cilium Helm chart

Name: cilium Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

nicklasfrahm-cilium

Scored 14 Sept 2026

Deploy the Cilium CNI.

Latest 0.7.4app version 1.18.2 0Artifact Hub

cilium 0.7.4 deploys 6 container images: quay.io/cilium/cilium, quay.io/cilium/cilium-envoy, quay.io/cilium/operator-generic, quay.io/cilium/hubble-relay and 2 more. Across them, 771 findings — 0 critical, 3 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.2-r0, fixed in 3.5.5-r0.

Radar Score

7,0920384684

771 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/cilium/cilium×6	v1.18.2	0131233	2,486
quay.io/cilium/cilium-envoy	v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	0124177	1,908
quay.io/cilium/operator-generic	v1.18.2	00690	813
quay.io/cilium/hubble-relay	v1.18.2	00176	566
quay.io/cilium/hubble-ui	v0.13.3	012132	753
quay.io/cilium/hubble-ui-backend	v0.13.3	00176	566

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

266 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-75803	openssl@3.5.2-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15
Low	GHSA-g6v3-7xmc-w563	github.com/gopacket/gopacket@v1.3.2-0.20250721223119-be3fffa73cab	1.6.1
Low	UBUNTU-CVE-2026-4046	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	ALPINE-CVE-2025-15468	openssl@3.5.2-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-48959	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-5928	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-40164	jq@1.7.1-3ubuntu0.24.04.1	1.7.1-3ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-6791	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	GO-2026-4341	stdlib@go1.24.2	1.24.12
Low	GHSA-3fcv-jvfp-m4q9	github.com/cilium/cilium@v1.18.2	1.18.8
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-2673	openssl@3.5.2-r0	3.5.6-r0
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.1	no fix listed
Low	ALPINE-CVE-2026-42767	openssl@3.5.2-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-42767	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-48962	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	GHSA-q6h5-q3q6-f87x	github.com/cilium/cilium@v1.18.2	1.18.10
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6
Low	ALPINE-CVE-2026-63074	openssl@3.5.2-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63074	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15
Low	UBUNTU-CVE-2025-14831	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.5
Low	UBUNTU-CVE-2026-6238	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	ALPINE-CVE-2026-34181	openssl@3.5.2-r0	3.5.7-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.40.0	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.41.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	ALPINE-CVE-2025-66199	openssl@3.5.2-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.3	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.40.0	0.45.0
Low	UBUNTU-CVE-2025-1352	elfutils@0.190-1.1ubuntu0.1	no fix listed
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.74.2	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.40.0	0.52.0
Low	ALPINE-CVE-2026-22796	openssl@3.5.2-r0	3.5.5-r0
Low	UBUNTU-CVE-2026-22796	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.40.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.40.0	0.52.0
Low	UBUNTU-CVE-2025-68973	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.74.2	1.82.1
Low	UBUNTU-CVE-2026-34743	xz-utils@5.6.1+really5.4.5-1ubuntu0.2	5.6.1+really5.4.5-1ubuntu0.3
Low	UBUNTU-CVE-2026-54411	pam@1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.6
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.14.0	1.17.7
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.66-5ubuntu2.2	1:2.66-5ubuntu2.4
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.40.0	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.4latest	—	1.18.2	0384684	7,092

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/nicklasfrahm-cilium/cilium.svg)](https://charts.stackradar.io/charts/nicklasfrahm-cilium/cilium)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.