flomesh-console Helm chart
openshiftScored 14 Sept 2026
A Helm chart to install flomesh-console on Kubernetes
Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub
flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings — 8 critical, 27 high — 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 0.70.0-30 | 418146278 | 7,099 |
| quay.io/ | 0.70.0-46 | 495491 | 2,869 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-pfq8-rq6v-vf5m | html-minifier | no fix listed |
| Medium | RHSA-2024:0253 | sqlite | 0:3.26.0-19.el8_9 |
| Medium | RHSA-2023:3018 | libarchive | 0:3.3.3-5.el8 |
| Medium | GHSA-5gfm-wpxj-wjgq | node-forge | 1.3.2 |
| Medium | RHSA-2023:1140 | curl | 0:7.61.1-25.el8_7.3 |
| Medium | GHSA-x4jg-mjrx-434g | node-forge | 1.3.0 |
| Medium | RHSA-2023:0116 | libtasn1 | 0:4.13-4.el8_7 |
| Medium | GHSA-4gxf-g5gf-22h4 | dottie | 2.0.4 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-f23m-r3pf-42rh | lodash-es | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash-es | 4.17.23 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GHSA-4jv9-3563-23j3 | knex | 2.4.0 |
| Medium | RHSA-2023:5249 | ncurses | 0:6.1-9.20180224.el8_8.1 |
| Medium | GHSA-xvcm-6775-5m9r | immutable | 3.8.4 |
| Medium | GHSA-c7qv-q95q-8v27 | http-proxy-middleware | 2.0.7 |
| Medium | GHSA-gcv8-gh4r-25x6 | urijs | 1.19.8 |
| Medium | RHSA-2025:11327 | glib2 | 0:2.56.4-166.el8_10 |
| Medium | RHBA-2024:5736 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 |
| Medium | GHSA-8v38-pw62-9cw2 | url-parse | 1.5.7 |
| Medium | GHSA-67hx-6x53-jw92 | @babel/ | 7.23.2 |
| Medium | GHSA-vgj7-895j-gpr6 | strapi | 3.6.9 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 1.9.0 |
| Medium | GHSA-qjx8-664m-686j | js-cookie | 3.0.7 |
| Medium | RHSA-2023:0096 | dbus | 1:1.12.8-23.el8_7.1 |
| Medium | RHSA-2026:26354 | libxml2 | 0:2.9.7-21.el8_10.5 |
| Medium | GHSA-cpq7-6gpm-g9rc | cipher-base | 1.0.5 |
| Medium | GHSA-8cj5-5rvv-wf4v | tar-fs | 2.1.3 |
| Medium | RHSA-2024:0256 | python3 | 0:3.6.8-56.el8_9.3 |
| Medium | RHSA-2023:4523 | curl | 0:7.61.1-30.el8_8.3 |
| Medium | GHSA-v8fg-2rw7-q452 | sequelize | 6.37.4 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 0.32.0 |
| Medium | GHSA-pvrw-g6fx-mcx2 | is_js | no fix listed |
| Medium | GHSA-vj76-c3g6-qr5v | tar-fs | 2.1.4 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | RHSA-2025:17415 | gnutls | 0:3.6.16-8.el8_10.4 |
| Medium | GHSA-hwqf-gcqm-7353 | nodemailer | 6.6.1 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-3j8f-xvm3-ffx4 | parse-path | 5.0.0 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 6.2.4 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Medium | RHSA-2026:38503 | openssl | 1:1.1.1k-17.el8_6 |
| Medium | GHSA-pf86-5x62-jrwf | axios | 0.31.1 |
| Medium | GHSA-5xp3-jfq3-5q8x | pip | 21.1 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.70.0-30-ubi8latest | — | 0.70.0-30 | 827200369 | 9,968 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.