consul Helm chart

Name: consul Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

hashicorp

Scored 18 Oct 2026

Official HashiCorp Consul Chart

Latest 2.0.4 1 month agoapp version 2.0.4 90Artifact Hub

consul 2.0.4 deploys 2 container images: hashicorp/consul-k8s-control-plane and hashicorp/consul. Across them, 41 findings — 0 critical, 0 high. The highest contribution is GO-2026-6612 in stdlib go1.26.7, fixed in 1.26.9. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

48800635

41 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
hashicorp/consul-k8s-control-plane×6	2.0.4	00317	240
hashicorp/consul	2.0.4	00318	248

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

21 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GO-2026-6612	stdlib@go1.26.7	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.59.0	0.60.0
Medium	GO-2026-6604	stdlib@go1.26.7	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6603	stdlib@go1.26.7	1.26.9
Low	GO-2026-6611	stdlib@go1.26.7	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.59.0	0.60.0
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GO-2026-6617	stdlib@go1.26.7	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6608	stdlib@go1.26.7	1.26.9
Low	GO-2026-6607	stdlib@go1.26.7	1.26.9
Low	GO-2026-6609	stdlib@go1.26.7	1.26.9
Low	GO-2026-6613	stdlib@go1.26.7	1.26.9
Low	GO-2026-6605	stdlib@go1.26.7	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6610	stdlib@go1.26.7	1.26.9
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	GO-2026-6599	stdlib@go1.26.7	1.26.9
Low	GO-2026-6600	stdlib@go1.26.7	1.26.9
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.4latest	1 month ago	2.0.4	00635	488
2.0.3	2 months ago	2.0.3	00866	695

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/hashicorp/consul.svg)](https://charts.stackradar.io/charts/hashicorp/consul)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.