forklift 0.4.0 Helm chart

Name: forklift Helm chart 0.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubevirt-forklift

Scored 21 Oct 2026

Forklift — VM migration from VMware/oVirt/OpenStack to KubeVirt

Version 0.4.0app version release-2.12 0Artifact Hub

forklift 0.4.0 deploys 2 container images: quay.io/kubev2v/forklift-operator and openresty/openresty. Across them, 180 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2018-18312 in perl 5.42.2-r0, fixed in 5.26.3-r0. Chart.yaml declares kubeVersion >=1.30.0-0; rendered for Kubernetes 1.30.0.

Radar Score

2,1740229149

180 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/kubev2v/forklift-operator	release-2.12	00871	882
openresty/openresty	1.31.1.1-1-alpine-fat	022178	1,292

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

180 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2018-18312	perl@5.42.2-r0	5.26.3-r0
High	ALPINE-CVE-2018-18311	perl@5.42.2-r0	5.26.3-r0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-8925	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-19931	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.6-r0	3.5.8-r0
Medium	RHSA-2026:67165	openssl@1:3.5.5-5.el9_8	1:3.5.8-1.el9_8
Medium	ALPINE-CVE-2026-18798	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-11856	curl@8.19.0-r0	8.22.0-r0
Medium	GO-2026-5026	stdlib@go1.26.3	1.25.13
Medium	ALPINE-CVE-2026-10536	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-9079	curl@8.19.0-r0	8.22.0-r0
Medium	RHSA-2026:67910	libevent@2.1.12-8.el9_4	0:2.1.13-1.el9_8
Medium	ALPINE-CVE-2026-8924	curl@8.19.0-r0	8.22.0-r0
Medium	GO-2026-6612	stdlib@go1.26.3	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.55.0	0.60.0
Medium	ALPINE-CVE-2026-66046	expat@2.7.5-r0	2.8.4-r0
Medium	GO-2026-6604	stdlib@go1.26.3	1.26.9
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.79.3	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.79.3	1.83.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-80231	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.19.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	ALPINE-CVE-2026-8926	curl@8.19.0-r0	8.22.0-r0
Low	RHSA-2026:52674	libarchive@3.5.3-9.el9_7	0:3.5.3-11.el9_8
Low	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11564	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-77214	expat@2.7.5-r0	2.9.0-r0
Low	RHSA-2026:72663	expat@2.5.0-6.el9_8.1	0:2.5.0-6.el9_8.5
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11352	curl@8.19.0-r0	8.22.0-r0
Low	RHSA-2026:55440	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.9
Low	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	RHSA-2026:59009	python3.12@3.12.13-3.el9_8.1	0:3.12.14-1.el9_8
Low	RHSA-2026:55439	curl@7.76.1-40.el9	0:7.76.1-40.el9_8.5
Low	ALPINE-CVE-2026-5773	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-9546	curl@8.19.0-r0	8.22.0-r0
Low	RHSA-2026:71585	libxml2@2.9.13-14.el9_8.2	0:2.9.13-14.el9_8.5
Low	RHSA-2026:69126	curl@7.76.1-40.el9	0:7.76.1-40.el9_8.7
Low	ALPINE-CVE-2026-93990	expat@2.7.5-r0	2.8.5-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.0latest	—	release-2.12	0229149	2,174
0.3.0	—	release-2.12	0229146	2,150

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubevirt-forklift/forklift.svg)](https://charts.stackradar.io/charts/kubevirt-forklift/forklift)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.