onyx-stack Helm chart
onyxScored 14 Sept 2026
A Helm chart for Kubernetes
Latest 0.3.1 11 months agoapp version latest 0Artifact Hub
onyx-stack 0.3.1 deploys 12 container images: ghcr.io/kedacore/keda, ghcr.io/kedacore/keda-metrics-apiserver, ghcr.io/kedacore/keda-admission-webhooks, bitnami/minio and 8 more. Across the 6 measured, 731 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.37.0, fixed in 0.52.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
12 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 2.17.2 | 009101 | 944 |
| ghcr.io/ | 2.17.2 | 009101 | 944 |
| ghcr.io/ | 2.17.2 | 00580 | 695 |
| bitnami/ | 2025.5.24-debian-12-r5 | — | unmeasured |
| bitnami/ | 2.0.1-debian-12-r1 | — | unmeasured |
| bitnami/ | 1.25.4-debian-12-r3 | — | unmeasured |
| onyxdotapp/ | latest | 0033175 | 2,109 |
| onyxdotapp/ | latest | — | not yet scanned |
| onyxdotapp/ | latest | 00715 | 266 |
| bitnami/ | 16.2.0-debian-12-r6 | — | unmeasured |
| bitnami/ | 7.4.0-debian-12-r2 | — | unmeasured |
| vespaengine/ | 8.526.15 | 0016180 | 1,380 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
452 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-v3jc-474w-2wm6 | httpcore5-h2 | 5.4.3 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Medium | DEBIAN-CVE-2015-9019 | libxslt | no fix listed |
| Medium | DEBIAN-CVE-2017-11695 | nss | no fix listed |
| Medium | DEBIAN-CVE-2017-11696 | nss | no fix listed |
| Medium | DEBIAN-CVE-2017-11698 | nss | no fix listed |
| Medium | GHSA-8rm2-7qqf-34qm | github.com/ | 0.305.2 |
| Medium | DEBIAN-CVE-2019-1010025 | glibc | no fix listed |
| Low | GHSA-g3pr-3p32-fp23 | micrometer-core | no fix listed |
| Low | DEBIAN-CVE-2026-6653 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-59679 | libxfont | no fix listed |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | GHSA-c4p6-qg4m-9jmr | github.com/ | 2.17.3 |
| Low | DEBIAN-CVE-2026-14456 | openssl | 3.5.7-1~deb13u2 |
| Low | DEBIAN-CVE-2017-7475 | cairo | no fix listed |
| Low | DEBIAN-CVE-2026-9076 | openssl | 3.5.6-1~deb13u2 |
| Low | GHSA-vx9q-rhv9-3jvg | aircompressor | 2.0.3 |
| Low | GHSA-xxh7-fcf3-rj7f | jetty-server | 12.0.32 |
| Low | DEBIAN-CVE-2025-1352 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2026-58015 | glib2.0 | 2.84.4-3~deb13u4 |
| Low | DEBIAN-CVE-2026-58013 | glib2.0 | 2.84.4-3~deb13u4 |
| Low | GHSA-78h2-9frx-2jm8 | github.com/ | 4.1.4 |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | DEBIAN-CVE-2026-58010 | glib2.0 | 2.84.4-3~deb13u4 |
| Low | DEBIAN-CVE-2026-58012 | glib2.0 | 2.84.4-3~deb13u4 |
| Low | DEBIAN-CVE-2026-58014 | glib2.0 | 2.84.4-3~deb13u4 |
| Low | DEBIAN-CVE-2026-63072 | openssl | 3.5.7-1~deb13u2 |
| Low | GHSA-7xrh-hqfc-g7qr | zookeeper | 3.9.5 |
| Low | DEBIAN-CVE-2026-45445 | openssl | 3.5.6-1~deb13u2 |
| Low | GHSA-659w-93r5-9j6m | opennlp-tools | 2.5.9 |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | GHSA-574f-3g2m-x479 | bcprov-jdk18on | 1.80.2 |
| Low | DEBIAN-CVE-2017-11697 | nss | no fix listed |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | GHSA-6c5v-hqjr-5xxp | github.com/ | 1.13.0 |
| Low | DEBIAN-CVE-2026-54874 | openssl | 3.5.7-1~deb13u2 |
| Low | DEBIAN-CVE-2026-42766 | openssl | 3.5.6-1~deb13u2 |
| Low | DEBIAN-CVE-2026-74860 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2023-5574 | xorg-server | no fix listed |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2026-34980 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.46-1~deb13u2 |
| Low | DEBIAN-CVE-2026-63075 | openssl | 3.5.7-1~deb13u2 |
| Low | DEBIAN-CVE-2026-58011 | glib2.0 | 2.84.4-3~deb13u4 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/onyx/onyx-stack)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.