flomesh-console Helm chart

Name: flomesh-console Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart to install flomesh-console on Kubernetes

Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub

flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings — 8 critical, 27 high — 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.

Radar Score

9,968827200369

604 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/flomesh/flomesh-console-ubi8	0.70.0-30	418146278	7,099
quay.io/flomesh/pipy-repo-ubi8	0.70.0-46	495491	2,869

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

280 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.0	4.3.0
Low	GHSA-q6wq-5p59-983w	parse-url@6.0.0	6.0.1
Low	GHSA-q67f-28xg-22rw	node-forge@0.10.0	1.4.0
Low	RHSA-2026:3042	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-15.el8_6
Low	GHSA-jv3g-j58f-9mq9	jose@4.8.1	4.9.2
Low	RHSA-2026:15953	glib2@2.56.4-159.el8	0:2.56.4-169.el8_10
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.3	2.5.6
Low	RHSA-2023:4529	libxml2@2.9.7-15.el8	0:2.9.7-16.el8_8.1
Low	GHSA-g694-m8vq-gv9h	urijs@1.19.7	1.19.11
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.4	3.1.3
Low	GHSA-vghf-hv5q-vc2g	validator@10.11.0	13.15.22
Low	GHSA-x9w5-v3q2-3rhw	browserify-sign@4.2.1	4.2.2
Low	GHSA-952p-6rrq-rcjv	micromatch@3.1.10	4.0.8
Low	RHSA-2024:9502	expat@2.2.5-10.el8	0:2.2.5-16.el8_10
Low	RHSA-2026:2389	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.19	7.5.3
Low	GHSA-776f-qx25-q3cc	xml2js@0.4.23	0.5.0
Low	RHSA-2025:10027	pam@1.3.1-22.el8	0:1.3.1-37.el8_10
Low	RHSA-2025:14557	pam@1.3.1-22.el8	0:1.3.1-38.el8_10
Low	GHSA-fvcv-3m26-pcqx	axios@0.26.1	0.31.0
Low	RHSA-2025:23383	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.9
Low	RHSA-2024:0119	libxml2@2.9.7-15.el8	0:2.9.7-18.el8_9
Low	GHSA-jpp7-7chh-cf67	parse-url@6.0.0	6.0.1
Low	RHSA-2025:14135	libarchive@3.3.3-4.el8	0:3.3.3-6.el8_10
Low	GHSA-rcmh-qjqh-p98v	nodemailer@6.5.0	7.0.11
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GHSA-ppp5-5v6c-4jwp	node-forge@0.10.0	1.4.0
Low	GHSA-qpx9-hpmf-5gmw	underscore@1.13.1	1.13.8
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	RHSA-2026:2128	python3@3.6.8-48.el8_7	0:3.6.8-73.el8_10
Low	RHSA-2026:22721	expat@2.2.5-10.el8	0:2.5.0-2.el8_10
Low	RHSA-2025:4051	gnutls@3.6.16-5.el8_6	0:3.6.16-8.el8_10.3
Low	RHSA-2025:8686	glibc@2.28-211.el8	0:2.28-251.el8_10.22
Low	GHSA-8fr3-hfg3-gpgp	node-forge@0.10.0	1.0.0
Low	GHSA-73wf-gq98-2v4g	browserslist@4.17.1	4.28.7
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.19	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@3.0.2	5.0.2
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.14.9	1.15.4
Low	GHSA-pqw5-jmp5-px4v	parse-url@6.0.0	8.1.0
Low	GHSA-rv95-896h-c2vc	express@4.17.1	4.19.2
Low	GHSA-qxrj-hx23-xp82	@koa/cors@2.2.3	5.0.0
Low	GHSA-mm7p-fcc7-pg87	nodemailer@6.5.0	7.0.7
Low	RHSA-2024:3203	systemd@239-68.el8	0:239-82.el8
Low	GHSA-xv26-6w52-cph6	websocket-driver@0.7.4	0.7.5
Low	GHSA-c2c7-rcm5-vvqj	picomatch@2.3.0	2.3.2
Low	RHSA-2025:12450	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.2
Low	GHSA-mwp4-54f8-5fhr	ip-address@6.4.0	10.3.1
Low	GHSA-xrjf-phvv-r4vr	strapi@3.6.8	4.1.0
Low	RHSA-2025:4049	libtasn1@4.13-3.el8	0:4.13-5.el8_10
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.70.0-30-ubi8latest	—	0.70.0-30	827200369	9,968

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/flomesh-console.svg)](https://charts.stackradar.io/charts/openshift/flomesh-console)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.