istio-helm-istiod Helm chart

Name: istio-helm-istiod Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 14 Sept 2026

Helm chart for deploying Istio control plane (istiod) with monitoring

Latest 1.23.6 10 months agoapp version 1.23.6 0Artifact Hub

istio-helm-istiod 1.23.6 deploys 2 container images: istio/pilot and mesosphere/kubectl. Across them, 459 findings — 1 critical, 2 high — 1 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-32463 in sudo 1.9.15p5-3ubuntu5, fixed in 1.9.15p5-3ubuntu5.24.04.1.

Radar Score

4,6031264392

459 findings over 2 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
istio/pilot	1.23.6	1146294	3,420
mesosphere/kubectl×2	v1.35.0-alpine	011898	1,183

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

347 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-6297	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.5
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2024-12243	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.4+Fips1
Low	UBUNTU-CVE-2025-32989	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.4
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	UBUNTU-CVE-2026-9538	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2025-6395	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.4
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-2219	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6
Low	UBUNTU-CVE-2026-42497	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.3
Low	UBUNTU-CVE-2026-41992	gzip@1.12-1ubuntu3	1.12-1ubuntu3.2
Low	UBUNTU-CVE-2026-8932	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.13
Low	UBUNTU-CVE-2026-8286	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v26.1.5+incompatible	29.2.0
Low	UBUNTU-CVE-2026-4046	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-0966	libssh@0.10.6-2build2	0.10.6-2ubuntu0.3
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-48959	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-59843	libssh@0.10.6-2build2	0.10.6-2ubuntu0.5
Low	UBUNTU-CVE-2026-5928	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	UBUNTU-CVE-2026-6791	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-8458	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.52.1	0.311.3
Low	UBUNTU-CVE-2026-6253	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	UBUNTU-CVE-2025-5351	libssh@0.10.6-2build2	0.10.6-2ubuntu0.1
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.8
Low	GO-2026-4341	stdlib@go1.23.7	1.24.12
Low	UBUNTU-CVE-2026-9547	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v4@v4.0.1	4.0.5
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v3@v3.0.3	3.0.4
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-40355	krb5@1.20.1-6ubuntu2.5	1.20.1-6ubuntu2.7
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-6276	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	UBUNTU-CVE-2026-40356	krb5@1.20.1-6ubuntu2.5	1.20.1-6ubuntu2.7
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v26.1.5+incompatible	no fix listed
Low	ALPINE-CVE-2026-2673	openssl@3.5.4-r0	3.5.6-r0
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6	no fix listed
Low	ALPINE-CVE-2026-42767	openssl@3.5.4-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42767	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11
Low	ALPINE-CVE-2026-5545	curl@8.14.1-r2	8.14.1-r3
Low	UBUNTU-CVE-2026-5545	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	UBUNTU-CVE-2026-48962	perl@5.38.2-3.2build2.1	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-3784	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8
Low	UBUNTU-CVE-2025-14819	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.23.6latest	10 months ago	1.23.6	1264392	4,603

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/istio-helm-istiod.svg)](https://charts.stackradar.io/charts/mesosphere-stable/istio-helm-istiod)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.