StackRadar

openebs 4.6.2 Helm chart

openebsOfficialVerified publisher

Scored 9 Oct 2026

Containerized Attached Storage for Kubernetes

Version 4.6.2 yesterdaydeploys tag v1.8.1 41Artifact Hub

openebs 4.6.2 deploys 35 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader, registry.k8s.io/sig-storage/csi-node-driver-registrar, openebs/lvm-driver and 29 more. Across them, 3,034 findings — 8 critical, 16 high — 2 on CISA KEV. The highest contribution is GO-2024-2687 in stdlib go1.19.4, fixed in 1.21.9.

Radar Score

33,2718165042,506

3,034 findings over 35 of 35 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

35 images
ImageTagVulnerabilitiesRadar Score
grafana/alloyv1.8.110462933,486
quay.io/prometheus-operator/prometheus-config-reloaderv0.81.00016931,146
registry.k8s.io/sig-storage/csi-node-driver-registrar×3v2.13.0001183953
openebs/lvm-driver×21.10.110301091,637
openebs/alpine-sh×114.6.00056170
openebs/mayastor-agent-ha-nodev2.12.200018107
openebs/mayastor-csi-nodev2.12.200018107
openebs/mayastor-io-enginev2.12.20001779
openebs/mayastor-metrics-exporter-io-enginev2.12.200016110
openebs/zfs-driver×22.11.200441415
openebs/provisioner-localpv4.6.000221031,439
registry.k8s.io/sig-storage/csi-resizerv2.0.00017901,109
registry.k8s.io/sig-storage/csi-snapshotter×3v8.2.0001283968
registry.k8s.io/sig-storage/snapshot-controller×3v8.2.000981895
registry.k8s.io/sig-storage/csi-provisionerv6.1.00018901,124
openebs/mayastor-agent-corev2.12.200018107
openebs/mayastor-agent-ha-clusterv2.12.200018107
openebs/mayastor-api-restv2.12.200019120
openebs/mayastor-csi-controllerv2.12.200018107
registry.k8s.io/sig-storage/csi-provisioner×2v5.2.0001183951
registry.k8s.io/sig-storage/csi-attacherv4.8.1001183951
registry.k8s.io/sig-storage/csi-resizer×2v1.13.2001183951
openebs/mayastor-eventing-aggregatorv2.12.20001380
openebs/mayastor-obs-callhomev2.12.200028209
openebs/mayastor-obs-callhome-statsv2.12.200028209
openebs/mayastor-operator-diskpoolv2.12.200018107
openebs/minioRELEASE.2024-12-18T13-15-44Z01371351,992
kiwigrid/k8s-sidecar1.30.21123511,032
grafana/loki3.4.200221061,359
openebs/alpine-bash4.6.00056170
openebs/etcd×23.6.4-debian-12-r000372272,751
library/nats2.9.17-alpine14431102,209
natsio/nats-server-config-reloader0.10.12546932,246
natsio/prometheus-nats-exporter0.11.024461142,345
openebs/mc×2RELEASE.2024-11-21T17-21-54Z01221141,523

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

714 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGO-2024-2687stdlib@go1.19.41.21.9
CriticalALPINE-CVE-2025-15467openssl@3.5.1-r03.5.5-r0
CriticalUBUNTU-CVE-2025-15467openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.7
HighALPINE-CVE-2025-6965sqlite@3.48.0-r03.48.0-r3
HighALPINE-CVE-2024-6119openssl@3.0.7-r23.0.15-r0
HighALPINE-CVE-2023-0286openssl@3.0.7-r23.0.8-r0
HighRHSA-2025:1346KEVgcc@11.5.0-2.el90:11.5.0-5.el9_5
HighALPINE-CVE-2023-2650openssl@3.0.7-r23.0.9-r0
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.8.00.17.0
HighALPINE-CVE-2024-2511openssl@3.0.7-r23.0.12-r5
HighALPINE-CVE-2022-4450openssl@3.0.7-r23.0.8-r0
MediumALPINE-CVE-2024-5535openssl@3.0.7-r23.0.14-r0
MediumALPINE-CVE-2022-4304openssl@3.0.7-r23.0.8-r0
MediumDEBIAN-CVE-2019-1010022glibc@2.36-9+deb12u10no fix listed
MediumDEBIAN-CVE-2023-45853zlib@1:1.2.13.dfsg-1no fix listed
MediumALPINE-CVE-2022-48174busybox@1.36.0-r91.36.1-r1
MediumALPINE-CVE-2026-45447openssl@3.5.1-r03.5.7-r0
MediumUBUNTU-CVE-2026-45447openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.11
MediumDEBIAN-CVE-2018-20796glibc@2.36-9+deb12u10no fix listed
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.27.00.31.0
MediumGO-2023-1703stdlib@go1.19.41.19.8
MediumDEBIAN-CVE-2019-1010023glibc@2.36-9+deb12u10no fix listed
MediumGO-2023-1571stdlib@go1.19.41.19.6
MediumALPINE-CVE-2023-0215openssl@3.0.7-r23.0.8-r0
MediumGO-2024-2887stdlib@go1.19.41.21.11
MediumGHSA-wg47-6jq2-q2hhgithub.com/minio/minio@v0.0.0-20241218131544-16f8cf1c52f00.0.0-20250403145552-8c70975283f9
MediumGO-2023-2102stdlib@go1.19.41.20.10
MediumGHSA-m4jx-6526-vvhmgithub.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d2.2.0
MediumALPINE-CVE-2023-0464openssl@3.0.7-r23.0.8-r1
MediumGO-2023-1752stdlib@go1.19.41.19.9
MediumALPINE-CVE-2023-5363openssl@3.0.7-r23.0.12-r0
MediumALPINE-CVE-2024-4741openssl@3.0.7-r23.0.14-r0
MediumGHSA-38jv-5279-wg99urllib3@2.3.02.6.3
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.67.11.79.3
MediumALPINE-CVE-2025-11187openssl@3.5.1-r03.5.5-r0
MediumGO-2023-2185stdlib@go1.19.41.20.11
MediumALPINE-CVE-2026-63073openssl@3.5.1-r03.5.8-r0
MediumALPINE-CVE-2026-28388openssl@3.5.1-r03.5.6-r0
MediumUBUNTU-CVE-2026-28388openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.9
MediumPYSEC-2025-49setuptools@76.0.078.1.1
MediumDEBIAN-CVE-2019-9192glibc@2.36-9+deb12u10no fix listed
MediumALPINE-CVE-2026-28389openssl@3.5.1-r03.5.6-r0
MediumUBUNTU-CVE-2026-28389openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.9
MediumALPINE-CVE-2026-8925curl@8.20.0-r08.22.0-r0
MediumGHSA-2c64-vj8g-vwrqgithub.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d2.1.9
MediumGO-2026-4341stdlib@go1.23.41.24.12
MediumALPINE-CVE-2023-3446openssl@3.0.7-r23.0.9-r3
MediumUBUNTU-CVE-2016-20013glibc@2.39-0ubuntu8.4no fix listed
MediumDEBIAN-CVE-2023-31486perl@5.36.0-7+deb12u2no fix listed
MediumGHSA-hmm9-r2m2-qg9wgithub.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d2.1.9

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.6.2latestyesterdayv1.8.18165042,50633,271
4.6.128 days agov1.8.18144462,25029,815
4.6.01 month ago4.6.07174952,52432,821

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openebs/openebs.svg)](https://charts.stackradar.io/charts/openebs/openebs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Oct 2026 · scanned 9 Oct 2026 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.