flomesh-console Helm chart
openshiftScored 14 Sept 2026
A Helm chart to install flomesh-console on Kubernetes
Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub
flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings — 8 critical, 27 high — 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 0.70.0-30 | 418146278 | 7,099 |
| quay.io/ | 0.70.0-46 | 495491 | 2,869 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2025:8686 | glibc | 0:2.28-251.el8_10.22 |
| Low | GHSA-8fr3-hfg3-gpgp | node-forge | 1.0.0 |
| Low | GHSA-73wf-gq98-2v4g | browserslist | 4.28.7 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-v245-v573-v5vm | linkify-it | 5.0.2 |
| Low | GHSA-jchw-25xp-jwwc | follow-redirects | 1.15.4 |
| Low | GHSA-pqw5-jmp5-px4v | parse-url | 8.1.0 |
| Low | GHSA-rv95-896h-c2vc | express | 4.19.2 |
| Low | GHSA-qxrj-hx23-xp82 | @koa/ | 5.0.0 |
| Low | GHSA-mm7p-fcc7-pg87 | nodemailer | 7.0.7 |
| Low | RHSA-2024:3203 | systemd | 0:239-82.el8 |
| Low | GHSA-xv26-6w52-cph6 | websocket-driver | 0.7.5 |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 2.3.2 |
| Low | RHSA-2025:12450 | libxml2 | 0:2.9.7-21.el8_10.2 |
| Low | GHSA-mwp4-54f8-5fhr | ip-address | 10.3.1 |
| Low | GHSA-xrjf-phvv-r4vr | strapi | 4.1.0 |
| Low | RHSA-2025:4049 | libtasn1 | 0:4.13-5.el8_10 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | RHSA-2026:57462 | curl | 0:7.61.1-34.el8_10.13 |
| Low | RHSA-2024:10779 | python3 | 0:3.6.8-69.el8_10 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | GHSA-6chq-wfr3-2hj9 | axios | 0.31.1 |
| Low | GHSA-8h2f-7jc4-7m3m | urijs | 1.19.10 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 4.3.2 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-r4q5-vmmm-2653 | follow-redirects | 1.16.0 |
| Low | RHSA-2024:3347 | python3 | 0:3.6.8-62.el8_10 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | RHSA-2024:3233 | libssh | 0:0.9.6-14.el8 |
| Low | RHSA-2026:62218 | libssh | 0:0.9.6-17.el8_10 |
| Low | GHSA-rm97-x556-q36h | sanitize-html | 2.12.1 |
| Low | GHSA-4rq4-32rv-6wp6 | shelljs | 0.8.5 |
| Low | GHSA-wf5p-g6vw-rhxx | axios | 0.28.0 |
| Low | GHSA-c83g-rgw3-j3cx | browserslist | 4.28.7 |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | RHSA-2026:0991 | glib2 | 0:2.56.4-168.el8_10 |
| Low | RHSA-2023:3839 | libssh | 0:0.9.6-10.el8_8 |
| Low | RHSA-2023:0837 | systemd | 0:239-68.el8_7.4 |
| Low | RHSA-2024:0647 | rpm | 0:4.14.3-28.el8_9 |
| Low | GHSA-gxpj-cx7g-858c | debug | 4.3.1 |
| Low | RHSA-2025:2722 | krb5 | 0:1.18.2-31.el8_10 |
| Low | GHSA-2328-f5f3-gj25 | node-forge | 1.4.0 |
| Low | GHSA-7gcc-r8m5-44qm | koa | 2.16.4 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GHSA-qwph-4952-7xr6 | jsonwebtoken | 9.0.0 |
| Low | GHSA-2r2c-g63r-vccr | node-forge | 1.3.0 |
| Low | GHSA-968p-4wvh-cqc8 | @babel/ | 7.26.10 |
| Low | GHSA-968p-4wvh-cqc8 | @babel/ | 7.26.10 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.70.0-30-ubi8latest | — | 0.70.0-30 | 827200369 | 9,968 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.