skywalking-v1 Helm chart

Name: skywalking-v1 Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

huangchengwu-helm-chart

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.0 1 year agodeploys tag 7.4.2 0Artifact Hub

skywalking-v1 0.1.0 deploys 4 container images: docker.elastic.co/elasticsearch/elasticsearch-oss, apache/skywalking-ui, apache/skywalking-oap-server and library/alpine. Across the 3 measured, 1,306 findings — 22 critical, 41 high — 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webflux 5.3.7, fixed in 5.3.18.

Radar Score

20,6502241399844

1,306 findings over 3 of 4 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
docker.elastic.co/elasticsearch/elasticsearch-oss×2	7.4.2	—	unmeasured
apache/skywalking-ui	8.9.1	1120180345	9,225
apache/skywalking-oap-server	8.9.1	1121215493	11,276
library/alpine	latest	0046	149

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

545 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-cw39-r4h6-8j3x	msgpack-core@0.8.16	0.9.11
Low	UBUNTU-CVE-2026-63072	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm5
Low	GHSA-w33c-445m-f8w7	okio@1.17.2	1.17.6
Low	GHSA-8wv5-x4w7-5gww	libthrift@0.14.1	0.24.0
Low	GO-2022-0288	stdlib@go1.16.9	1.16.12
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20211209124913-491a49abca63
Low	UBUNTU-CVE-2024-33600	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.16
Low	UBUNTU-CVE-2026-66046	expat@2.2.9-1build1	no fix listed
Low	GHSA-7pwc-h2j2-rjgj	libthrift@0.14.1	0.23.0
Low	UBUNTU-CVE-2022-48303	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.3
Low	GO-2023-2102	stdlib@go1.16.9	1.20.10
Low	UBUNTU-CVE-2025-5318	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm1
Low	UBUNTU-CVE-2023-0466	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.18
Low	GHSA-6qvw-249j-h44c	jose4j@0.7.9	0.9.4
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.63.Final	4.1.137.Final
Low	UBUNTU-CVE-2026-80230	curl@7.68.0-1ubuntu2.7	no fix listed
Low	GHSA-mg83-c7gq-rv5c	spring-security-crypto@5.4.6	5.7.16
Low	UBUNTU-CVE-2023-0465	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.18
Low	UBUNTU-CVE-2026-42013	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2026-0861	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2025-69419	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2022-23491	ca-certificates@20210119~20.04.2	20211016ubuntu0.20.04.1
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm5
Low	GHSA-fx2c-96vj-985v	netty-codec-haproxy@4.1.68.Final	4.1.86.Final
Low	GHSA-6j2q-c73v-97c5	spring-cloud-gateway-server@3.0.3	3.1.10
Low	UBUNTU-CVE-2026-42766	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
Low	UBUNTU-CVE-2025-32990	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm1
Low	UBUNTU-CVE-2024-50602	expat@2.2.9-1build1	2.2.9-1ubuntu0.8
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.40.v20210413	9.4.56
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.17.3	3.19.6
Low	GO-2021-0264	stdlib@go1.16.9	1.16.10
Low	UBUNTU-CVE-2023-6918	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.63.Final	4.1.135.Final
Low	GO-2022-0969	stdlib@go1.16.9	1.18.6
Low	UBUNTU-CVE-2025-6020	pam@1.3.1-5ubuntu4.3	no fix listed
Low	UBUNTU-CVE-2023-27538	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.28	1.31
Low	UBUNTU-CVE-2023-7104	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.6
Low	UBUNTU-CVE-2022-45142	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4
Low	UBUNTU-CVE-2026-86145	pcre2@10.34-7	no fix listed
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.63.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.13.3	2.25.5
Low	GO-2021-0347	stdlib@go1.16.9	1.16.15
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2024-8096	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0
Low	GO-2021-0319	stdlib@go1.16.9	1.16.14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	1 year ago	7.4.2	2241399844	20,650

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/huangchengwu-helm-chart/skywalking-v1.svg)](https://charts.stackradar.io/charts/huangchengwu-helm-chart/skywalking-v1)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.