galoy-deps 0.10.20 Helm chart

Name: galoy-deps Helm chart 0.10.20: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

galoymoney2

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.10.20 1 year agodeploys tag 0.111.0 0Artifact Hub

galoy-deps 0.10.20 deploys 9 container images: otel/opentelemetry-collector-k8s, quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook and 5 more. Across them, 1,116 findings — 4 critical, 24 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

11,961424134954

1,116 findings over 9 of 9 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-k8s	0.111.0	0112119	1,201
quay.io/jetstack/cert-manager-cainjector	v1.14.3	01381	694
quay.io/jetstack/cert-manager-controller	v1.14.3	0111113	1,166
quay.io/jetstack/cert-manager-webhook	v1.14.3	0111104	1,077
registry.k8s.io/ingress-nginx/controller	v1.8.1	2724113	1,951
ayushsobti/kube-monkey	v0.5.2	029105	1,128
quay.io/strimzi/operator	0.39.0	2854133	3,018
quay.io/jetstack/cert-manager-startupapicheck	v1.14.3	01483	721
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v20230407	026103	1,005

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

437 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.100.Final	4.1.133.Final
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.8.1	1.8.3
Medium	RHSA-2024:8124	java-17-openjdk@1:17.0.10.0.7-2.el8	1:17.0.13.0.11-3.el8
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.100.Final	4.1.136.Final
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.27.0	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.27.0	0.35.0
Medium	RHSA-2026:26354	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.5
Medium	RHSA-2026:41948	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
Medium	RHSA-2026:0927	java-17-openjdk@1:17.0.10.0.7-2.el8	1:17.0.18.0.8-1.el8
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.100.Final	4.1.135.Final
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.15.0	0.27.0
Medium	RHSA-2025:17415	gnutls@3.6.16-8.el8_9.1	0:3.6.16-8.el8_10.4
Medium	GHSA-gvpg-vgmx-xg6w	nimbus-jose-jwt@9.31	9.37.2
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.54.1	0.305.2
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.6.1	3.7.1
Medium	RHSA-2026:38503	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-17.el8_6
Low	RHSA-2026:1631	python3@3.6.8-56.el8_9.3	0:3.6.8-72.el8_10
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.9.5	no fix listed
Low	RHSA-2025:3852	java-17-openjdk@1:17.0.10.0.7-2.el8	1:17.0.15.0.6-2.el8
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.7	1.2.8
Low	RHSA-2026:7667	nghttp2@1.33.0-5.el8_9	0:1.33.0-6.el8_10.2
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.17.2	2.25.4
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.27.0	0.52.0
Low	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Low	ALPINE-CVE-2023-38546	curl@8.1.2-r0	8.4.0-r0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.27.0	0.52.0
Low	RHSA-2026:11077	python3@3.6.8-56.el8_9.3	0:3.6.8-76.el8_10
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.2.1	5.2.2
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.100.Final	4.1.133.Final
Low	RHSA-2025:22063	cups@1:2.2.6-54.el8_9	1:2.2.6-64.el8_10
Low	GO-2023-1571	stdlib@go1.18.9	1.19.6
Low	RHSA-2026:56219	python3@3.6.8-56.el8_9.3	0:3.6.8-78.el8_10
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.6.1	3.9.2
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.0.2	4.1.4
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v3@v3.0.1	3.0.5
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.67.1	1.83.1
Low	RHSA-2026:0337	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-14.el8_10
Low	RHSA-2025:14560	python3@3.6.8-56.el8_9.3	0:3.6.8-71.el8_10
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.100.Final	4.1.132.Final
Low	RHSA-2026:39320	python3@3.6.8-56.el8_9.3	0:3.6.8-77.el8_10
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.100.Final	4.1.133.Final
Low	RHSA-2025:13203	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.3
Low	RHSA-2026:61766	glib2@2.56.4-161.el8	0:2.56.4-177.el8_10
Low	GHSA-7xrh-hqfc-g7qr	zookeeper@3.8.3	3.8.6
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.21.0	0.24.0
Low	GHSA-93mq-9ffx-83m2	github.com/expr-lang/expr@v1.16.9	1.17.0
Low	GO-2023-2102	stdlib@go1.18.9	1.20.10
Low	RHSA-2025:18286	libssh@0.9.6-13.el8_9	0:0.9.6-15.el8_10
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.100.Final	4.1.137.Final
Low	RHSA-2026:36728	libtasn1@4.13-4.el8_7	0:4.13-6.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.20latest	1 year ago	0.111.0	424134954	11,961

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/galoymoney2/galoy-deps.svg)](https://charts.stackradar.io/charts/galoymoney2/galoy-deps)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.