lens Helm chart

Name: lens Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

oci-ai-incubations

Scored 14 Sept 2026

A Helm chart for Corrino Lens application with frontend portal and backend control plane

Latest 0.1.14 8 months agodeploys tag v1.13.2 0Artifact Hub

lens 0.1.14 deploys 16 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, library/busybox and 11 more. Across the 13 measured, 1,704 findings — 4 critical, 16 high — 3 on CISA KEV. The highest contribution is GHSA-rgjg-66cx-5x9m in github.com/grafana/grafana v0.0.0-20250812085420-df5de8219b41+dirty, fixed in 4.6.4.

Radar Score

17,0704162181,466

1,704 findings over 13 of 16 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.13.2	01388	739
quay.io/jetstack/cert-manager-controller	v1.13.2	0212121	1,284
quay.io/jetstack/cert-manager-webhook	v1.13.2	0211110	1,172
library/busybox	1.31.1	0000	0
grafana/grafana	12.1.1	2343201	2,876
registry.k8s.io/ingress-nginx/controller	v1.13.2	012499	1,306
quay.io/prometheus/pushgateway	v1.11.1	00783	741
quay.io/prometheus-operator/prometheus-config-reloader	v0.85.0	00677	694
quay.io/prometheus/prometheus	v3.5.0	00899	887
iad.ocir.io/iduyx1qnmway/corrino-lens-backend×2	v0.0.3	—	unmeasured
iad.ocir.io/iduyx1qnmway/corrino-lens-portal	v0.0.4	—	unmeasured
library/busybox	1.34	0000	0
library/postgres	13	0139221	2,612
alpine/k8s×6	1.31.10	2665310	4,374
iad.ocir.io/iduyx1qnmway/terminate-node-image	v0.0.1	—	unmeasured
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v1.6.2	00057	385

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

572 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-46m5-8hpj-p5p5	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	1.9.2-0.20250514160932-04111e9f2afd
Low	GHSA-3jq7-8ph8-63xm	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	7.2.1
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.73.0	1.83.1
Low	GHSA-fqw6-gf59-qr4w	github.com/containerd/containerd@v1.7.27	1.7.32
Low	GHSA-v6v8-xj6m-xwqh	github.com/hashicorp/go-retryablehttp@v0.7.4	0.7.7
Low	GO-2023-2382	stdlib@go1.20.4	1.20.12
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.39.0	0.52.0
Low	ALPINE-CVE-2026-22796	openssl@3.5.0-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-22796	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.39.0	0.45.0
Low	GHSA-r6j8-c6r2-37rr	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.32.10
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.39.0	0.52.0
Low	GO-2024-2599	stdlib@go1.20.4	1.21.8
Low	ALPINE-CVE-2025-10148	curl@8.14.1-r0	8.14.1-r2
Low	GO-2024-3106	stdlib@go1.20.4	1.22.7
Low	DEBIAN-CVE-2022-0563	util-linux@2.41-5	no fix listed
Low	GHSA-82m2-cv7p-4m75	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.27.16
Low	GHSA-cvm3-pp2j-chr3	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	8.5.26
Low	GHSA-gj7m-853r-289r	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	8.5.14
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.75-10+b1	1:2.75-10+deb13u1
Low	DEBIAN-CVE-2026-11979	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	no fix listed
Low	GO-2024-2600	stdlib@go1.20.4	1.21.8
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.73.0	1.82.1
Low	GHSA-wfhv-mj62-f5xh	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	1.9.2-0.20260513165311-fb7336fc36c1
Low	GO-2024-2609	stdlib@go1.20.4	1.21.8
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	DEBIAN-CVE-2026-34743	xz-utils@5.8.1-1	5.8.1-1+deb13u1
Low	GO-2024-2851	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	no fix listed
Low	GO-2024-3107	stdlib@go1.20.4	1.22.7
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	GO-2024-2856	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	no fix listed
Low	GHSA-ffqx-q65f-36jf	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.10.3
Low	DEBIAN-CVE-2026-3184	util-linux@2.41-5	no fix listed
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.14.0	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.77.1	1.97.3
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.50.0	1.65.0
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.10	1.7.8
Low	GHSA-jq9f-gm9w-rwm9	github.com/openfga/openfga@v1.8.13	1.11.3
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-19487	perl@5.40.1-6	no fix listed
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.39.0	0.52.0
Low	GHSA-pwhc-rpq9-4c8w	github.com/containerd/containerd@v1.7.27	1.7.29
Low	GHSA-497x-rrr9-68jp	github.com/grafana/loki/v3@v3.2.1	3.6.4
Low	DEBIAN-CVE-2026-89158	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GHSA-259w-8hf6-59c2	github.com/containerd/containerd@v1.6.15	1.6.18
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v28.2.2+incompatible	no fix listed
Low	GO-2023-2041	stdlib@go1.20.4	1.20.8
Low	ALPINE-CVE-2026-42769	openssl@3.5.0-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42769	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.14latest	8 months ago	v1.13.2	4162181,466	17,070

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/oci-ai-incubations/lens.svg)](https://charts.stackradar.io/charts/oci-ai-incubations/lens)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.