StackRadar

mcp-orchestrator 4.0.13 Helm chart

magertronVerified publisher

Scored 3 Oct 2026

MCP Orchestrator — Kubernetes-native control plane for managing MCP servers

Version 4.0.13 todayapp version 4.0.13 1Artifact Hub

mcp-orchestrator 4.0.13 deploys 7 container images: curtismager20/mcp-orchestrator, curtismager20/mcp-sync, curtismager20/mcp-chat-daemon, envoyproxy/envoy and 3 more. Across them, 156 findings — 2 critical, 0 high. The highest contribution is UBUNTU-CVE-2019-9515 in grpc 1.51.1-4.1build5, with no fix listed.

Radar Score

1,7982021133

156 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
curtismager20/mcp-orchestrator4.0.1320866842
curtismager20/mcp-sync4.0.13001017
curtismager20/mcp-chat-daemon4.0.1300000
envoyproxy/envoydistroless-v1.33.1400722362
library/busybox1.3600000
curtismager20/mcp-inventory4.0.13000441
library/postgres×217-alpine00541536

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

21 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDEBIAN-CVE-2019-1010022glibc@2.36-9+deb12u13no fix listed
MediumDEBIAN-CVE-2018-20796glibc@2.36-9+deb12u13no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.36-9+deb12u13no fix listed
MediumDEBIAN-CVE-2019-9192glibc@2.36-9+deb12u13no fix listed
MediumGO-2026-4341stdlib@go1.24.61.24.12
MediumUBUNTU-CVE-2016-20013glibc@2.39-0ubuntu8.9no fix listed
MediumDEBIAN-CVE-2026-5450glibc@2.36-9+deb12u13no fix listed
MediumGO-2026-4337stdlib@go1.24.61.24.13
MediumGO-2026-5026stdlib@go1.24.61.25.13
MediumUBUNTU-CVE-2026-48853grpc@1.51.1-4.1build5no fix listed
MediumGHSA-8r3f-844c-mc37google.golang.org/protobuf@v1.31.01.33.0
MediumUBUNTU-CVE-2026-5260gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumUBUNTU-CVE-2026-42009gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumDEBIAN-CVE-2019-1010024glibc@2.36-9+deb12u13no fix listed
MediumUBUNTU-CVE-2026-33846gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumUBUNTU-CVE-2026-84304grpc@1.51.1-4.1build5no fix listed
MediumUBUNTU-CVE-2026-33845gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumGO-2026-4981stdlib@go1.24.61.25.10
MediumGO-2026-4601stdlib@go1.24.61.25.8
MediumUBUNTU-CVE-2026-42010gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u13no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.0.13latesttoday4.0.1320211331,798
4.0.0—4.0.0020211331,781
3.9.982 days ago3.9.9820211331,781
3.9.713 days ago3.9.7120211301,758
3.9.405 days ago3.9.4020221291,768
3.9.276 days ago3.9.2720231301,798
3.9.187 days ago3.9.1820231301,799
3.8.998 days ago3.8.9920241331,859
3.8.7111 days ago3.8.7120221341,823
3.8.6812 days ago3.8.6820221321,808
3.8.6313 days ago3.8.6320221321,808
3.8.4315 days ago3.8.4320221321,799
3.8.3116 days ago3.8.3120231431,759
3.8.2817 days ago3.8.2820231451,773
3.8.2318 days ago3.8.2320231451,773
3.8.0—3.8.00——
3.7.9220 days ago3.7.9220211401,680
3.7.8621 days ago3.7.8620211401,680
3.7.8422 days ago3.7.8420211401,680
3.7.8123 days ago3.7.8120211501,721
3.7.6924 days ago3.7.6920211491,715
3.7.6624 days ago3.7.6620211491,715
3.7.5726 days ago3.7.57001376875
3.7.5227 days ago3.7.52001376875
3.7.2928 days ago3.7.29001376875

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/magertron/mcp-orchestrator.svg)](https://charts.stackradar.io/charts/magertron/mcp-orchestrator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 3 Oct 2026 · scanned 3 Oct 2026 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.