flomesh-console Helm chart
openshiftScored 14 Sept 2026
A Helm chart to install flomesh-console on Kubernetes
Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub
flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings — 8 critical, 27 high — 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 0.70.0-30 | 418146278 | 7,099 |
| quay.io/ | 0.70.0-46 | 495491 | 2,869 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | RHSA-2025:2686 | libxml2 | 0:2.9.7-19.el8_10 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | GHSA-jf5r-8hm2-f872 | url-parse | 1.5.9 |
| Medium | GHSA-cgfm-xwp7-2cvr | sanitize-html | 2.7.1 |
| Medium | GHSA-x9vf-53q3-cvx6 | @casl/ | 6.7.5 |
| Medium | RHSA-2024:3626 | libxml2 | 0:2.9.7-18.el8_10.1 |
| Medium | RHSA-2024:3344 | glibc | 0:2.28-251.el8_10.2 |
| Medium | RHSA-2023:1569 | gnutls | 0:3.6.16-6.el8_7 |
| Medium | GHSA-3h5v-q93c-6h6q | ws | 6.2.3 |
| Medium | GHSA-pjwm-pj3p-43mv | axios | 0.32.0 |
| Medium | RHSA-2025:3913 | expat | 0:2.2.5-17.el8_10 |
| Medium | GHSA-c429-5p7v-vgjp | hoek | no fix listed |
| Medium | RHSA-2025:11036 | python-setuptools | 0:39.2.0-9.el8_10 |
| Medium | RHSA-2023:0835 | python-setuptools | 0:39.2.0-6.el8_7.1 |
| Medium | RHSA-2026:8534 | libarchive | 0:3.3.3-7.el8_10 |
| Medium | RHSA-2023:2963 | curl | 0:7.61.1-30.el8 |
| Medium | GHSA-jr5f-v2jv-69x6 | axios | 0.30.0 |
| Medium | GHSA-95m3-7q98-8xr5 | sha.js | 2.4.12 |
| Medium | RHSA-2023:5997 | python3 | 0:3.6.8-51.el8_8.2 |
| Medium | GHSA-wr3j-pwj9-hqq6 | webpack-dev-middleware | 5.3.4 |
| Medium | GHSA-4p35-cfcx-8653 | parse-url | 6.0.1 |
| Medium | RHSA-2026:5588 | python3 | 0:3.6.8-74.el8_10 |
| Medium | GHSA-pfq8-rq6v-vf5m | html-minifier | no fix listed |
| Medium | RHSA-2024:0253 | sqlite | 0:3.26.0-19.el8_9 |
| Medium | RHSA-2023:3018 | libarchive | 0:3.3.3-5.el8 |
| Medium | GHSA-5gfm-wpxj-wjgq | node-forge | 1.3.2 |
| Medium | RHSA-2023:1140 | curl | 0:7.61.1-25.el8_7.3 |
| Medium | GHSA-x4jg-mjrx-434g | node-forge | 1.3.0 |
| Medium | RHSA-2023:0116 | libtasn1 | 0:4.13-4.el8_7 |
| Medium | GHSA-4gxf-g5gf-22h4 | dottie | 2.0.4 |
| Medium | GHSA-f23m-r3pf-42rh | lodash-es | 4.18.0 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash-es | 4.17.23 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GHSA-4jv9-3563-23j3 | knex | 2.4.0 |
| Medium | RHSA-2023:5249 | ncurses | 0:6.1-9.20180224.el8_8.1 |
| Medium | GHSA-xvcm-6775-5m9r | immutable | 3.8.4 |
| Medium | GHSA-c7qv-q95q-8v27 | http-proxy-middleware | 2.0.7 |
| Medium | GHSA-gcv8-gh4r-25x6 | urijs | 1.19.8 |
| Medium | RHSA-2025:11327 | glib2 | 0:2.56.4-166.el8_10 |
| Medium | RHBA-2024:5736 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 |
| Medium | GHSA-8v38-pw62-9cw2 | url-parse | 1.5.7 |
| Medium | GHSA-67hx-6x53-jw92 | @babel/ | 7.23.2 |
| Medium | GHSA-vgj7-895j-gpr6 | strapi | 3.6.9 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 1.9.0 |
| Medium | GHSA-qjx8-664m-686j | js-cookie | 3.0.7 |
| Medium | RHSA-2023:0096 | dbus | 1:1.12.8-23.el8_7.1 |
| Medium | RHSA-2026:26354 | libxml2 | 0:2.9.7-21.el8_10.5 |
| Medium | GHSA-cpq7-6gpm-g9rc | cipher-base | 1.0.5 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.70.0-30-ubi8latest | — | 0.70.0-30 | 827200369 | 9,968 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.