StackRadar

nginx-service-mesh 2.0.0 Helm chart

nginxVerified publisher

Scored 14 Sept 2026

NGINX Service Mesh

Version 2.0.0 10 days agoApp version not verified against the render 5Artifact Hub

nginx-service-mesh 2.0.0 deploys 9 container images: curlimages/curl, gcr.io/spiffe-io/spire-agent, docker-registry.nginx.com/nsm/nginx-mesh-cert-reloader, library/nats and 5 more. Across the 3 measured, 119 findings0 critical, 1 high. The highest contribution is GHSA-45x7-px36-x8w8 in golang.org/x/crypto v0.12.0, fixed in 0.17.0. Chart.yaml declares kubeVersion >= 1.22-0; rendered for Kubernetes 1.22.0.

Radar Score

1,1660114104

119 findings over 3 of 9 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
curlimages/curllatest00000
gcr.io/spiffe-io/spire-agent1.5.6unmeasured
docker-registry.nginx.com/nsm/nginx-mesh-cert-reloader×22.0.0unmeasured
library/nats2.9-alpine01141021,153
docker-registry.nginx.com/nsm/nginx-mesh-controller2.0.0unmeasured
docker-registry.nginx.com/nsm/nginx-mesh-metrics2.0.0unmeasured
gcr.io/spiffe-io/spire-server1.5.6unmeasured
gcr.io/spiffe-io/k8s-workload-registrar1.5.6unmeasured
bitnami/kubectl×2latest000213

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

14 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGO-2024-2687stdlib@go1.20.141.21.9
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.12.00.52.0
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.12.00.31.0
MediumGHSA-m4jx-6526-vvhmgithub.com/nats-io/nats-server/v2@v0.0.0-20240301171717-567baac9e0112.2.0
MediumGHSA-hmm9-r2m2-qg9wgithub.com/nats-io/nats-server/v2@v0.0.0-20240301171717-567baac9e0112.1.9
MediumGHSA-2c64-vj8g-vwrqgithub.com/nats-io/nats-server/v2@v0.0.0-20240301171717-567baac9e0112.1.9
MediumGHSA-jp4j-47f9-2vc3github.com/nats-io/nats-server/v2@v0.0.0-20240301171717-567baac9e0112.2.0
MediumGHSA-j756-f273-xhp4github.com/nats-io/nats-server/v2@v0.0.0-20240301171717-567baac9e0112.2.0
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.12.00.52.0
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.12.00.52.0
MediumALPINE-CVE-2024-9143openssl@3.1.7-r03.1.7-r1
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.12.00.52.0
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.12.00.52.0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.12.00.35.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.0.0latest10 days ago01141041,166

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/nginx/nginx-service-mesh.svg)](https://charts.stackradar.io/charts/nginx/nginx-service-mesh)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.