flomesh-console Helm chart
openshiftScored 14 Sept 2026
A Helm chart to install flomesh-console on Kubernetes
Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub
flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings — 8 critical, 27 high — 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 0.70.0-30 | 418146278 | 7,099 |
| quay.io/ | 0.70.0-46 | 495491 | 2,869 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2023:3837 | systemd | 0:239-74.el8_8.2 |
| Low | RHSA-2024:0155 | gnutls | 0:3.6.16-8.el8_9 |
| Low | GHSA-pw2r-vq6v-hr8c | follow-redirects | 1.14.8 |
| Low | RHSA-2026:61766 | glib2 | 0:2.56.4-177.el8_10 |
| Low | GHSA-f5x3-32g6-xq36 | tar | 6.2.1 |
| Low | GHSA-8cf7-32gw-wr33 | jsonwebtoken | 9.0.0 |
| Low | GHSA-5m6q-g25r-mvwx | node-forge | 1.4.0 |
| Low | GHSA-3vjf-82ff-p4r3 | urijs | 1.19.11 |
| Low | GHSA-6g55-p6wh-862q | postcss | 8.5.12 |
| Low | GHSA-pmwg-cvhr-8vh7 | axios | 0.31.1 |
| Low | RHSA-2023:0842 | tar | 2:1.30-6.el8_7.1 |
| Low | RHSA-2025:18286 | libssh | 0:0.9.6-15.el8_10 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | GHSA-22p9-wv53-3rq4 | linkify-it | 5.0.1 |
| Low | RHSA-2026:36728 | libtasn1 | 0:4.13-6.el8_10 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | RHSA-2024:3268 | krb5 | 0:1.18.2-27.el8_10 |
| Low | RHSA-2026:42090 | glib2 | 0:2.56.4-170.el8_10 |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 4.3.0 |
| Low | GHSA-q6wq-5p59-983w | parse-url | 6.0.1 |
| Low | GHSA-q67f-28xg-22rw | node-forge | 1.4.0 |
| Low | RHSA-2026:3042 | openssl | 1:1.1.1k-15.el8_6 |
| Low | GHSA-jv3g-j58f-9mq9 | jose | 4.9.2 |
| Low | RHSA-2026:15953 | glib2 | 0:2.56.4-169.el8_10 |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | RHSA-2023:4529 | libxml2 | 0:2.9.7-16.el8_8.1 |
| Low | GHSA-g694-m8vq-gv9h | urijs | 1.19.11 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | GHSA-vghf-hv5q-vc2g | validator | 13.15.22 |
| Low | GHSA-x9w5-v3q2-3rhw | browserify-sign | 4.2.2 |
| Low | GHSA-952p-6rrq-rcjv | micromatch | 4.0.8 |
| Low | RHSA-2024:9502 | expat | 0:2.2.5-16.el8_10 |
| Low | RHSA-2026:2389 | brotli | 0:1.0.6-4.el8_10 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GHSA-776f-qx25-q3cc | xml2js | 0.5.0 |
| Low | RHSA-2025:10027 | pam | 0:1.3.1-37.el8_10 |
| Low | RHSA-2025:14557 | pam | 0:1.3.1-38.el8_10 |
| Low | GHSA-fvcv-3m26-pcqx | axios | 0.31.0 |
| Low | RHSA-2025:23383 | curl | 0:7.61.1-34.el8_10.9 |
| Low | RHSA-2024:0119 | libxml2 | 0:2.9.7-18.el8_9 |
| Low | GHSA-jpp7-7chh-cf67 | parse-url | 6.0.1 |
| Low | RHSA-2025:14135 | libarchive | 0:3.3.3-6.el8_10 |
| Low | GHSA-rcmh-qjqh-p98v | nodemailer | 7.0.11 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-ppp5-5v6c-4jwp | node-forge | 1.4.0 |
| Low | GHSA-qpx9-hpmf-5gmw | underscore | 1.13.8 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | RHSA-2026:2128 | python3 | 0:3.6.8-73.el8_10 |
| Low | RHSA-2026:22721 | expat | 0:2.5.0-2.el8_10 |
| Low | RHSA-2025:4051 | gnutls | 0:3.6.16-8.el8_10.3 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.70.0-30-ubi8latest | — | 0.70.0-30 | 827200369 | 9,968 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.