StackRadar

tdsf 5.7.0 Helm chart

kubebb

Scored 14 Sept 2026

一个统一管理微服务应用流量、兼容Istio&envoy的托管式平台

Version 5.7.0 2 years agoapp version v5.7.0 0Artifact Hub

tdsf 5.7.0 deploys 3 container images: kubebb/mesh-api, kubebb/mesh-operator and kubebb/tdsf-portal. Across them, 410 findings6 critical, 21 high 3 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.12, fixed in 10.1.35.

Radar Score

6,490621107276

410 findings over 3 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
kubebb/mesh-apiv5.7.051040502,379
kubebb/mesh-operatorv5.7.006351862,555
kubebb/tdsf-portalv5.7.01532401,556

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

21 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighGHSA-phwq-j96m-2c2qejs@2.7.43.1.7
HighALPINE-CVE-2024-6119openssl@3.1.1-r13.1.7-r0
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@10.1.1210.1.45
HighGHSA-h3gc-qfqq-6h8ftomcat-embed-core@10.1.1210.1.42
HighGHSA-g5vr-rgqm-vf78spring-webmvc@6.0.11no fix listed
HighALPINE-CVE-2021-3712openssl@1.1.1k-r01.1.1l-r0
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa0.0.0-20231218163308-9d2ee975ef9f
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.11-r4
HighGHSA-v23v-6jw2-98fqgithub.com/docker/docker@v20.10.17+incompatible23.0.15
HighGHSA-59j4-wjwp-mw9mvelocity@1.6.4no fix listed
HighGHSA-qppj-fm5r-hxr3KEVtomcat-embed-core@10.1.1210.1.14
HighGHSA-qppj-fm5r-hxr3KEVgolang.org/x/net@v0.7.00.17.0
HighGHSA-4v7x-pqxf-cx7mgolang.org/x/net@v0.7.00.23.0
HighGHSA-crf3-v9rr-v7hjfastjson@1.2.83no fix listed
HighALPINE-CVE-2024-2511openssl@3.1.1-r13.1.4-r6
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-7w75-32cg-r6g2tomcat-embed-core@10.1.1210.1.19
HighGHSA-vfww-5hm6-hx2jtomcat-embed-core@10.1.1210.1.45
HighGHSA-3jfq-g458-7qm9tar@4.4.134.4.14
HighGHSA-6hgm-866r-3cjvcommons-collections@3.2.13.2.2
HighGHSA-27hp-xhwr-wr2mtomcat-embed-core@10.1.1210.1.34

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.7.0latest2 years agov5.7.06211072766,490

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kubebb/tdsf.svg)](https://charts.stackradar.io/charts/kubebb/tdsf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.