osm-edge Helm chart

Name: osm-edge Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart to install the osm-edge control plane on Kubernetes

Latest 1.2.1-ubi8deploys tag 1.2.1 0Artifact Hub

osm-edge 1.2.1-ubi8 deploys 7 container images: quay.io/flomesh/osm-edge-bootstrap-ubi8, quay.io/flomesh/curl-ubi8, quay.io/flomesh/pipy-ubi8, quay.io/flomesh/osm-edge-controller-ubi8 and 3 more. Across them, 1,316 findings — 25 critical, 59 high — 23 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

19,4552559271961

1,316 findings over 7 of 7 images measured

KEV ×23 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/flomesh/osm-edge-bootstrap-ubi8	1.2.1	41045197	3,515
quay.io/flomesh/curl-ubi8×2	7.84.0	141646	1,069
quay.io/flomesh/pipy-ubi8	0.70.0-46	495491	2,869
quay.io/flomesh/osm-edge-controller-ubi8	1.2.1	41045197	3,515
quay.io/flomesh/osm-edge-injector-ubi8	1.2.1	41045197	3,515
quay.io/flomesh/osm-edge-crds-ubi8	1.2.1	473061	1,930
quay.io/flomesh/osm-edge-preinstall-ubi8	1.2.1	4936172	3,042

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

312 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2024:2722	glibc@2.28-211.el8	0:2.28-236.el8_9.13
Critical	RHSA-2023:5455KEV	glibc@2.28-211.el8	0:2.28-225.el8_8.6
Critical	RHSA-2023:5837KEV	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-5.el8_8
Critical	RHSA-2025:12010	sqlite@3.26.0-17.el8_7	0:3.26.0-20.el8_10
High	RHSA-2023:1405	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-9.el8_7
High	RHSA-2025:1301KEV	gcc@8.5.0-16.el8_7	0:8.5.0-23.el8_10
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.5.0	0.17.0
High	RHSA-2024:0628	libssh@0.9.6-3.el8	0:0.9.6-13.el8_9
High	RHSA-2024:5654	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.5.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.5.0	0.23.0
High	RHSA-2024:4252	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.1
High	RHSA-2024:8860	krb5@1.18.2-22.el8_7	0:1.18.2-30.el8_10
High	RHSA-2023:0173	libxml2@2.9.7-15.el8	0:2.9.7-15.el8_7.1
High	RHSA-2023:3591	python3@3.6.8-48.el8_7	0:3.6.8-51.el8_8.1
High	RHSA-2025:21776	expat@2.2.5-10.el8	0:2.5.0-1.el8_10
Medium	GO-2024-2687	stdlib@go1.18.4	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.5.0	0.52.0
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	RHSA-2023:7151	python3@3.6.8-48.el8_7	0:3.6.8-56.el8_9
Medium	RHSA-2023:7176	python-pip@9.0.3-22.el8	0:9.0.3-23.el8
Medium	RHSA-2023:0110	sqlite@3.26.0-16.el8_6	0:3.26.0-17.el8_7
Medium	RHEA-2023:3850	krb5@1.18.2-22.el8_7	0:1.18.2-25.el8_8
Medium	RHSA-2023:0833	python3@3.6.8-48.el8_7	0:3.6.8-48.el8_7.1
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.5.0	0.31.0
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.5.0	0.7.0
Medium	RHSA-2026:26275	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-16.el8_6
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.5.0	0.17.0
Medium	RHSA-2023:7877	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-12.el8_9
Medium	GHSA-cx63-2mw6-8hw5	setuptools@39.2.0	70.0.0
Medium	RHSA-2024:5530	python-setuptools@39.2.0-6.el8	0:39.2.0-8.el8_10
Medium	GHSA-gpvv-69j7-gwj8	pip@9.0.3	19.2
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.49.0	1.79.3
Medium	RHSA-2024:7848	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_6
Medium	RHSA-2025:10698	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.1
Medium	GHSA-r9hx-vwmv-q579	setuptools@39.2.0	65.5.1
Medium	RHSA-2023:0103	expat@2.2.5-10.el8	0:2.2.5-10.el8_7.1
Medium	PYSEC-2025-49	setuptools@39.2.0	78.1.1
Medium	RHSA-2023:0625	libksba@1.3.5-8.el8_6	0:1.3.5-9.el8_7
Medium	RHSA-2024:6975	python3@3.6.8-48.el8_7	0:3.6.8-67.el8_10
Medium	RHSA-2024:1601	curl@7.61.1-25.el8_7.1	0:7.61.1-33.el8_9.5
Medium	RHSA-2024:3214	gmp@1:6.1.2-10.el8	1:6.1.2-11.el8
Medium	RHSA-2024:5312	krb5@1.18.2-22.el8_7	0:1.18.2-29.el8_10
Medium	RHSA-2024:1615	expat@2.2.5-10.el8	0:2.2.5-11.el8_9.1
Medium	RHSA-2024:0114	python3@3.6.8-48.el8_7	0:3.6.8-56.el8_9.2
Medium	RHSA-2026:20611	gnutls@3.6.16-5.el8_6	0:3.6.16-8.el8_10.6
Medium	RHSA-2024:6989	expat@2.2.5-10.el8	0:2.2.5-15.el8_10
Medium	RHSA-2024:4264	openldap@2.4.46-18.el8	0:2.4.46-19.el8_10
Medium	RHSA-2024:0627	gnutls@3.6.16-5.el8_6	0:3.6.16-8.el8_9.1
Medium	RHSA-2024:8922	bzip2@1.0.6-26.el8	0:1.0.6-27.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.1-ubi8latest	—	1.2.1	2559271961	19,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/osm-edge.svg)](https://charts.stackradar.io/charts/openshift/osm-edge)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.