skywalking Helm chart

Name: skywalking Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere-test

Scored 14 Sept 2026

Apache SkyWalking APM System

Latest 3.1.0 6 years agoapp version 8.1.0 2Artifact Hub

skywalking 3.1.0 deploys 4 container images: library/busybox, apache/skywalking-oap-server, apache/skywalking-ui and docker.elastic.co/elasticsearch/elasticsearch. Across the 3 measured, 932 findings — 24 critical, 69 high — 14 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.9.0, fixed in 2.12.2.

Radar Score

18,0422469304535

932 findings over 3 of 4 images measured

KEV ×14 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×2	1.30	0000	0
apache/skywalking-oap-server×2	8.1.0-es7	1235153272	9,145
apache/skywalking-ui	8.1.0	1234151263	8,897
docker.elastic.co/elasticsearch/elasticsearch×2	7.5.1	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

319 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4970	stdlib@go1.13.3	1.25.12
Low	GO-2026-5027	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.55.0
Low	GO-2026-4602	stdlib@go1.13.3	1.25.8
Low	GHSA-4wp7-92pw-q264	spring-context@4.3.15.RELEASE	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@4.3.15.RELEASE	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@4.3.15.RELEASE	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.0.27.Final	4.1.135.Final
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@9.4.28.v20200408	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20200116001909-b77594299b42	0.44.0
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@4.3.15.RELEASE	no fix listed
Low	GO-2023-2153	google.golang.org/grpc@v1.24.0	1.56.3
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.24.0	1.82.1
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.42.Final	4.1.125.Final
Low	GHSA-p47f-322f-whfh	logback-core@1.2.3	1.5.33
Low	GHSA-6v67-2wr5-gvf4	logback-core@1.2.3	1.3.15
Low	GHSA-qqpg-mvqg-649v	logback-core@1.2.3	1.5.25

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.0latest	6 years ago	8.1.0	2469304535	18,042

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere-test/skywalking.svg)](https://charts.stackradar.io/charts/kubesphere-test/skywalking)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.