galoy-deps Helm chart

Name: galoy-deps Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

galoymoney2

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.10.20 1 year agodeploys tag 0.111.0 0Artifact Hub

galoy-deps 0.10.20 deploys 9 container images: otel/opentelemetry-collector-k8s, quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook and 5 more. Across them, 1,116 findings — 4 critical, 24 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

11,961424134954

1,116 findings over 9 of 9 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-k8s	0.111.0	0112119	1,201
quay.io/jetstack/cert-manager-cainjector	v1.14.3	01381	694
quay.io/jetstack/cert-manager-controller	v1.14.3	0111113	1,166
quay.io/jetstack/cert-manager-webhook	v1.14.3	0111104	1,077
registry.k8s.io/ingress-nginx/controller	v1.8.1	2724113	1,951
ayushsobti/kube-monkey	v0.5.2	029105	1,128
quay.io/strimzi/operator	0.39.0	2854133	3,018
quay.io/jetstack/cert-manager-startupapicheck	v1.14.3	01483	721
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v20230407	026103	1,005

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

437 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2024:3268	krb5@1.18.2-26.el8_9	0:1.18.2-27.el8_10
Low	RHSA-2026:42090	glib2@2.56.4-161.el8	0:2.56.4-170.el8_10
Low	RHSA-2026:3042	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-15.el8_6
Low	RHSA-2026:15953	glib2@2.56.4-161.el8	0:2.56.4-169.el8_10
Low	RHBA-2024:6680	nss@3.90.0-6.el8_9	0:3.101.0-7.el8_8
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.7	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.7	1.2.8
Low	GHSA-65xw-vw82-r86x	github.com/antchfx/xpath@v1.3.1	1.3.6
Low	RHSA-2024:9502	expat@2.2.5-11.el8	0:2.2.5-16.el8_10
Low	RHSA-2026:2389	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.53.v20231009	9.4.56
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.100.Final	4.1.135.Final
Low	RHSA-2025:23383	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.9
Low	RHSA-2024:4265	cups@1:2.2.6-54.el8_9	1:2.2.6-60.el8_10
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.100.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.2	2.25.5
Low	RHSA-2025:14135	libarchive@3.3.3-5.el8	0:3.3.3-6.el8_10
Low	ALPINE-CVE-2024-8096	curl@8.1.2-r0	8.10.0-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.27.0	0.52.0
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.100.Final	4.1.125.Final
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.27.0	0.52.0
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.53.v20231009	9.4.57.v20241219
Low	RHSA-2026:2128	python3@3.6.8-56.el8_9.3	0:3.6.8-73.el8_10
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.100.Final	4.1.133.Final
Low	RHSA-2026:22721	expat@2.2.5-11.el8	0:2.5.0-2.el8_10
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.100.Final	4.1.135.Final
Low	RHSA-2025:4051	gnutls@3.6.16-8.el8_9.1	0:3.6.16-8.el8_10.3
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.17.2	2.25.3
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.13.0
Low	RHSA-2025:8686	glibc@2.28-236.el8_9.12	0:2.28-251.el8_10.22
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.100.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.100.Final	4.1.136.Final
Low	GHSA-cfpf-hrx2-8rv6	github.com/expr-lang/expr@v1.16.9	1.17.7
Low	GO-2023-2185	stdlib@go1.18.9	1.20.11
Low	RHSA-2024:3203	systemd@239-78.el8	0:239-82.el8
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.100.Final	4.1.136.Final
Low	RHSA-2025:12450	libxml2@2.9.7-18.el8_9	0:2.9.7-21.el8_10.2
Low	ALPINE-CVE-2023-46219	curl@8.1.2-r0	8.5.0-r0
Low	ALPINE-CVE-2024-4603	openssl@3.1.1-r1	3.1.5-r0
Low	GHSA-9ph3-v2vh-3qx7	vertx-core@4.5.0	4.5.3
Low	RHSA-2025:4049	libtasn1@4.13-4.el8_7	0:4.13-5.el8_10
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.31	9.37.4
Low	RHSA-2026:57462	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.13
Low	ALPINE-CVE-2024-0853	curl@8.1.2-r0	8.6.0-r0
Low	RHSA-2024:10779	python3@3.6.8-56.el8_9.3	0:3.6.8-69.el8_10
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.100.Final	4.1.135.Final
Low	RHSA-2024:3347	python3@3.6.8-56.el8_9.3	0:3.6.8-62.el8_10
Low	RHSA-2024:3233	libssh@0.9.6-13.el8_9	0:0.9.6-14.el8
Low	RHSA-2026:62218	libssh@0.9.6-13.el8_9	0:0.9.6-17.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.20latest	1 year ago	0.111.0	424134954	11,961

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/galoymoney2/galoy-deps.svg)](https://charts.stackradar.io/charts/galoymoney2/galoy-deps)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.