fsm Helm chart

Name: fsm Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart to install the FSM(Flomesh Service Mesh) on Kubernetes

Latest 0.1.8-ubi.6app version 0.1.8-ubi.6 0Artifact Hub

fsm 0.1.8-ubi.6 deploys 6 container images: quay.io/flomesh/toolbox-ubi8, quay.io/flomesh/fsm-bootstrap-ubi8, quay.io/flomesh/curl-ubi8, quay.io/flomesh/fsm-ingress-pipy-ubi8 and 2 more. Across them, 1,125 findings — 18 critical, 48 high — 17 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

16,5561848253806

1,125 findings over 6 of 6 images measured

KEV ×17 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/flomesh/toolbox-ubi8×2	1.2.0	141647	1,078
quay.io/flomesh/fsm-bootstrap-ubi8	0.1.8-ubi.6	41053191	3,650
quay.io/flomesh/curl-ubi8	7.84.0	141646	1,069
quay.io/flomesh/fsm-ingress-pipy-ubi8	0.1.8-ubi.6	41053191	3,650
quay.io/flomesh/fsm-manager-ubi8	0.1.8-ubi.6	41161240	4,240
quay.io/flomesh/pipy-ubi8	0.50.0-88	495491	2,869

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

371 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2023-1702	stdlib@go1.17.12	1.19.8
Low	RHSA-2026:65998	gzip@1.9-13.el8_5	0:1.9-15.el8_10
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
Low	RHSA-2026:66451	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v20.10.2+incompatible	24.0.9
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0
Low	RHSA-2026:58938	sqlite@3.26.0-16.el8_6	0:3.26.0-21.el8_10
Low	GHSA-hmfx-3pcx-653p	github.com/containerd/containerd@v1.5.13	1.5.18
Low	PYSEC-2026-3721	pip@9.0.3	26.2
Low	GO-2023-2375	stdlib@go1.17.12	1.20.0
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0
Low	GO-2023-1569	stdlib@go1.17.12	1.19.6
Low	GHSA-mq26-g339-26xf	pip@9.0.3	23.3
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.38.0	1.83.1
Low	GO-2023-2382	stdlib@go1.17.12	1.20.12
Low	RHSA-2023:3840	sqlite@3.26.0-16.el8_6	0:3.26.0-18.el8_8
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	GO-2022-1143	stdlib@go1.17.12	1.18.9
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Low	RHSA-2024:3163	pam@1.3.1-22.el8	0:1.3.1-33.el8
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Low	GO-2024-2599	stdlib@go1.17.12	1.21.8
Low	GO-2022-1038	stdlib@go1.17.12	1.18.7
Low	GO-2024-3106	stdlib@go1.17.12	1.22.7
Low	GO-2023-1570	stdlib@go1.17.12	1.19.6
Low	RHSA-2025:8411	krb5@1.18.2-22.el8_7	0:1.18.2-32.el8_10
Low	RHSA-2026:0728	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10
Low	RHSA-2023:0100	systemd@239-68.el8	0:239-68.el8_7.1
Low	GO-2024-2600	stdlib@go1.17.12	1.21.8
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.38.0	1.82.1
Low	GO-2024-2609	stdlib@go1.17.12	1.21.8
Low	GO-2024-3107	stdlib@go1.17.12	1.22.7
Low	GO-2023-1751	stdlib@go1.17.12	1.19.9
Low	GO-2023-1753	stdlib@go1.17.12	1.19.9
Low	RHSA-2025:8958	libxml2@2.9.7-15.el8	0:2.9.7-20.el8_10
Low	RHSA-2026:33126	glibc@2.28-211.el8	0:2.28-251.el8_10.38
Low	RHSA-2026:13285	libcap@2.48-4.el8	0:2.48-6.el8_10.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Low	GHSA-pwhc-rpq9-4c8w	github.com/containerd/containerd@v1.5.13	1.7.29
Low	GHSA-pwcw-6f5g-gxf8	helm.sh/helm/v3@v3.7.1	3.11.1
Low	GHSA-259w-8hf6-59c2	github.com/containerd/containerd@v1.5.13	1.5.18
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v20.10.2+incompatible	no fix listed
Low	GO-2023-2041	stdlib@go1.17.12	1.20.8
Low	RHSA-2026:64809	expat@2.2.5-10.el8	0:2.5.0-2.el8_10.2
Low	RHSA-2025:3828	glibc@2.28-211.el8	0:2.28-251.el8_10.16
Low	GO-2023-2043	stdlib@go1.17.12	1.20.8
Low	GO-2023-2186	stdlib@go1.17.12	1.20.11
Low	RHSA-2026:20587	glibc@2.28-211.el8	0:2.28-251.el8_10.37
Low	GO-2024-3333	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.8-ubi.6latest	—	0.1.8-ubi.6	1848253806	16,556

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/fsm.svg)](https://charts.stackradar.io/charts/openshift/fsm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.