StackRadar

opensign 1.0.0 Helm chart

helmforgeVerified publisher

Not scored yet

Production-ready OpenSign electronic signature platform with MongoDB and durable document storage

Version 1.0.0 todaydeploys tag 9.0.4 0Artifact Hub

opensign 1.0.0 deploys 3 container images: opensign/opensignserver, opensign/opensign and library/mongo. The highest contribution is GO-2026-4341 in stdlib go1.24.6, fixed in 1.24.12. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
opensign/opensignserver×4digest-pinned—not yet scanned
opensign/opensign×2digest-pinned—not yet scanned
library/mongo9.0.40081471,412

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

155 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2026-6610golang.org/x/net@v0.59.00.60.0
LowGO-2026-6610stdlib@go1.26.81.26.9
LowUBUNTU-CVE-2026-88647gnutls28@3.8.12-2ubuntu1.1no fix listed
LowUBUNTU-CVE-2026-107161cyrus-sasl2@2.1.28+dfsg1-9ubuntu3no fix listed
LowUBUNTU-CVE-2026-107778krb5@1.22.1-2ubuntu4.1no fix listed
LowGO-2026-4970stdlib@go1.24.61.25.12
LowUBUNTU-CVE-2026-76642util-linux@2.41.3-3ubuntu2.2no fix listed
LowGO-2025-4012stdlib@go1.24.61.24.8
LowUBUNTU-CVE-2026-103111pcre2@10.46-1build1no fix listed
LowUBUNTU-CVE-2026-95210gnutls28@3.8.12-2ubuntu1.1no fix listed
LowUBUNTU-CVE-2026-78408util-linux@2.41.3-3ubuntu2.2no fix listed
LowGO-2026-4980stdlib@go1.24.61.25.10
LowUBUNTU-CVE-2026-7017perl@5.40.1-7ubuntu0.3no fix listed
LowUBUNTU-CVE-2026-95209gnutls28@3.8.12-2ubuntu1.1no fix listed
LowGO-2025-4011stdlib@go1.24.61.24.8
LowGO-2025-4015stdlib@go1.24.61.24.8
LowGO-2026-4603stdlib@go1.24.61.25.8
LowGO-2025-4175stdlib@go1.24.61.24.11
LowGO-2026-4864stdlib@go1.24.61.25.9
LowGO-2026-4982stdlib@go1.24.61.25.10
LowUBUNTU-CVE-2026-78410util-linux@2.41.3-3ubuntu2.2no fix listed
LowGO-2026-6091stdlib@go1.24.61.25.13
LowUBUNTU-CVE-2026-35368rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowGO-2025-4008stdlib@go1.24.61.24.8
LowGO-2025-4010stdlib@go1.24.61.24.8
LowUBUNTU-CVE-2026-95184gnutls28@3.8.12-2ubuntu1.1no fix listed
LowUBUNTU-CVE-2026-89158pcre2@10.46-1build1no fix listed
LowGO-2026-4865stdlib@go1.24.61.25.9
LowUBUNTU-CVE-2026-67693gnutls28@3.8.12-2ubuntu1.1no fix listed
LowGHSA-mh29-5h37-fv8mjs-yaml@3.13.13.14.2
LowGHSA-h67p-54hq-rp68js-yaml@3.13.13.15.0
LowGO-2026-4976stdlib@go1.24.61.25.10
LowGO-2026-5039stdlib@go1.24.61.25.11
LowUBUNTU-CVE-2026-107708krb5@1.22.1-2ubuntu4.1no fix listed
LowUBUNTU-CVE-2026-49839jq@1.8.1-4ubuntu2no fix listed
LowGO-2026-5856stdlib@go1.24.61.25.12
LowUBUNTU-CVE-2026-54369acl@2.3.2-2no fix listed
LowUBUNTU-CVE-2026-78409util-linux@2.41.3-3ubuntu2.2no fix listed
LowUBUNTU-CVE-2026-89157pcre2@10.46-1build1no fix listed
LowUBUNTU-CVE-2026-89161pcre2@10.46-1build1no fix listed
LowUBUNTU-CVE-2026-35341rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowGO-2026-4340stdlib@go1.24.61.24.12
LowUBUNTU-CVE-2026-93658rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowUBUNTU-CVE-2026-8674glibc@2.43-2ubuntu2.4no fix listed
LowGO-2026-6599stdlib@go1.26.81.26.9
LowGO-2026-6600stdlib@go1.26.81.26.9
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.13.13.15.1
LowUBUNTU-CVE-2026-35352rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed
LowUBUNTU-CVE-2026-56391coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.1
LowUBUNTU-CVE-2026-35350rust-coreutils@0.10.0-1ubuntu2~26.04.1no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latesttoday9.0.4——

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helmforge/opensign.svg)](https://charts.stackradar.io/charts/helmforge/opensign)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 22 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.