flomesh-console Helm chart
openshiftScored 14 Sept 2026
A Helm chart to install flomesh-console on Kubernetes
Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub
flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings — 8 critical, 27 high — 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 0.70.0-30 | 418146278 | 7,099 |
| quay.io/ | 0.70.0-46 | 495491 | 2,869 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | RHSA-2024:2722 | glibc | 0:2.28-236.el8_9.13 |
| Critical | RHSA-2023:5455KEV | glibc | 0:2.28-225.el8_8.6 |
| Critical | RHSA-2023:5837KEV | nghttp2 | 0:1.33.0-5.el8_8 |
| Critical | RHSA-2025:12010 | sqlite | 0:3.26.0-20.el8_10 |
| High | GHSA-phwq-j96m-2c2q | ejs | 3.1.7 |
| High | RHSA-2023:1405 | openssl | 1:1.1.1k-9.el8_7 |
| High | RHSA-2025:1301KEV | gcc | 0:8.5.0-23.el8_10 |
| High | RHSA-2024:0628 | libssh | 0:0.9.6-13.el8_9 |
| High | GHSA-fx4w-v43j-vc45 | typeorm | 0.3.0 |
| High | RHSA-2024:5654 | curl | 0:7.61.1-34.el8_10.2 |
| High | RHSA-2024:4252 | nghttp2 | 0:1.33.0-6.el8_10.1 |
| High | GHSA-r5fr-rjxr-66jc | lodash-es | 4.18.0 |
| High | GHSA-r5fr-rjxr-66jc | lodash | 4.18.0 |
| High | GHSA-f825-f98c-gj3g | mongoose | 5.13.15 |
| High | RHSA-2024:8860 | krb5 | 0:1.18.2-30.el8_10 |
| High | RHSA-2023:0173 | libxml2 | 0:2.9.7-15.el8_7.1 |
| High | GHSA-w573-4hg7-7wgq | decode-uri-component | 0.2.1 |
| High | GHSA-hw8r-x6gr-5gjp | jsonpath-plus | 10.3.0 |
| High | RHSA-2023:3591 | python3 | 0:3.6.8-51.el8_8.1 |
| High | GHSA-pppg-cpfq-h7wr | jsonpath-plus | 10.2.0 |
| High | GHSA-3jfq-g458-7qm9 | tar | 3.2.2 |
| High | RHSA-2025:21776 | expat | 0:2.5.0-1.el8_10 |
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.7.3 |
| Medium | GHSA-vg7j-7cwx-8wgw | mongoose | 6.13.6 |
| Medium | RHSA-2025:11035 | lz4 | 0:1.8.3-5.el8_10 |
| Medium | RHSA-2023:7151 | python3 | 0:3.6.8-56.el8_9 |
| Medium | RHSA-2023:7176 | python-pip | 0:9.0.3-23.el8 |
| Medium | RHSA-2023:0110 | sqlite | 0:3.26.0-17.el8_7 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | RHEA-2023:3850 | krb5 | 0:1.18.2-25.el8_8 |
| Medium | GHSA-xvch-5gv4-984h | minimist | 1.2.6 |
| Medium | GHSA-m7xq-9374-9rvx | mongoose | 5.13.23 |
| Medium | GHSA-896r-f27r-55mw | json-schema | 0.4.0 |
| Medium | GHSA-9c47-m6qq-7p4h | json5 | 1.0.2 |
| Medium | GHSA-9qgm-w87q-hx89 | strapi | no fix listed |
| Medium | RHSA-2023:0833 | python3 | 0:3.6.8-48.el8_7.1 |
| Medium | GHSA-76p3-8jx3-jpfq | loader-utils | 2.0.3 |
| Medium | GHSA-8hfj-j24r-96c4 | moment | 2.29.2 |
| Medium | GHSA-wc69-rhjr-hc9g | moment | 2.29.4 |
| Medium | RHSA-2026:26275 | openssl | 1:1.1.1k-16.el8_6 |
| Medium | GHSA-9r2w-394v-53qc | tar | 6.1.7 |
| Medium | GHSA-33f9-j839-rf8h | immer | 9.0.6 |
| Medium | GHSA-7f3x-x4pr-wqhj | parse-url | 6.0.1 |
| Medium | GHSA-fwr7-v2mv-hh25 | async | 2.6.4 |
| Medium | GHSA-93q8-gq69-wqmw | ansi-regex | 3.0.1 |
| Medium | GHSA-6h5x-7c5m-7cr7 | eventsource | 1.1.1 |
| Medium | GHSA-fjxv-7rqg-78g4 | form-data | 2.5.4 |
| Medium | GHSA-wm7h-9275-46v2 | dicer | no fix listed |
| Medium | GHSA-wrh9-cjv3-2hpw | sequelize | 6.19.1 |
| Medium | GHSA-hgjh-723h-mx2j | url-parse | 1.5.8 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.70.0-30-ubi8latest | — | 0.70.0-30 | 827200369 | 9,968 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.