StackRadar

flomesh-console Helm chart

openshift

Scored 14 Sept 2026

A Helm chart to install flomesh-console on Kubernetes

Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub

flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings8 critical, 27 high 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.

Radar Score

9,968827200369

604 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/flomesh/flomesh-console-ubi80.70.0-304181462787,099
quay.io/flomesh/pipy-repo-ubi80.70.0-464954912,869

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

448 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalRHSA-2024:2722glibc@2.28-211.el80:2.28-236.el8_9.13
CriticalRHSA-2023:5455KEVglibc@2.28-211.el80:2.28-225.el8_8.6
CriticalRHSA-2023:5837KEVnghttp2@1.33.0-3.el8_2.10:1.33.0-5.el8_8
CriticalRHSA-2025:12010sqlite@3.26.0-16.el8_60:3.26.0-20.el8_10
HighGHSA-phwq-j96m-2c2qejs@3.1.63.1.7
HighRHSA-2023:1405openssl@1:1.1.1k-7.el8_61:1.1.1k-9.el8_7
HighRHSA-2025:1301KEVgcc@8.5.0-15.el80:8.5.0-23.el8_10
HighRHSA-2024:0628libssh@0.9.6-3.el80:0.9.6-13.el8_9
HighGHSA-fx4w-v43j-vc45typeorm@0.2.390.3.0
HighRHSA-2024:5654curl@7.61.1-25.el80:7.61.1-34.el8_10.2
HighRHSA-2024:4252nghttp2@1.33.0-3.el8_2.10:1.33.0-6.el8_10.1
HighGHSA-r5fr-rjxr-66jclodash-es@4.17.214.18.0
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
HighGHSA-f825-f98c-gj3gmongoose@5.13.95.13.15
HighRHSA-2024:8860krb5@1.18.2-22.el8_70:1.18.2-30.el8_10
HighRHSA-2023:0173libxml2@2.9.7-15.el80:2.9.7-15.el8_7.1
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-hw8r-x6gr-5gjpjsonpath-plus@0.19.010.3.0
HighRHSA-2023:3591python3@3.6.8-48.el8_70:3.6.8-51.el8_8.1
HighGHSA-pppg-cpfq-h7wrjsonpath-plus@0.19.010.2.0
HighGHSA-3jfq-g458-7qm9tar@2.2.23.2.2
HighRHSA-2025:21776expat@2.2.5-10.el80:2.5.0-1.el8_10
MediumGHSA-hrpp-h998-j3ppqs@6.7.06.7.3
MediumGHSA-vg7j-7cwx-8wgwmongoose@5.13.96.13.6
MediumRHSA-2025:11035lz4@1.8.3-3.el8_40:1.8.3-5.el8_10
MediumRHSA-2023:7151python3@3.6.8-48.el8_70:3.6.8-56.el8_9
MediumRHSA-2023:7176python-pip@9.0.3-22.el80:9.0.3-23.el8
MediumRHSA-2023:0110sqlite@3.26.0-16.el8_60:3.26.0-17.el8_7
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumRHEA-2023:3850krb5@1.18.2-22.el8_70:1.18.2-25.el8_8
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumGHSA-m7xq-9374-9rvxmongoose@5.13.95.13.23
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumGHSA-9c47-m6qq-7p4hjson5@1.0.11.0.2
MediumGHSA-9qgm-w87q-hx89strapi@3.6.8no fix listed
MediumRHSA-2023:0833python3@3.6.8-48.el8_70:3.6.8-48.el8_7.1
MediumGHSA-76p3-8jx3-jpfqloader-utils@2.0.02.0.3
MediumGHSA-8hfj-j24r-96c4moment@2.29.12.29.2
MediumGHSA-wc69-rhjr-hc9gmoment@2.29.12.29.4
MediumRHSA-2026:26275openssl@1:1.1.1k-7.el8_61:1.1.1k-16.el8_6
MediumGHSA-9r2w-394v-53qctar@6.1.46.1.7
MediumGHSA-33f9-j839-rf8himmer@8.0.49.0.6
MediumGHSA-7f3x-x4pr-wqhjparse-url@6.0.06.0.1
MediumGHSA-fwr7-v2mv-hh25async@2.6.32.6.4
MediumGHSA-93q8-gq69-wqmwansi-regex@3.0.03.0.1
MediumGHSA-6h5x-7c5m-7cr7eventsource@1.1.01.1.1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.32.5.4
MediumGHSA-wm7h-9275-46v2dicer@0.3.0no fix listed
MediumGHSA-wrh9-cjv3-2hpwsequelize@5.22.46.19.1
MediumGHSA-hgjh-723h-mx2jurl-parse@1.5.31.5.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.70.0-30-ubi8latest0.70.0-308272003699,968

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/flomesh-console.svg)](https://charts.stackradar.io/charts/openshift/flomesh-console)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.