tdsf 5.7.0 Helm chart
kubebbScored 14 Sept 2026
一个统一管理微服务应用流量、兼容Istio&envoy的托管式平台
Version 5.7.0 2 years agoapp version v5.7.0 0Artifact Hub
tdsf 5.7.0 deploys 3 container images: kubebb/mesh-api, kubebb/mesh-operator and kubebb/tdsf-portal. Across them, 410 findings — 6 critical, 21 high — 3 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.12, fixed in 10.1.35.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
3 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| kubebb/ | v5.7.0 | 5104050 | 2,379 |
| kubebb/ | v5.7.0 | 0635186 | 2,555 |
| kubebb/ | v5.7.0 | 153240 | 1,556 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
410 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GO-2026-4887 | github.com/ | no fix listed |
| Medium | GHSA-v682-8vv8-vpwr | tomcat-embed-websocket | 10.1.19 |
| Medium | GHSA-8r3f-844c-mc37 | google.golang.org/ | 1.33.0 |
| Medium | ALPINE-CVE-2024-0727 | openssl | 3.1.4-r5 |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-v94h-hvhg-mf9h | spring-webmvc | 6.0.14 |
| Medium | GHSA-h3x4-894j-xpx5 | tomcat-embed-core | 10.1.58 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | ALPINE-CVE-2023-6237 | openssl | 3.1.4-r4 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2024-9143 | openssl | 3.1.7-r1 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | ALPINE-CVE-2023-3817 | openssl | 3.1.2-r0 |
| Medium | GHSA-6wrf-mxfj-pf5p | github.com/ | 20.10.24 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | GHSA-gcx9-497g-6cp6 | tomcat-embed-core | 10.1.58 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | GHSA-gcv8-gh4r-25x6 | urijs | 1.19.8 |
| Medium | GHSA-pc3f-x583-g7j2 | github.com/ | 0.5.1 |
| Medium | GHSA-r936-gwx5-v52f | spring-webmvc | no fix listed |
| Medium | GHSA-4f99-4q7p-p3gh | github.com/ | 1.9.1 |
| Medium | GHSA-hqxw-f8mx-cpmw | github.com/ | 2.8.2-beta.1 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-r53h-jv2g-vpx6 | helm.sh/ | 3.14.2 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 1.9.0 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | GHSA-hf6x-8p5f-cgmf | httpcore5 | 5.4.3 |
| Medium | GHSA-v3jc-474w-2wm6 | httpcore5-h2 | 5.4.3 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-6v2p-p543-phr9 | golang.org/ | 0.27.0 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | GHSA-gx5v-xp9w-j4cg | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Low | GHSA-g3pr-3p32-fp23 | micrometer-core | no fix listed |
| Low | GHSA-vcc3-ghjq-m6fr | decode-uri-component | 0.5.0 |
| Low | GHSA-hj48-42vr-x3v9 | path-parse | 1.0.7 |
| Low | GHSA-mg7w-c9x2-xh7r | github.com/ | 1.12.0 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.4.12 |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.4.12 |
| Low | GHSA-g8pj-r55q-5c2v | tomcat-embed-core | 10.1.14 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | GHSA-mh63-6h87-95cp | github.com/ | 4.5.2 |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | GHSA-gmv4-r438-p67f | urijs | 1.19.9 |
| Low | GO-2023-1571 | stdlib | 1.19.6 |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |
| Low | GHSA-3wrr-7qpf-2prh | jackson-databind | 2.14.0 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/kubebb/tdsf)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.