openebs 4.6.1 Helm chart

Name: openebs Helm chart 4.6.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openebs

Scored 14 Sept 2026

Containerized Attached Storage for Kubernetes

Version 4.6.1 3 days agodeploys tag v1.8.1 41Artifact Hub

openebs 4.6.1 deploys 35 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader, registry.k8s.io/sig-storage/csi-node-driver-registrar, openebs/lvm-driver and 29 more. Across them, 2,651 findings — 1 critical, 20 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.48.0-r0, fixed in 3.48.0-r3.

Radar Score

23,8941202432,387

2,651 findings over 35 of 35 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

35 images

Image	Tag	Vulnerabilities	Radar Score
grafana/alloy	v1.8.1	0131264	2,761
quay.io/prometheus-operator/prometheus-config-reloader	v0.81.0	00784	747
registry.k8s.io/sig-storage/csi-node-driver-registrar×3	v2.13.0	00176	546
openebs/lvm-driver×2	1.10.1	012092	1,149
openebs/alpine-sh×11	4.6.0	0046	149
openebs/mayastor-agent-ha-node	v2.12.1	00022	110
openebs/mayastor-csi-node	v2.12.1	00022	110
openebs/mayastor-io-engine	v2.12.1	00020	80
openebs/mayastor-metrics-exporter-io-engine	v2.12.1	00020	112
openebs/zfs-driver×2	2.11.1	00028	208
openebs/provisioner-localpv	4.6.0	001581	992
registry.k8s.io/sig-storage/csi-resizer	v2.0.0	00682	729
registry.k8s.io/sig-storage/csi-snapshotter×3	v8.2.0	00276	561
registry.k8s.io/sig-storage/snapshot-controller×3	v8.2.0	00171	495
registry.k8s.io/sig-storage/csi-provisioner	v6.1.0	00683	744
openebs/mayastor-agent-core	v2.12.1	00022	110
openebs/mayastor-agent-ha-cluster	v2.12.1	00022	110
openebs/mayastor-api-rest	v2.12.1	00023	121
openebs/mayastor-csi-controller	v2.12.1	00022	110
registry.k8s.io/sig-storage/csi-provisioner×2	v5.2.0	00275	553
registry.k8s.io/sig-storage/csi-attacher	v4.8.1	00275	553
registry.k8s.io/sig-storage/csi-resizer×2	v1.13.2	00275	553
openebs/mayastor-eventing-aggregator	v2.12.1	00017	84
openebs/mayastor-obs-callhome	v2.12.1	00032	211
openebs/mayastor-obs-callhome-stats	v2.12.1	00032	211
openebs/mayastor-operator-diskpool	v2.12.1	00022	110
quay.io/minio/minio	RELEASE.2024-12-18T13-15-44Z	0113130	1,398
kiwigrid/k8s-sidecar	1.30.2	111736	754
grafana/loki	3.4.2	009101	938
openebs/alpine-bash	4.6.0	0046	149
openebs/etcd×2	3.6.4-debian-12-r0	0025210	2,188
library/nats	2.9.17-alpine	0424118	1,701
natsio/nats-server-config-reloader	0.10.1	0620107	1,655
natsio/prometheus-nats-exporter	0.11.0	0523125	1,807
quay.io/minio/mc×2	RELEASE.2024-11-21T17-21-54Z	019110	1,085

