lens Helm chart

Name: lens Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

oci-ai-incubations

Scored 15 Sept 2026

A Helm chart for Corrino Lens application with frontend portal and backend control plane

Latest 0.1.14 8 months agodeploys tag v1.13.2 0Artifact Hub

lens 0.1.14 deploys 16 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, library/busybox and 11 more. Across the 13 measured, 1,704 findings — 3 critical, 17 high — 3 on CISA KEV. The highest contribution is GHSA-rgjg-66cx-5x9m in github.com/grafana/grafana v0.0.0-20250812085420-df5de8219b41+dirty, fixed in 4.6.4.

Radar Score

17,0853172181,466

1,704 findings over 13 of 16 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.13.2	01388	739
quay.io/jetstack/cert-manager-controller	v1.13.2	0212121	1,284
quay.io/jetstack/cert-manager-webhook	v1.13.2	0211110	1,172
library/busybox	1.31.1	0000	0
grafana/grafana	12.1.1	2343201	2,876
registry.k8s.io/ingress-nginx/controller	v1.13.2	012499	1,307
quay.io/prometheus/pushgateway	v1.11.1	00783	741
quay.io/prometheus-operator/prometheus-config-reloader	v0.85.0	00677	694
quay.io/prometheus/prometheus	v3.5.0	00899	887
iad.ocir.io/iduyx1qnmway/corrino-lens-backend×2	v0.0.3	—	unmeasured
iad.ocir.io/iduyx1qnmway/corrino-lens-portal	v0.0.4	—	unmeasured
library/busybox	1.34	0000	0
library/postgres	13	0139221	2,625
alpine/k8s×6	1.31.10	1765310	4,375
iad.ocir.io/iduyx1qnmway/terminate-node-image	v0.0.1	—	unmeasured
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v1.6.2	00057	385

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

706 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-4786	python3@3.12.11-r0	3.12.14-r0
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.4.0	1.6.3
Low	DEBIAN-CVE-2025-14831	gnutls28@3.8.9-3	3.8.9-3+deb13u2
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12	no fix listed
Low	ALPINE-CVE-2025-48386	git@2.49.0-r0	2.49.1-r0
Low	GHSA-4xh5-x5gv-qwph	pip@25.1.1	25.3
Low	ALPINE-CVE-2026-34181	openssl@3.5.0-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-34181	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2
Low	ALPINE-CVE-2026-25210	expat@2.7.1-r0	2.7.4-r0
Low	GO-2023-1878	stdlib@go1.20.4	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.39.0	0.52.0
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	GHSA-9h84-qmv7-982p	helm.sh/helm/v3@v3.18.2	3.18.5
Low	GHSA-f9f8-9pmf-xv68	helm.sh/helm/v3@v3.18.2	3.18.5
Low	GHSA-hqvf-45jj-mccq	awscli@1.40.40	1.45.28
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GO-2024-2963	stdlib@go1.20.4	1.21.12
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.41.0	0.55.0
Low	GHSA-jgfp-53c3-624w	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.29.14
Low	DEBIAN-CVE-2026-7017	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-gxcp-jjxh-rwp4	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	1.9.2-0.20260513165311-fb7336fc36c1
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	ALPINE-CVE-2025-62408	c-ares@1.34.5-r0	1.34.6-r0
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd@v1.7.27	1.7.33
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	ALPINE-CVE-2025-66199	openssl@3.5.0-r0	3.5.5-r0
Low	DEBIAN-CVE-2025-66199	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v20.10.24+incompatible	24.0.9
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.39.0	0.45.0
Low	GHSA-hmfx-3pcx-653p	github.com/containerd/containerd@v1.6.15	1.6.18
Low	PYSEC-2026-3721	pip@25.1.1	26.2
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.36.0	0.38.0
Low	GHSA-68m9-983m-f3v5	github.com/openfga/openfga@v1.8.13	1.14.0
Low	GHSA-46m5-8hpj-p5p5	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	1.9.2-0.20250514160932-04111e9f2afd
Low	GHSA-3jq7-8ph8-63xm	github.com/grafana/grafana@v0.0.0-20250812085420-df5de8219b41+dirty	7.2.1
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.73.0	1.83.1
Low	GHSA-fqw6-gf59-qr4w	github.com/containerd/containerd@v1.7.27	1.7.32
Low	GHSA-v6v8-xj6m-xwqh	github.com/hashicorp/go-retryablehttp@v0.7.4	0.7.7
Low	GO-2023-2382	stdlib@go1.20.4	1.20.12
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.39.0	0.52.0
Low	ALPINE-CVE-2026-22796	openssl@3.5.0-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-22796	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.39.0	0.45.0
Low	GHSA-r6j8-c6r2-37rr	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.32.10
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.39.0	0.52.0
Low	GO-2024-2599	stdlib@go1.20.4	1.21.8
Low	ALPINE-CVE-2025-10148	curl@8.14.1-r0	8.14.1-r2
Low	GO-2024-3106	stdlib@go1.20.4	1.22.7
Low	DEBIAN-CVE-2022-0563	util-linux@2.41-5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.14latest	8 months ago	v1.13.2	3172181,466	17,085

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/oci-ai-incubations/lens.svg)](https://charts.stackradar.io/charts/oci-ai-incubations/lens)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.