galoy-deps Helm chart

Name: galoy-deps Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

galoymoney2

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.10.20 1 year agodeploys tag 0.111.0 0Artifact Hub

galoy-deps 0.10.20 deploys 9 container images: otel/opentelemetry-collector-k8s, quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook and 5 more. Across them, 1,116 findings — 4 critical, 24 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

11,961424134954

1,116 findings over 9 of 9 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-k8s	0.111.0	0112119	1,201
quay.io/jetstack/cert-manager-cainjector	v1.14.3	01381	694
quay.io/jetstack/cert-manager-controller	v1.14.3	0111113	1,166
quay.io/jetstack/cert-manager-webhook	v1.14.3	0111104	1,077
registry.k8s.io/ingress-nginx/controller	v1.8.1	2724113	1,951
ayushsobti/kube-monkey	v0.5.2	029105	1,128
quay.io/strimzi/operator	0.39.0	2854133	3,018
quay.io/jetstack/cert-manager-startupapicheck	v1.14.3	01483	721
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v20230407	026103	1,005

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

437 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2023-38545	curl@8.1.2-r0	8.4.0-r0
Critical	RHSA-2024:2722	glibc@2.28-236.el8_9.12	0:2.28-236.el8_9.13
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.53.0-r0	1.57.0-r0
Critical	RHSA-2025:12010	sqlite@3.26.0-19.el8_9	0:3.26.0-20.el8_10
High	RHSA-2025:0083	cups@1:2.2.6-54.el8_9	1:2.2.6-62.el8_10
High	GHSA-vgq5-3255-v292	kafka-clients@3.6.1	3.9.1
High	ALPINE-CVE-2024-6119	openssl@3.1.1-r1	3.1.7-r0
High	ALPINE-CVE-2023-38039	curl@8.1.2-r0	8.3.0-r0
High	ALPINE-CVE-2024-2398	curl@8.1.2-r0	8.7.1-r0
High	RHSA-2025:1301KEV	gcc@8.5.0-20.el8	0:8.5.0-23.el8_10
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v27.0.3+incompatible	27.1.1
High	RHSA-2024:5654	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.2
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.19.0	0.23.0
High	RHSA-2024:4252	nghttp2@1.33.0-5.el8_9	0:1.33.0-6.el8_10.1
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.7	1.1.12
High	ALPINE-CVE-2024-2511	openssl@3.1.1-r1	3.1.4-r6
High	RHSA-2024:8860	krb5@1.18.2-26.el8_9	0:1.18.2-30.el8_10
High	RHSA-2025:21776	expat@2.2.5-11.el8	0:2.5.0-1.el8_10
Medium	GO-2024-2687	stdlib@go1.21.7	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.27.0	0.52.0
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	ALPINE-CVE-2024-7264	curl@8.1.2-r0	8.9.1-r0
Medium	ALPINE-CVE-2024-5535	openssl@3.1.1-r1	3.1.6-r0
Medium	ALPINE-CVE-2022-48174	busybox@1.36.1-r0	1.36.1-r1
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.27.0	0.31.0
Medium	GHSA-r48q-9g5r-8q2h	github.com/emicklei/go-restful@v2.9.5+incompatible	2.16.0
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.7.0
Medium	RHSA-2026:26275	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-16.el8_6
Medium	ALPINE-CVE-2024-6197	curl@8.1.2-r0	8.9.0-r0
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0	3.0.1
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.17.0
Medium	ALPINE-CVE-2023-5363	openssl@3.1.1-r1	3.1.4-r0
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-cx63-2mw6-8hw5	setuptools@39.2.0	70.0.0
Medium	RHSA-2024:5530	python-setuptools@39.2.0-7.el8	0:39.2.0-8.el8_10
Medium	ALPINE-CVE-2024-4741	openssl@3.1.1-r1	3.1.6-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.67.1	1.79.3
Medium	RHSA-2024:7848	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-14.el8_6
Medium	RHSA-2025:10698	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.1
Medium	GHSA-r9hx-vwmv-q579	setuptools@39.2.0	65.5.1
Medium	PYSEC-2025-49	setuptools@39.2.0	78.1.1
Medium	ALPINE-CVE-2023-3446	openssl@3.1.1-r1	3.1.1-r3
Medium	RHSA-2024:6975	python3@3.6.8-56.el8_9.3	0:3.6.8-67.el8_10
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.100.Final	4.1.118.Final
Medium	RHSA-2024:1601	curl@7.61.1-33.el8	0:7.61.1-33.el8_9.5
Medium	RHSA-2024:3214	gmp@1:6.1.2-10.el8	1:6.1.2-11.el8
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.4.0
Medium	RHSA-2024:5312	krb5@1.18.2-26.el8_9	0:1.18.2-29.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.20latest	1 year ago	0.111.0	424134954	11,961

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/galoymoney2/galoy-deps.svg)](https://charts.stackradar.io/charts/galoymoney2/galoy-deps)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.