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

649 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2025-6965	sqlite@3.48.0-r0	3.48.0-r3
High	ALPINE-CVE-2025-15467	openssl@3.5.1-r0	3.5.5-r0
High	UBUNTU-CVE-2025-15467	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7
High	ALPINE-CVE-2024-6119	openssl@3.0.7-r2	3.0.15-r0
High	ALPINE-CVE-2023-0286	openssl@3.0.7-r2	3.0.8-r0
High	RHSA-2025:1346KEV	gcc@11.5.0-2.el9	0:11.5.0-5.el9_5
High	ALPINE-CVE-2023-2650	openssl@3.0.7-r2	3.0.9-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.8.0	0.17.0
High	ALPINE-CVE-2024-2511	openssl@3.0.7-r2	3.0.12-r5
High	ALPINE-CVE-2022-4450	openssl@3.0.7-r2	3.0.8-r0
Medium	GO-2024-2687	stdlib@go1.19.4	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.41.0	0.52.0
Medium	ALPINE-CVE-2024-5535	openssl@3.0.7-r2	3.0.14-r0
Medium	ALPINE-CVE-2022-4304	openssl@3.0.7-r2	3.0.8-r0
Medium	DEBIAN-CVE-2019-1010022	glibc@2.36-9+deb12u10	no fix listed
Medium	DEBIAN-CVE-2023-45853	zlib@1:1.2.13.dfsg-1	no fix listed
Medium	ALPINE-CVE-2022-48174	busybox@1.36.0-r9	1.36.1-r1
Medium	ALPINE-CVE-2026-45447	openssl@3.5.1-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11
Medium	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u10	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.8.0	0.31.0
Medium	DEBIAN-CVE-2019-1010023	glibc@2.36-9+deb12u10	no fix listed
Medium	ALPINE-CVE-2023-0215	openssl@3.0.7-r2	3.0.8-r0
Medium	GHSA-wg47-6jq2-q2hh	github.com/minio/minio@v0.0.0-20241218131544-16f8cf1c52f0	0.0.0-20250403145552-8c70975283f9
Medium	GHSA-m4jx-6526-vvhm	github.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d	2.2.0
Medium	ALPINE-CVE-2023-0464	openssl@3.0.7-r2	3.0.8-r1
Medium	ALPINE-CVE-2023-5363	openssl@3.0.7-r2	3.0.12-r0
Medium	GHSA-38jv-5279-wg99	urllib3@2.3.0	2.6.3
Medium	ALPINE-CVE-2024-4741	openssl@3.0.7-r2	3.0.14-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.68.0	1.79.3
Medium	ALPINE-CVE-2026-19931	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2025-11187	openssl@3.5.1-r0	3.5.5-r0
Medium	PYSEC-2025-49	setuptools@76.0.0	78.1.1
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u10	no fix listed
Medium	ALPINE-CVE-2026-9079	curl@8.20.0-r0	8.22.0-r0
Medium	DEBIAN-CVE-2026-42010	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Medium	ALPINE-CVE-2023-3446	openssl@3.0.7-r2	3.0.9-r3
Medium	UBUNTU-CVE-2016-20013	glibc@2.39-0ubuntu8.4	no fix listed
Medium	DEBIAN-CVE-2023-31486	perl@5.36.0-7+deb12u2	no fix listed
Medium	GHSA-hmm9-r2m2-qg9w	github.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d	2.1.9
Medium	GHSA-2c64-vj8g-vwrq	github.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d	2.1.9
Medium	ALPINE-CVE-2026-63073	openssl@3.5.1-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-10536	curl@8.20.0-r0	8.22.0-r0
Medium	DEBIAN-CVE-2023-31484	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
Medium	ALPINE-CVE-2025-3277	sqlite@3.48.0-r0	3.48.0-r1
Medium	ALPINE-CVE-2023-0216	openssl@3.0.7-r2	3.0.8-r0
Medium	ALPINE-CVE-2023-0217	openssl@3.0.7-r2	3.0.8-r0
Medium	ALPINE-CVE-2023-0401	openssl@3.0.7-r2	3.0.8-r0
Medium	GHSA-jp4j-47f9-2vc3	github.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d	2.2.0
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.10.1-3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.6.1latest	3 days ago	v1.8.1	1202432,387	23,894
4.6.0	18 days ago	4.6.0	1202482,406	24,181

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openebs/openebs.svg)](https://charts.stackradar.io/charts/openebs/openebs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.