consul 2.0.3 Helm chart

Name: consul Helm chart 2.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

hashicorp

Scored 14 Sept 2026

Official HashiCorp Consul Chart

Version 2.0.3 1 month agoapp version 2.0.3 89Artifact Hub

consul 2.0.3 deploys 2 container images: hashicorp/consul-k8s-control-plane and hashicorp/consul. Across them, 74 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

69500866

74 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
hashicorp/consul-k8s-control-plane×6	2.0.3	00421	254
hashicorp/consul	2.0.3	00445	441

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

45 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.82.1	1.83.1
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-49839	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5026	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.82.1	1.82.2
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5972	stdlib@go1.26.5	1.25.13
Low	GO-2026-6088	stdlib@go1.26.5	1.25.13
Low	GO-2026-6089	stdlib@go1.26.5	1.25.13
Low	GO-2026-6090	stdlib@go1.26.5	1.25.13
Low	GO-2026-5942	stdlib@go1.26.5	1.26.6
Low	GO-2026-6218	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-41256	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43894	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43896	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.82.1	1.83.1
Low	ALPINE-CVE-2026-47770	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-6355	golang.org/x/crypto@v0.53.0	0.56.0
Low	ALPINE-CVE-2026-41257	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.53.0	0.56.0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-54679	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43895	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5932	golang.org/x/crypto@v0.53.0	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.4latest	3 days ago	2.0.4	0002	8
2.0.3	1 month ago	2.0.3	00866	695

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/hashicorp/consul.svg)](https://charts.stackradar.io/charts/hashicorp/consul)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.