StackRadar

temporal Helm chart

glasskubeVerified publisher

Scored 14 Sept 2026

Temporal is a distributed, scalable, durable, and highly available orchestration engine to execute asynchronous long-running business logic in a scalable and resilient way.

Latest 0.45.2-gk.1 2 years agoapp version 1.25.0 1Artifact Hub

temporal 0.45.2-gk.1 deploys 14 container images: quay.io/prometheus/node-exporter, curlimages/curl, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 10 more. Across the 13 measured, 1,501 findings4 critical, 31 high 3 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.11, fixed in 2.0.

Radar Score

16,3464312211,245

1,501 findings over 13 of 14 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images
ImageTagVulnerabilitiesRadar Score
quay.io/prometheus/node-exporterv1.8.100892844
curlimages/curl7.85.01362405
grafana/grafana11.0.003241541,901
registry.k8s.io/kube-state-metrics/kube-state-metricsv2.12.001995938
quay.io/prometheus/pushgatewayv1.8.0011095973
quay.io/prometheus-operator/prometheus-config-reloaderv0.74.0009100923
quay.io/prometheus/prometheusv2.53.001111161,124
temporalio/admin-tools×111.25.0-tctl-1.18.1-cli-1.0.027471612,763
library/busybox×5latest00000
library/cassandra×103.11.31440711,926
temporalio/server×41.25.005251361,834
temporalio/ui2.30.205221201,684
docker.elastic.co/elasticsearch/elasticsearch×27.17.3unmeasured
quay.io/prometheus/alertmanagerv0.27.001101031,031

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

287 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDLA-3047-1avahi@0.6.32-20.6.32-2+deb9u1
LowGHSA-w8rr-5gcm-pp58go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.27.01.43.0
LowGO-2025-4008stdlib@go1.22.11.24.8
LowGO-2025-4010stdlib@go1.22.11.24.8
LowALPINE-CVE-2025-0167curl@8.5.0-r08.12.0-r0
LowGO-2025-4014stdlib@go1.22.11.24.8
LowALPINE-CVE-2026-6042musl@1.2.4_git20230717-r41.2.4_git20230717-r6
LowGO-2025-3503stdlib@go1.22.11.23.7
LowGO-2026-6107go.etcd.io/etcd/client/pkg/v3@v3.5.103.5.33
LowGO-2026-4976stdlib@go1.22.11.25.10
LowGHSA-2x5j-vhc8-9cwmgithub.com/cloudflare/circl@v1.3.71.6.1
LowGHSA-vp62-88p7-qqf5github.com/docker/docker@v26.1.3+incompatibleno fix listed
LowGO-2026-5856stdlib@go1.22.11.25.12
LowDLA-2487-1apt@1.4.91.4.11
LowGO-2025-4007stdlib@go1.22.11.24.9
LowGO-2026-6355golang.org/x/crypto@v0.21.00.56.0
LowGO-2026-4980stdlib@go1.22.11.25.10
LowGO-2026-5039stdlib@go1.22.11.25.11
LowGO-2025-4013stdlib@go1.22.11.24.8
LowGO-2025-3849stdlib@go1.22.11.23.12
LowGO-2026-4946stdlib@go1.22.11.25.9
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.51.27no fix listed
LowGO-2026-4603stdlib@go1.22.11.25.8
LowGO-2026-6303golang.org/x/crypto@v0.21.00.55.0
LowGHSA-jp4c-xjxw-mgf9pip@23.3.126.1
LowGO-2026-6354golang.org/x/crypto@v0.21.00.56.0
LowGO-2026-4982stdlib@go1.22.11.25.10
LowGO-2026-6091stdlib@go1.22.11.25.13
LowGO-2026-6180golang.org/x/mod@v0.14.00.40.0
LowALPINE-CVE-2024-10977postgresql16@16.3-r016.5-r0
LowGO-2025-3750stdlib@go1.22.11.23.10
LowGO-2026-4864stdlib@go1.22.11.25.9
LowGO-2025-3447stdlib@go1.22.11.22.12
LowGO-2026-4865stdlib@go1.22.11.25.9
LowGO-2026-4869stdlib@go1.22.11.25.9
LowGO-2026-4340stdlib@go1.22.11.24.12
LowGO-2025-4175stdlib@go1.22.11.24.11
LowGHSA-32gq-x56h-299cfilippo.io/age@v1.1.11.2.1
LowGO-2026-4403stdlib@go1.22.11.23.9
LowGHSA-29wx-vh33-7x7rgithub.com/golang-jwt/jwt/v4@v4.5.04.5.1
LowGO-2026-5025golang.org/x/net@v0.22.00.55.0
LowGO-2026-4970stdlib@go1.22.11.25.12
LowGO-2022-0635github.com/aws/aws-sdk-go@v1.51.27no fix listed
LowGO-2026-5027golang.org/x/net@v0.22.00.55.0
LowGO-2026-5029golang.org/x/net@v0.22.00.55.0
LowGO-2026-5030golang.org/x/net@v0.22.00.55.0
LowGHSA-58qw-9mgm-455vpip@23.3.126.1
LowGO-2026-4602stdlib@go1.22.11.25.8
LowGO-2026-5024golang.org/x/sys@v0.18.00.44.0
LowGO-2026-6179golang.org/x/mod@v0.14.00.40.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.45.2-gk.1latest2 years ago1.25.04312211,24516,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/glasskube/temporal.svg)](https://charts.stackradar.io/charts/glasskube/temporal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.