fsm Helm chart

Name: fsm Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart to install the FSM(Flomesh Service Mesh) on Kubernetes

Latest 0.1.8-ubi.6app version 0.1.8-ubi.6 0Artifact Hub

fsm 0.1.8-ubi.6 deploys 6 container images: quay.io/flomesh/toolbox-ubi8, quay.io/flomesh/fsm-bootstrap-ubi8, quay.io/flomesh/curl-ubi8, quay.io/flomesh/fsm-ingress-pipy-ubi8 and 2 more. Across them, 1,125 findings — 18 critical, 48 high — 17 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

16,5561848253806

1,125 findings over 6 of 6 images measured

KEV ×17 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/flomesh/toolbox-ubi8×2	1.2.0	141647	1,078
quay.io/flomesh/fsm-bootstrap-ubi8	0.1.8-ubi.6	41053191	3,650
quay.io/flomesh/curl-ubi8	7.84.0	141646	1,069
quay.io/flomesh/fsm-ingress-pipy-ubi8	0.1.8-ubi.6	41053191	3,650
quay.io/flomesh/fsm-manager-ubi8	0.1.8-ubi.6	41161240	4,240
quay.io/flomesh/pipy-ubi8	0.50.0-88	495491	2,869

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

371 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2024:2722	glibc@2.28-211.el8	0:2.28-236.el8_9.13
Critical	RHSA-2023:5455KEV	glibc@2.28-211.el8	0:2.28-225.el8_8.6
Critical	RHSA-2023:5837KEV	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-5.el8_8
Critical	RHSA-2025:12010	sqlite@3.26.0-16.el8_6	0:3.26.0-20.el8_10
High	RHSA-2023:1405	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-9.el8_7
High	RHSA-2025:1301KEV	gcc@8.5.0-15.el8	0:8.5.0-23.el8_10
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20231218163308-9d2ee975ef9f
High	RHSA-2024:0628	libssh@0.9.6-3.el8	0:0.9.6-13.el8_9
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v20.10.2+incompatible	23.0.15
High	RHSA-2024:5654	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.23.0
High	RHSA-2024:4252	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.1
High	RHSA-2024:8860	krb5@1.18.2-22.el8_7	0:1.18.2-30.el8_10
High	RHSA-2023:0173	libxml2@2.9.7-15.el8	0:2.9.7-15.el8_7.1
High	RHSA-2023:3591	python3@3.6.8-48.el8_7	0:3.6.8-51.el8_8.1
High	RHSA-2025:21776	expat@2.2.5-10.el8	0:2.5.0-1.el8_10
Medium	GO-2024-2687	stdlib@go1.17.12	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	RHSA-2023:7151	python3@3.6.8-48.el8_7	0:3.6.8-56.el8_9
Medium	RHSA-2023:7176	python-pip@9.0.3-22.el8	0:9.0.3-23.el8
Medium	RHSA-2023:0110	sqlite@3.26.0-16.el8_6	0:3.26.0-17.el8_7
Medium	RHEA-2023:3850	krb5@1.18.2-22.el8_7	0:1.18.2-25.el8_8
Medium	RHSA-2023:0833	python3@3.6.8-48.el8_7	0:3.6.8-48.el8_7.1
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.11.0	1.11.1
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.31.0
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.7.0
Medium	RHSA-2026:26275	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-16.el8_6
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b	3.0.1
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.0.0-20220906165146-f3363e06e74c
Medium	RHSA-2023:7877	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-12.el8_9
Medium	GHSA-cx63-2mw6-8hw5	setuptools@39.2.0	70.0.0
Medium	RHSA-2024:5530	python-setuptools@39.2.0-6.el8	0:39.2.0-8.el8_10
Medium	GHSA-gpvv-69j7-gwj8	pip@9.0.3	19.2
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.38.0	1.79.3
Medium	RHSA-2024:7848	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_6
Medium	RHSA-2025:10698	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.1
Medium	GHSA-r9hx-vwmv-q579	setuptools@39.2.0	65.5.1
Medium	GHSA-232p-vwff-86mp	github.com/docker/docker@v20.10.2+incompatible	20.10.24
Medium	RHSA-2023:0103	expat@2.2.5-10.el8	0:2.2.5-10.el8_7.1
Medium	PYSEC-2025-49	setuptools@39.2.0	78.1.1
Medium	RHSA-2023:0625	libksba@1.3.5-8.el8_6	0:1.3.5-9.el8_7
Medium	RHSA-2024:6975	python3@3.6.8-48.el8_7	0:3.6.8-67.el8_10
Medium	RHSA-2024:1601	curl@7.61.1-25.el8	0:7.61.1-33.el8_9.5
Medium	RHSA-2024:3214	gmp@1:6.1.2-10.el8	1:6.1.2-11.el8
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.4.0
Medium	RHSA-2024:5312	krb5@1.18.2-22.el8_7	0:1.18.2-29.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.8-ubi.6latest	—	0.1.8-ubi.6	1848253806	16,556

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/fsm.svg)](https://charts.stackradar.io/charts/openshift/fsm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.