temporal Helm chart

Name: temporal Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

glasskube

Scored 14 Sept 2026

Temporal is a distributed, scalable, durable, and highly available orchestration engine to execute asynchronous long-running business logic in a scalable and resilient way.

Latest 0.45.2-gk.1 2 years agoapp version 1.25.0 1Artifact Hub

temporal 0.45.2-gk.1 deploys 14 container images: quay.io/prometheus/node-exporter, curlimages/curl, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 10 more. Across the 13 measured, 1,501 findings — 4 critical, 31 high — 3 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.11, fixed in 2.0.

Radar Score

16,3464312211,245

1,501 findings over 13 of 14 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.1	00892	844
curlimages/curl	7.85.0	1362	405
grafana/grafana	11.0.0	0324154	1,901
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.12.0	01995	938
quay.io/prometheus/pushgateway	v1.8.0	011095	973
quay.io/prometheus-operator/prometheus-config-reloader	v0.74.0	009100	923
quay.io/prometheus/prometheus	v2.53.0	0111116	1,124
temporalio/admin-tools×11	1.25.0-tctl-1.18.1-cli-1.0.0	2747161	2,763
library/busybox×5	latest	0000	0
library/cassandra×10	3.11.3	144071	1,926
temporalio/server×4	1.25.0	0525136	1,834
temporalio/ui	2.30.2	0522120	1,684
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured
quay.io/prometheus/alertmanager	v0.27.0	0110103	1,031

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

99 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GO-2024-2687	stdlib@go1.22.1	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.21.0	0.52.0
Medium	DLA-2544-1	openldap@2.4.44+dfsg-5+deb9u2	2.4.44+dfsg-5+deb9u7
Medium	DLA-3008-1	openssl@1.1.0j-1~deb9u1	1.1.0l-1~deb9u6
Medium	ALPINE-CVE-2024-7264	curl@8.5.0-r0	8.9.1-r0
Medium	DLA-2952-1	openssl@1.1.0j-1~deb9u1	1.1.0l-1~deb9u5
Medium	ALPINE-CVE-2024-5535	openssl@3.1.4-r5	3.1.6-r0
Medium	DLA-3017-1	openldap@2.4.44+dfsg-5+deb9u2	2.4.44+dfsg-5+deb9u9
Medium	DLA-2574-1	openldap@2.4.44+dfsg-5+deb9u2	2.4.44+dfsg-5+deb9u8
Medium	GHSA-rj7p-rfgp-852x	libthrift@0.9.2	0.13.0
Medium	GHSA-p979-4mfw-53vg	netty-all@4.0.44.Final	4.1.42.Final
Medium	GHSA-wjxj-f8rg-99wx	libthrift@0.9.2	0.9.3-1
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1q-r0	1.1.1t-r0
Medium	DLA-2968-1	zlib@1:1.2.8.dfsg-5	1:1.2.8.dfsg-5+deb9u1
Medium	DLA-2563-1	openssl@1.1.0j-1~deb9u1	1.1.0l-1~deb9u3
Medium	DLA-2766-1	openssl@1.1.0j-1~deb9u1	1.1.0l-1~deb9u4
Medium	ALPINE-CVE-2024-10979	postgresql16@16.3-r0	16.5-r0
Medium	DLA-2388-1	nss@2:3.26.2-1.1+deb9u1	2:3.26.2-1.1+deb9u2
Medium	DSA-4453-1	openjdk-8@8u181-b13-2~deb9u1	8u212-b03-2~deb9u1
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.21.0	0.31.0
Medium	DLA-2628-1	python2.7@2.7.13-2+deb9u3	2.7.13-2+deb9u5
Medium	DLA-2935-1	expat@2.2.0-2+deb9u1	2.2.0-2+deb9u5
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1q-r0	1.1.1t-r0
Medium	ALPINE-CVE-2024-6197	curl@8.5.0-r0	8.9.0-r0
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.15.0	0.17.0
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1q-r0	1.1.1t-r2
Medium	DLA-2919-1	python2.7@2.7.13-2+deb9u3	2.7.13-2+deb9u6
Medium	GHSA-vx85-mj8c-4qm6	libthrift@0.9.2	0.12.0
Medium	DLA-2337-1	python2.7@2.7.13-2+deb9u3	2.7.13-2+deb9u4
Medium	ALPINE-CVE-2024-6345	py3-setuptools@68.2.2-r0	70.3.0-r0
Medium	GHSA-cx63-2mw6-8hw5	setuptools@65.5.0	70.0.0
Medium	ALPINE-CVE-2024-45492	expat@2.6.2-r0	2.6.3-r0
Medium	GHSA-668q-qrv7-99fm	logback-core@1.1.3	1.2.9
Medium	ALPINE-CVE-2024-4741	openssl@3.1.4-r5	3.1.6-r0
Medium	ALPINE-CVE-2025-4517	python3@3.11.9-r0	3.11.13-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.56.3	1.79.3
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.11	1.31
Medium	DLA-2836-1	nss@2:3.26.2-1.1+deb9u1	2:3.26.2-1.1+deb9u3
Medium	GHSA-r9hx-vwmv-q579	setuptools@65.5.0	65.5.1
Medium	ALPINE-CVE-2024-45491	expat@2.6.2-r0	2.6.3-r0
Medium	GHSA-mvr2-9pj6-7w5j	guava@18.0	24.1.1-android
Medium	PYSEC-2025-49	setuptools@65.5.0	78.1.1
Medium	DLA-2814-1	openjdk-8@8u181-b13-2~deb9u1	8u312-b07-1~deb9u1
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1q-r0	1.1.1u-r2
Medium	ALPINE-CVE-2024-7592	python3@3.11.9-r0	3.11.10-r0
Medium	ALPINE-CVE-2024-6232	python3@3.11.9-r0	3.11.10-r0
Medium	ALPINE-CVE-2024-8088	python3@3.11.9-r0	3.11.9-r1
Medium	GHSA-9h6p-92jq-888x	jbcrypt@0.3m	0.4
Medium	ALPINE-CVE-2024-45490	expat@2.6.2-r0	2.6.3-r0
Medium	GHSA-9w3m-gqgf-c4p9	snakeyaml@1.11	1.32

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.45.2-gk.1latest	2 years ago	1.25.0	4312211,245	16,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/glasskube/temporal.svg)](https://charts.stackradar.io/charts/glasskube/temporal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.