startupapicheck	v1.14.3	01483	721
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v20230407	026103	1,005

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

321 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2025:14135	libarchive@3.3.3-5.el8	0:3.3.3-6.el8_10
Low	ALPINE-CVE-2024-8096	curl@8.1.2-r0	8.10.0-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.27.0	0.52.0
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.100.Final	4.1.125.Final
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.27.0	0.52.0
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.53.v20231009	9.4.57.v20241219
Low	RHSA-2026:2128	python3@3.6.8-56.el8_9.3	0:3.6.8-73.el8_10
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.100.Final	4.1.133.Final
Low	RHSA-2026:22721	expat@2.2.5-11.el8	0:2.5.0-2.el8_10
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.100.Final	4.1.135.Final
Low	RHSA-2025:4051	gnutls@3.6.16-8.el8_9.1	0:3.6.16-8.el8_10.3
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.17.2	2.25.3
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.13.0
Low	RHSA-2025:8686	glibc@2.28-236.el8_9.12	0:2.28-251.el8_10.22
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.100.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-cfpf-hrx2-8rv6	github.com/expr-lang/expr@v1.16.9	1.17.7
Low	GO-2023-2185	stdlib@go1.18.9	1.20.11
Low	RHSA-2024:3203	systemd@239-78.el8	0:239-82.el8
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.100.Final	4.1.136.Final
Low	RHSA-2025:12450	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.2
Low	ALPINE-CVE-2023-46219	curl@8.1.2-r0	8.5.0-r0
Low	ALPINE-CVE-2024-4603	openssl@3.1.1-r1	3.1.5-r0
Low	GHSA-9ph3-v2vh-3qx7	vertx-core@4.5.0	4.5.3
Low	RHSA-2025:4049	libtasn1@4.13-4.el8_7	0:4.13-5.el8_10
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.31	9.37.4
Low	RHSA-2026:57462	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.13
Low	ALPINE-CVE-2024-0853	curl@8.1.2-r0	8.6.0-r0
Low	RHSA-2024:10779	python3@3.6.8-56.el8_9.3	0:3.6.8-69.el8_10
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.100.Final	4.1.135.Final
Low	RHSA-2024:3347	python3@3.6.8-56.el8_9.3	0:3.6.8-62.el8_10
Low	RHSA-2024:3233	libssh@0.9.6-13.el8_9	0:0.9.6-14.el8
Low	RHSA-2026:62218	libssh@0.9.6-13.el8_9	0:0.9.6-17.el8_10
Low	GHSA-c5q2-7r4c-mv6g	github.com/go-jose/go-jose/v3@v3.0.1	3.0.3
Low	RHSA-2026:42887	java-17-openjdk@1:17.0.10.0.7-2.el8	1:17.0.20.0.8-1.1.el8
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358	0.1.1
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.54.1	0.311.3
Low	RHSA-2026:0991	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10
Low	GO-2023-1703	stdlib@go1.18.9	1.19.8
Low	RHSA-2025:2722	krb5@1.18.2-26.el8_9	0:1.18.2-31.el8_10
Low	GHSA-m5vv-6r4h-3vj9	github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0	1.6.0-beta.4.0.20240610221955-50774cd97099
Low	GO-2026-4341	stdlib@go1.21.7	1.24.12
Low	RHSA-2025:18821	java-17-openjdk@1:17.0.10.0.7-2.el8	1:17.0.17.0.10-1.el8
Low	RHSA-2026:36733	cups@1:2.2.6-54.el8_9	1:2.2.6-68.el8_10
Low	RHSA-2026:4772	glibc@2.28-236.el8_9.12	0:2.28-251.el8_10.31
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v4@v4.0.2	4.0.5
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v3@v3.0.1	3.0.4
Low	GHSA-cphf-4846-3xx9	vertx-core@4.5.0	4.5.24
Low	RHSA-2026:16799	krb5@1.18.2-26.el8_9	0:1.18.2-34.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.20latest	1 year ago	0.111.0	424134954	11,961

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/galoymoney/galoy-deps.svg)](https://charts.stackradar.io/charts/galoymoney/galoy-deps)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.