ves-agent Helm chart
opencordScored 14 Sept 2026
A Helm chart for Kubernetes
Latest 1.0.2 5 years agoapp version 1.0.0 0Artifact Hub
ves-agent 1.0.2 deploys 1 container image: opencord/ves-agent. Across them, 214 findings — 12 critical, 37 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.0.6.RELEASE, fixed in 5.2.20.RELEASE.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| opencord/ | 1.0.0 | 123711253 | 6,350 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
214 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-95cm-88f5-f2c7 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-27xj-rqx5-2255 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-wm9w-rjj3-j356 | tomcat-embed-core | no fix listed |
| Medium | ALPINE-CVE-2020-11655 | sqlite | 3.25.0-r4 |
| Medium | ALPINE-CVE-2018-14598 | libx11 | 1.6.6-r0 |
| Medium | GHSA-rpr3-cw39-3pxh | jackson-databind | 2.9.10.4 |
| Medium | GHSA-qmqc-x3r4-6v39 | jackson-databind | 2.9.10 |
| Medium | GHSA-r29c-68gh-xp6x | tomcat-embed-core | 9.0.118 |
| Medium | ALPINE-CVE-2019-19244 | sqlite | 3.25.3-r3 |
| Medium | ALPINE-CVE-2019-7317 | libpng | 1.6.37-r0 |
| Medium | GHSA-q3mw-pvr8-9ggc | tomcat-embed-core | 8.5.93 |
| Medium | GHSA-hgjh-9rj2-g67j | spring-web | 5.3.33 |
| Medium | ALPINE-CVE-2018-11813 | libjpeg-turbo | 1.5.3-r3 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | GHSA-ff77-26x5-69cr | tomcat-embed-core | no fix listed |
| Medium | GHSA-h4x4-5qp2-wp46 | jackson-datatype-jsr310 | 2.9.8 |
| Medium | GHSA-668q-qrv7-99fm | logback-core | 1.2.9 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | ALPINE-CVE-2019-16168 | sqlite | 3.25.3-r2 |
| Medium | ALPINE-CVE-2019-2201 | libjpeg-turbo | 1.5.3-r6 |
| Medium | GHSA-h6fc-48rj-7qqh | tomcat-embed-core | 9.0.118 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | GHSA-fccv-jmmp-qg76 | tomcat-embed-core | 8.5.96 |
| Medium | GHSA-qxf4-chvg-4r8r | tomcat-embed-core | 8.5.51 |
| Medium | ALPINE-CVE-2018-1152 | libjpeg-turbo | 1.5.3-r2 |
| Medium | ALPINE-CVE-2018-14048 | libpng | 1.6.37-r0 |
| Medium | GHSA-wc4r-xq3c-5cf3 | tomcat-embed-core | no fix listed |
| Medium | GHSA-r6j3-px5g-cq3x | tomcat-embed-core | 8.5.94 |
| Medium | GHSA-wr62-c79q-cv37 | tomcat-embed-core | no fix listed |
| Medium | GHSA-5m62-pw8w-7w9f | tomcat-embed-core | 9.0.118 |
| Medium | ALPINE-CVE-2018-14498 | libjpeg-turbo | 1.5.3-r5 |
| Medium | GHSA-25xr-qj8w-c4vf | tomcat-embed-core | no fix listed |
| Medium | GHSA-hh26-6xwr-ggv7 | spring-beans | 5.2.22.RELEASE |
| Medium | GHSA-4j3c-42xv-3f84 | tomcat-embed-core | no fix listed |
| Medium | GHSA-qcwq-55hx-v3vh | snappy-java | 1.1.10.1 |
| Medium | GHSA-h2fw-rfh5-95r3 | tomcat-embed-core | no fix listed |
| Medium | GHSA-9xv2-5v5q-p794 | tomcat-embed-core | no fix listed |
| Medium | GHSA-9w3m-gqgf-c4p9 | snakeyaml | 1.32 |
| Medium | GHSA-f26x-pr96-vw86 | spring-core | 5.0.7.RELEASE |
| Medium | GHSA-p22x-g9px-3945 | tomcat-embed-core | 8.5.83 |
| Medium | GHSA-2wrp-6fg6-hmc5 | spring-web | 5.3.34 |
| Medium | GHSA-m8p2-495h-ccmh | hibernate-validator | 6.0.18.Final |
| Medium | GHSA-v682-8vv8-vpwr | tomcat-embed-websocket | 8.5.99 |
| Medium | GHSA-c4r9-r8fh-9vj2 | snakeyaml | 1.31 |
| Medium | GHSA-9gcm-f4x3-8jpw | spring-web | 5.0.7 |
| Medium | ALPINE-CVE-2019-19242 | sqlite | 3.25.3-r3 |
| Medium | GHSA-98wm-3w3q-mw94 | snakeyaml | 1.31 |
| Medium | GHSA-h3x4-894j-xpx5 | tomcat-embed-core | no fix listed |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/opencord/ves-agent)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.