flomesh-console Helm chart
openshiftScored 14 Sept 2026
A Helm chart to install flomesh-console on Kubernetes
Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub
flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings — 8 critical, 27 high — 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 0.70.0-30 | 418146278 | 7,099 |
| quay.io/ | 0.70.0-46 | 495491 | 2,869 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2025:8958 | libxml2 | 0:2.9.7-20.el8_10 |
| Low | RHSA-2026:33126 | glibc | 0:2.28-251.el8_10.38 |
| Low | RHSA-2026:13285 | libcap | 0:2.48-6.el8_10.1 |
| Low | GHSA-fc9h-whq2-v747 | elliptic | 6.6.0 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | GHSA-qw6h-vgh9-j6wx | express | 4.20.0 |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 4.1.1 |
| Low | GHSA-7q8q-rj6j-mhjq | axios | 0.33.0 |
| Low | RHSA-2026:64809 | expat | 0:2.5.0-2.el8_10.2 |
| Low | RHSA-2025:3828 | glibc | 0:2.28-251.el8_10.16 |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 4.2.0 |
| Low | RHSA-2026:20587 | glibc | 0:2.28-251.el8_10.37 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | RHSA-2026:43420 | acl | 0:2.4.0-1.el8_10 |
| Low | RHSA-2025:1517 | libxml2 | 0:2.9.7-18.el8_10.2 |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.16 |
| Low | GHSA-f5vj-f2hx-8m93 | webpack-dev-server | 5.2.6 |
| Low | RHSA-2025:21977 | libssh | 0:0.9.6-16.el8_10 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GHSA-5c6j-r48x-rmvq | serialize-javascript | 7.0.3 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GHSA-5c9x-8gcm-mpgx | axios | 0.31.1 |
| Low | GHSA-vf2m-468p-8v99 | axios | 0.31.1 |
| Low | GHSA-54xq-cgqr-rpm3 | sharp | 0.32.6 |
| Low | GHSA-qx2v-qp2m-jg93 | postcss | 8.5.10 |
| Low | GHSA-9h6g-pr28-7cqp | nodemailer | 6.9.9 |
| Low | GHSA-f7q4-pwc6-w24p | elliptic | 6.5.7 |
| Low | GHSA-q6x5-8v7m-xcrf | @protobufjs/ | 1.1.1 |
| Low | RHSA-2026:1852 | util-linux | 0:2.32.1-48.el8_10 |
| Low | GHSA-79cf-xcqc-c78w | webpack-dev-server | 5.2.4 |
| Low | GHSA-2rp8-mm9q-fp49 | typeorm | 0.3.31 |
| Low | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Low | GHSA-5p4m-2wfm-xmqj | js-yaml | 4.3.1 |
| Low | RHSA-2026:55804 | nghttp2 | 0:1.33.0-6.el8_10.3 |
| Low | GHSA-ghr5-ch3p-vcr6 | ejs | 3.1.10 |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | RHSA-2026:11349 | libxml2 | 0:2.9.7-21.el8_10.4 |
| Low | RHSA-2026:56133 | attr | 0:2.6.0-1.el8_10 |
| Low | GHSA-xx6v-rp6x-q39c | axios | 0.31.1 |
| Low | RHSA-2026:56131 | pam | 0:1.3.1-40.el8_10 |
| Low | GHSA-f88m-g3jw-g9cj | sharp | 0.35.0 |
| Low | GHSA-898c-q2cr-xwhg | axios | 0.32.0 |
| Low | GHSA-r7g4-qg5f-qqm2 | nodemailer | 8.0.8 |
| Low | GHSA-848j-6mx2-7j84 | elliptic | no fix listed |
| Low | GHSA-x2rg-q646-7m2v | koa | 2.16.1 |
| Low | GHSA-268h-hp4c-crq3 | nodemailer | 8.0.9 |
| Low | GHSA-wqvq-jvpq-h66f | nodemailer | 8.0.9 |
| Low | GHSA-g8qq-57p8-ggw5 | sanitize-html | 2.17.7 |
| Low | GHSA-vccv-cmxp-4j9h | sanitize-html | 2.17.5 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.70.0-30-ubi8latest | — | 0.70.0-30 | 827200369 | 9,968 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.