meshery-operator 1.0.70 Helm chart

Name: meshery-operator Helm chart 1.0.70: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

meshery

Not scored yet

Meshery Operator chart.

Version 1.0.70 todaydeploys tag 1.0.5 4Artifact Hub

meshery-operator 1.0.70 deploys 2 container images: meshery/meshery-operator and alpine/k8s. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.51.0, fixed in 0.52.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 2 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
meshery/meshery-operator	1.0.5	00015	108
alpine/k8s	1.35.6	0035196	2,308

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

232 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-13608	curl@8.20.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-11586	curl@8.20.0-r1	8.21.0-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-11972	python3@3.14.5-r1	3.14.7-r0
Low	ALPINE-CVE-2026-80230	curl@8.20.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-76641	expat@2.8.1-r0	2.8.4-r0
Low	ALPINE-CVE-2026-31789	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42766	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-9546	curl@8.20.0-r1	8.21.0-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.51.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.51.0	0.52.0
Low	ALPINE-CVE-2026-7774	python3@3.14.5-r1	3.14.7-r0
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	ALPINE-CVE-2026-82208	curl@8.20.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-12064	curl@8.20.0-r1	8.21.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.20.0-r1	8.21.0-r0
Low	GHSA-8xwf-rjm4-xvhv	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-8286	curl@8.20.0-r1	8.21.0-r0
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v29.0.3+incompatible	29.2.0
Low	GHSA-jxpm-75mh-9fp7	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-8458	curl@8.20.0-r1	8.21.0-r0
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.3	0.6.4
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.3	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.3	0.6.4
Low	GO-2026-4341	stdlib@go1.24.0	1.24.12
Low	ALPINE-CVE-2026-9547	curl@8.20.0-r1	8.21.0-r0
Low	GHSA-fxhp-mv3v-67qp	oras.land/oras-go/v2@v2.6.0	2.6.2
Low	ALPINE-CVE-2026-3276	python3@3.14.5-r1	3.14.7-r0
Low	ALPINE-CVE-2026-76956	expat@2.8.1-r0	2.8.4-r0
Low	ALPINE-CVE-2026-2673	openssl@3.5.5-r0	3.5.6-r0
Low	GHSA-xhf5-7wjv-pqxp	github.com/containerd/containerd@v1.7.30	1.7.33
Low	ALPINE-CVE-2026-9080	curl@8.20.0-r1	8.21.0-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-9545	curl@8.20.0-r1	8.21.0-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-8328	python3@3.14.5-r1	3.14.7-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.51.0	0.52.0
Low	GHSA-h35f-9h28-mq5c	setuptools@82.0.1	83.0.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.54.0	0.55.0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.6-r2
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd@v1.7.30	1.7.33
Low	PYSEC-2026-3721	pip@26.1.2	26.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.70latest	today	1.0.5	—	—
1.0.69	11 days ago	1.0.5	0035211	2,415

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/meshery/meshery-operator.svg)](https://charts.stackradar.io/charts/meshery/meshery-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.