StackRadar

flomesh-console Helm chart

openshift

Scored 14 Sept 2026

A Helm chart to install flomesh-console on Kubernetes

Latest 0.70.0-30-ubi8deploys tag 0.70.0-30 0Artifact Hub

flomesh-console 0.70.0-30-ubi8 deploys 2 container images: quay.io/flomesh/flomesh-console-ubi8 and quay.io/flomesh/pipy-repo-ubi8. Across them, 604 findings8 critical, 27 high 6 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.

Radar Score

9,968827200369

604 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/flomesh/flomesh-console-ubi80.70.0-304181462787,099
quay.io/flomesh/pipy-repo-ubi80.70.0-464954912,869

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

448 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-qrpm-p2h7-hrv2nanoid@3.1.283.1.31
LowGHSA-vjh7-7g9h-fjfhelliptic@6.5.46.6.1
LowRHSA-2025:8411krb5@1.18.2-22.el8_70:1.18.2-32.el8_10
LowGHSA-rgj7-g3m4-5g8csharp@0.28.10.35.4
LowRHSA-2026:0728gnupg2@2.2.20-3.el8_60:2.2.20-4.el8_10
LowGHSA-v2v4-37r5-5v8gip-address@6.4.010.1.1
LowRHSA-2023:0100systemd@239-68.el80:239-68.el8_7.1
LowGHSA-378v-28hj-76wfbn.js@4.12.04.12.3
LowGHSA-fv7c-fp4j-7gwp@babel/plugin-transform-modules-systemjs@7.15.47.29.4
LowRHSA-2025:8419python36@3.6.8-38.module+el8.5.0+12207+5c5719bc0:3.6.8-39.module+el8.10.0+20784+edafcd43
LowGHSA-977x-g7h5-7qgwelliptic@6.5.46.5.7
LowGHSA-q2pj-6v73-8rgjtypeorm@0.2.390.3.26
LowGHSA-28wg-ghj8-5hjvnanoid@3.1.283.3.16
LowGHSA-m6fv-jmcg-4jfgsend@0.17.10.19.0
LowGHSA-w9j2-pvgh-6h63axios@0.26.10.31.1
LowGHSA-mp7j-qc5w-4988websocket-driver@0.7.40.7.5
LowGHSA-jxwj-j7wr-gfrwsanitize-html@2.3.32.17.6
LowGHSA-2v37-7h3g-55p8nanoid@3.1.283.3.18
LowRHSA-2025:8958libxml2@2.9.7-15.el80:2.9.7-20.el8_10
LowRHSA-2026:33126glibc@2.28-211.el80:2.28-251.el8_10.38
LowRHSA-2026:13285libcap@2.48-4.el80:2.48-6.el8_10.1
LowGHSA-fc9h-whq2-v747elliptic@6.5.46.6.0
LowGHSA-3v7f-55p6-f55ppicomatch@2.3.02.3.2
LowGHSA-qw6h-vgh9-j6wxexpress@4.17.14.20.0
LowGHSA-mh29-5h37-fv8mjs-yaml@4.1.04.1.1
LowGHSA-7q8q-rj6j-mhjqaxios@0.26.10.33.0
LowRHSA-2026:64809expat@2.2.5-10.el80:2.5.0-2.el8_10.2
LowRHSA-2025:3828glibc@2.28-211.el80:2.28-251.el8_10.16
LowGHSA-h67p-54hq-rp68js-yaml@4.1.04.2.0
LowRHSA-2026:20587glibc@2.28-211.el80:2.28-251.el8_10.37
LowGHSA-6v5v-wf23-fmfqmarkdown-it@12.2.014.2.0
LowRHSA-2026:43420acl@2.2.53-1.el80:2.4.0-1.el8_10
LowRHSA-2025:1517libxml2@2.9.7-15.el80:2.9.7-18.el8_10.2
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowGHSA-f5vj-f2hx-8m93webpack-dev-server@3.11.25.2.6
LowRHSA-2025:21977libssh@0.9.6-3.el80:0.9.6-16.el8_10
LowGHSA-mwcw-c2x4-8c55nanoid@3.1.283.3.8
LowGHSA-5c6j-r48x-rmvqserialize-javascript@4.0.07.0.3
LowGHSA-vmf3-w455-68vhtar@4.4.197.5.16
LowGHSA-5c9x-8gcm-mpgxaxios@0.26.10.31.1
LowGHSA-vf2m-468p-8v99axios@0.26.10.31.1
LowGHSA-54xq-cgqr-rpm3sharp@0.28.10.32.6
LowGHSA-qx2v-qp2m-jg93postcss@7.0.388.5.10
LowGHSA-9h6g-pr28-7cqpnodemailer@6.5.06.9.9
LowGHSA-f7q4-pwc6-w24pelliptic@6.5.46.5.7
LowGHSA-q6x5-8v7m-xcrf@protobufjs/utf8@1.1.01.1.1
LowRHSA-2026:1852util-linux@2.32.1-38.el80:2.32.1-48.el8_10
LowGHSA-79cf-xcqc-c78wwebpack-dev-server@3.11.25.2.4
LowGHSA-2rp8-mm9q-fp49typeorm@0.2.390.3.31
LowGHSA-2x7j-588g-ccc2nodemailer@6.5.09.1.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.70.0-30-ubi8latest0.70.0-308272003699,968

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/flomesh-console.svg)](https://charts.stackradar.io/charts/openshift/flomesh-console)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.