lens Helm chart

Name: lens Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

oci-ai-incubations

Scored 14 Sept 2026

A Helm chart for Corrino Lens application with frontend portal and backend control plane

Latest 0.1.14 8 months agodeploys tag v1.13.2 0Artifact Hub

lens 0.1.14 deploys 16 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, library/busybox and 11 more. Across the 13 measured, 1,704 findings — 4 critical, 16 high — 3 on CISA KEV. The highest contribution is GHSA-rgjg-66cx-5x9m in github.com/grafana/grafana v0.0.0-20250812085420-df5de8219b41+dirty, fixed in 4.6.4.

Radar Score

17,0704162181,466

1,704 findings over 13 of 16 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.13.2	01388	739
quay.io/jetstack/cert-manager-controller	v1.13.2	0212121	1,284
quay.io/jetstack/cert-manager-webhook	v1.13.2	0211110	1,172
library/busybox	1.31.1	0000	0
grafana/grafana	12.1.1	2343201	2,876
registry.k8s.io/ingress-nginx/controller	v1.13.2	012499	1,306
quay.io/prometheus/pushgateway	v1.11.1	00783	741
quay.io/prometheus-operator/prometheus-config-reloader	v0.85.0	00677	694
quay.io/prometheus/prometheus	v3.5.0	00899	887
iad.ocir.io/iduyx1qnmway/corrino-lens-backend×2	v0.0.3	—	unmeasured
iad.ocir.io/iduyx1qnmway/corrino-lens-portal	v0.0.4	—	unmeasured
library/busybox	1.34	0000	0
library/postgres	13	0139221	2,612
alpine/k8s×6	1.31.10	2665310	4,374
iad.ocir.io/iduyx1qnmway/terminate-node-image	v0.0.1	—	unmeasured
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v1.6.2	00057	385

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

706 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-rgjg-66cx-5x9m	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	4.6.4
Critical	ALPINE-CVE-2025-48384KEV	git@2.49.0-r0	2.49.1-r0
Critical	GHSA-69j6-29vr-p3j9KEV	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	7.5.11
Critical	ALPINE-CVE-2025-6965	sqlite@3.49.2-r0	3.49.2-r1
High	ALPINE-CVE-2025-15467	openssl@3.5.0-r0	3.5.5-r0
High	DEBIAN-CVE-2025-15467	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.5.0	0.17.0
High	GHSA-vqph-p5vc-g644	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	1.9.2-0.20250521205822-0ba0b99665a9
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v20.10.24+incompatible	23.0.15
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.9.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.19.0	0.23.0
High	GHSA-7fxm-f474-hf8w	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.24.17
High	GHSA-7phr-6cc9-4m5q	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	6.2.5
Medium	GO-2025-3704	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	no fix listed
Medium	GO-2024-3215	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	no fix listed
Medium	GO-2024-2687	stdlib@go1.20.4	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.39.0	0.52.0
Medium	GO-2024-2857	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	no fix listed
Medium	GHSA-f5f7-6478-qm6p	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.19.15
Medium	GHSA-mpv3-g8m3-3fjc	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	8.5.27
Medium	DSA-6113-1	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	GHSA-wqv3-8cm6-h6wg	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.16.11
Medium	GHSA-hq6q-c2x6-hmch	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.25.16
Medium	ALPINE-CVE-2026-45447	openssl@3.5.0-r0	3.5.7-r0
Medium	DEBIAN-CVE-2026-45447	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.5.0	0.31.0
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	GHSA-34jx-wx69-9x8v	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.11.9
Medium	GHSA-q78c-gwqw-jcmc	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.24.17
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12	no fix listed
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.16.13
Medium	GHSA-27wf-5967-98gx	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.28.12
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.9.0	0.17.0
Medium	GHSA-g42g-737j-qx6j	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.18.18
Medium	GHSA-xr3x-62qw-vc4w	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	6.7.2
Medium	GHSA-38jv-5279-wg99	urllib3@2.5.0	2.6.3
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.73.0	1.79.3
Medium	GHSA-j9wf-vvm6-4r9w	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	no fix listed
Medium	ALPINE-CVE-2025-49796	libxml2@2.13.8-r0	2.13.9-r0
Medium	ALPINE-CVE-2025-11187	openssl@3.5.0-r0	3.5.5-r0
Medium	DEBIAN-CVE-2025-11187	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12	no fix listed
Medium	GHSA-4pwp-cx67-5cpx	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	6.4.4
Medium	DEBIAN-CVE-2026-42010	gnutls28@3.8.9-3	3.8.9-3+deb13u4
Medium	GHSA-x6mj-w4jf-jmgw	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.15.12
Medium	ALPINE-CVE-2026-63073	openssl@3.5.0-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-63073	openssl@3.5.1-1+deb13u1	3.5.7-1~deb13u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.14latest	8 months ago	v1.13.2	4162181,466	17,070

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/oci-ai-incubations/lens.svg)](https://charts.stackradar.io/charts/oci-ai-incubations/lens)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.