meshery 0.5.0 Helm chart

Name: meshery Helm chart 0.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere-stable

Scored 14 Sept 2026

Meshery chart for deploying Meshery and Meshery's adapters.

Version 0.5.0 4 years agoApp version not verified against the render 1Artifact Hub

meshery 0.5.0 deploys 13 container images: layer5/meshery-app-mesh, layer5/meshery-consul, layer5/meshery-cpx, layer5/meshery-istio and 9 more. Across the 12 measured, 2,263 findings — 1 critical, 48 high — 14 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

24,6901483321,882

2,263 findings over 12 of 13 images measured

KEV ×14 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images

Image	Tag	Vulnerabilities	Radar Score
layer5/meshery-app-mesh	stable-latest	0530178	2,346
layer5/meshery-consul	stable-latest	0424168	2,026
layer5/meshery-cpx	stable-latest	11161184	3,713
layer5/meshery-istio	stable-latest	0219122	1,413
layer5/meshery-kuma	stable-latest	0424130	1,701
layer5/meshery-linkerd	stable-latest	0320142	1,643
layer5/meshery-nginx-sm	stable-latest	0526154	2,026
layer5/meshery-nsm	stable-latest	0454245	3,479
layer5/meshery-operator	stable-latest	00163	443
gcr.io/kubebuilder/kube-rbac-proxy	v0.5.0	—	unmeasured
layer5/meshery-osm	stable-latest	0530174	2,281
layer5/meshery-traefik-mesh	stable-latest	0424163	1,967
layer5/meshery	stable-latest	0119159	1,652

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

351 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-69420	openssl@3.3.3-r0	3.3.6-r0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v0.1.1	1.2.8
Low	ALPINE-CVE-2026-27135	nghttp2@1.64.0-r0	1.68.1
Low	ALPINE-CVE-2022-27774	curl@7.69.1-r0	7.79.1-r1
Low	ALPINE-CVE-2021-22924	curl@7.69.1-r0	7.78.0-r0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.37.0	0.52.0
Low	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.37.0	0.52.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt@v3.2.2+incompatible	no fix listed
Low	GHSA-r9px-m959-cxf4	github.com/go-git/go-git/v5@v5.9.0	5.13.0
Low	GO-2021-0142	stdlib@go1.13.1	1.13.15
Low	GO-2021-0263	stdlib@go1.15.12	1.16.10
Low	GO-2022-0213	stdlib@go1.13.1	1.12.11
Low	GHSA-mw99-9chc-xw7r	github.com/go-git/go-git/v5@v5.9.0	5.11.0
Low	GO-2023-1571	stdlib@go1.15.12	1.19.6
Low	GHSA-7hfp-qfw3-5jxh	helm.sh/helm/v3@v3.3.1	3.9.4
Low	GHSA-c38g-469g-cmgx	helm.sh/helm/v3@v3.3.1	3.5.2
Low	ALPINE-CVE-2021-22923	curl@7.69.1-r0	7.78.0-r0
Low	ALPINE-CVE-2025-1153	binutils@2.43.1-r2	2.43.1-r3
Low	GHSA-jqcq-xjh3-6g23	github.com/jackc/pgproto3/v2@v2.3.1	no fix listed
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.72.0	1.83.1
Low	GO-2022-0435	stdlib@go1.15.12	1.17.9
Low	GHSA-99pg-grm5-qq3v	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	20.10.9
Low	GHSA-6hwg-w5jg-9c6x	github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce	19.03.9
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.13.0	0.24.0
Low	GO-2022-0288	stdlib@go1.15.12	1.16.12
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.0.0-20211209124913-491a49abca63
Low	GO-2023-2102	stdlib@go1.19.13	1.20.10
Low	GO-2022-0236	stdlib@go1.13.1	1.15.12
Low	GO-2021-0226	stdlib@go1.13.1	1.14.8
Low	GHSA-557j-xg8c-q2mm	helm.sh/helm/v3@v3.17.3	3.17.4
Low	GHSA-56hp-xqp3-w2jf	helm.sh/helm/v3@v3.3.1	3.6.1
Low	ALPINE-CVE-2026-31789	openssl@3.3.3-r0	3.3.7-r0
Low	ALPINE-CVE-2025-69419	openssl@3.3.3-r0	3.3.6-r0
Low	GO-2021-0240	stdlib@go1.15.12	1.15.13
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v0.1.1	1.2.8
Low	GO-2021-0242	stdlib@go1.15.12	1.15.13
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v20.10.21+incompatible	20.10.24
Low	GO-2021-0264	stdlib@go1.15.12	1.16.10
Low	GO-2022-0969	stdlib@go1.15.12	1.18.6
Low	GO-2021-0239	stdlib@go1.15.12	1.15.13
Low	GO-2021-0347	stdlib@go1.15.12	1.16.15
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	GO-2021-0245	stdlib@go1.15.12	1.15.15
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.37.0	0.52.0
Low	GHSA-c72p-9xmj-rx3w	github.com/containerd/containerd@v1.3.4	1.4.8
Low	GO-2021-0319	stdlib@go1.15.12	1.16.14
Low	ALPINE-CVE-2020-8284	curl@7.69.1-r0	7.74.0-r0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.37.0	0.52.0
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.9.0	0.13.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.0latest	4 years ago	—	1483321,882	24,690

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere-stable/meshery.svg)](https://charts.stackradar.io/charts/kubesphere-stable/meshery)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.