apisix Helm chart

Name: apisix Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere-carryon-test

Not scored yet

Apache APISIX is a dynamic, real-time, high-performance API gateway, based on the Nginx library and etcd.

Latest 0.1.7deploys tag 1.5-alpine 0Artifact Hub

apisix 0.1.7 deploys 3 container images: library/busybox, apache/apisix and kubesphere/etcd. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.28	0000	0
apache/apisix	1.5-alpine	14236	948
kubesphere/etcd	v3.3.12	0264	311

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

40 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2021-3711	openssl@1.1.1g-r0	1.1.1l-r0
High	ALPINE-CVE-2021-23840	openssl@1.1.1g-r0	1.1.1j-r0
High	ALPINE-CVE-2021-3712	openssl@1.1.1g-r0	1.1.1l-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.11-r4
High	ALPINE-CVE-2021-3449	openssl@1.1.1g-r0	1.1.1k-r0
Medium	ALPINE-CVE-2021-22945	curl@7.67.0-r0	7.79.0-r0
Medium	ALPINE-CVE-2021-22926	curl@7.67.0-r0	7.67.0-r5
Medium	ALPINE-CVE-2020-8285	curl@7.67.0-r0	7.67.0-r3
Medium	ALPINE-CVE-2019-14697	musl@1.1.20-r3	1.1.20-r5
Medium	ALPINE-CVE-2019-1543	openssl@1.1.1a-r1	1.1.1b-r1
Medium	ALPINE-CVE-2019-1551	openssl@1.1.1a-r1	1.1.1d-r2
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.5-r0	2.10.7-r0
Medium	ALPINE-CVE-2020-8286	curl@7.67.0-r0	7.67.0-r3
Medium	ALPINE-CVE-2021-22946	curl@7.67.0-r0	7.79.0-r0
Medium	ALPINE-CVE-2020-8231	curl@7.67.0-r0	7.67.0-r2
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1g-r0	1.1.1j-r0
Medium	ALPINE-CVE-2020-8169	curl@7.67.0-r0	7.67.0-r1
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1g-r0	1.1.1i-r0
Medium	ALPINE-CVE-2019-15847	gcc@9.2.0-r4	9.3.0-r0
Medium	ALPINE-CVE-2021-42380	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42379	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42381	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42385	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42382	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42378	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42384	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-42386	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2019-1549	openssl@1.1.1a-r1	1.1.1d-r0
Medium	ALPINE-CVE-2021-42383	busybox@1.31.1-r9	1.31.1-r11
Medium	ALPINE-CVE-2021-22925	curl@7.67.0-r0	7.67.0-r5
Medium	ALPINE-CVE-2021-22947	curl@7.67.0-r0	7.79.0-r0
Medium	ALPINE-CVE-2020-8177	curl@7.67.0-r0	7.67.0-r1
Low	ALPINE-CVE-2021-22923	curl@7.67.0-r0	7.79.0-r0
Low	ALPINE-CVE-2020-8284	curl@7.67.0-r0	7.79.0-r0
Low	ALPINE-CVE-2019-1563	openssl@1.1.1a-r1	1.1.1d-r0
Low	ALPINE-CVE-2021-23839	openssl@1.1.1g-r0	1.1.1j-r0
Low	ALPINE-CVE-2021-22898	curl@7.67.0-r0	7.67.0-r4
Low	ALPINE-CVE-2019-1547	openssl@1.1.1a-r1	1.1.1d-r0
Low	ALPINE-CVE-2020-28928	musl@1.1.24-r2	1.1.24-r3
Low	ALPINE-CVE-2021-42374	busybox@1.31.1-r9	1.31.1-r11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.7latest	—	1.5-alpine	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere-carryon-test/apisix.svg)](https://charts.stackradar.io/charts/kubesphere-carryon-test/apisix)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.