StackRadar

flomesh-console Helm chart

openshift

Scored 14 Sept 2026

A Helm chart to install flomesh-console on Kubernetes

Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub

flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings8 critical, 27 high 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.

Radar Score

9,968827200369

604 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/flomesh/flomesh-console-ubi80.70.0-304181462787,099
quay.io/flomesh/pipy-repo-ubi80.70.0-464954912,869

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

146 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-hrpp-h998-j3ppqs@6.7.06.7.3
MediumGHSA-vg7j-7cwx-8wgwmongoose@5.13.96.13.6
MediumRHSA-2025:11035lz4@1.8.3-3.el8_40:1.8.3-5.el8_10
MediumRHSA-2023:7151python3@3.6.8-48.el8_70:3.6.8-56.el8_9
MediumRHSA-2023:7176python-pip@9.0.3-22.el80:9.0.3-23.el8
MediumRHSA-2023:0110sqlite@3.26.0-16.el8_60:3.26.0-17.el8_7
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumRHEA-2023:3850krb5@1.18.2-22.el8_70:1.18.2-25.el8_8
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumGHSA-m7xq-9374-9rvxmongoose@5.13.95.13.23
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumGHSA-9c47-m6qq-7p4hjson5@1.0.11.0.2
MediumGHSA-9qgm-w87q-hx89strapi@3.6.8no fix listed
MediumRHSA-2023:0833python3@3.6.8-48.el8_70:3.6.8-48.el8_7.1
MediumGHSA-76p3-8jx3-jpfqloader-utils@2.0.02.0.3
MediumGHSA-8hfj-j24r-96c4moment@2.29.12.29.2
MediumGHSA-wc69-rhjr-hc9gmoment@2.29.12.29.4
MediumRHSA-2026:26275openssl@1:1.1.1k-7.el8_61:1.1.1k-16.el8_6
MediumGHSA-9r2w-394v-53qctar@6.1.46.1.7
MediumGHSA-33f9-j839-rf8himmer@8.0.49.0.6
MediumGHSA-7f3x-x4pr-wqhjparse-url@6.0.06.0.1
MediumGHSA-fwr7-v2mv-hh25async@2.6.32.6.4
MediumGHSA-93q8-gq69-wqmwansi-regex@3.0.03.0.1
MediumGHSA-6h5x-7c5m-7cr7eventsource@1.1.01.1.1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.32.5.4
MediumGHSA-wm7h-9275-46v2dicer@0.3.0no fix listed
MediumGHSA-wrh9-cjv3-2hpwsequelize@5.22.46.19.1
MediumGHSA-hgjh-723h-mx2jurl-parse@1.5.31.5.8
MediumGHSA-4wf5-vphf-c2xcterser@4.8.04.8.1
MediumRHSA-2023:7877openssl@1:1.1.1k-7.el8_61:1.1.1k-12.el8_9
MediumGHSA-cx63-2mw6-8hw5setuptools@39.2.070.0.0
MediumRHSA-2024:5530python-setuptools@39.2.0-6.el80:39.2.0-8.el8_10
MediumGHSA-gpvv-69j7-gwj8pip@9.0.319.2
MediumGHSA-jqv5-7xpx-qj74sqlite3@5.0.05.1.5
MediumGHSA-74fj-2j2h-c42qfollow-redirects@1.14.41.14.7
MediumGHSA-9m93-w8w6-76hhmongoose@5.13.95.13.20
MediumGHSA-85vg-grr5-pw42strapi@3.6.83.6.9
MediumGHSA-c2qf-rxjj-qqgwsemver@6.3.06.3.1
MediumGHSA-43fc-jf86-j433axios@0.26.10.30.3
MediumRHSA-2024:7848openssl@1:1.1.1k-7.el8_61:1.1.1k-14.el8_6
MediumRHSA-2025:10698libxml2@2.9.7-15.el80:2.9.7-21.el8_10.1
MediumGHSA-r683-j2x4-v87gnode-fetch@2.6.12.6.7
MediumGHSA-r9hx-vwmv-q579setuptools@39.2.065.5.1
MediumRHSA-2023:0103expat@2.2.5-10.el80:2.2.5-10.el8_7.1
MediumPYSEC-2025-49setuptools@39.2.078.1.1
MediumGHSA-qq89-hq3f-393ptar@6.1.46.1.9
MediumGHSA-f6fm-r26q-p747strapi@3.6.83.6.9
MediumRHSA-2023:0625libksba@1.3.5-8.el8_60:1.3.5-9.el8_7
MediumGHSA-4phg-hpqm-c3j4strapi@3.6.83.6.10
MediumGHSA-hhq3-ff78-jv3gloader-utils@2.0.02.0.4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.70.0-30-ubi8latest0.70.0-308272003699,968

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/flomesh-console.svg)](https://charts.stackradar.io/charts/openshift/flomesh-console)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.