osm-edge Helm chart

Name: osm-edge Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart to install the osm-edge control plane on Kubernetes

Latest 1.2.1-ubi8deploys tag 1.2.1 0Artifact Hub

osm-edge 1.2.1-ubi8 deploys 7 container images: quay.io/flomesh/osm-edge-bootstrap-ubi8, quay.io/flomesh/curl-ubi8, quay.io/flomesh/pipy-ubi8, quay.io/flomesh/osm-edge-controller-ubi8 and 3 more. Across them, 1,316 findings — 25 critical, 59 high — 23 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13. Chart.yaml declares kubeVersion >= 1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

19,4552559271961

1,316 findings over 7 of 7 images measured

KEV ×23 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/flomesh/osm-edge-bootstrap-ubi8	1.2.1	41045197	3,515
quay.io/flomesh/curl-ubi8×2	7.84.0	141646	1,069
quay.io/flomesh/pipy-ubi8	0.70.0-46	495491	2,869
quay.io/flomesh/osm-edge-controller-ubi8	1.2.1	41045197	3,515
quay.io/flomesh/osm-edge-injector-ubi8	1.2.1	41045197	3,515
quay.io/flomesh/osm-edge-crds-ubi8	1.2.1	473061	1,930
quay.io/flomesh/osm-edge-preinstall-ubi8	1.2.1	4936172	3,042

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

312 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RHSA-2025:10128	python3@3.6.8-48.el8_7	0:3.6.8-70.el8_10
Medium	RHSA-2025:2686	libxml2@2.9.7-15.el8	0:2.9.7-19.el8_10
Medium	RHSA-2024:3626	libxml2@2.9.7-15.el8	0:2.9.7-18.el8_10.1
Medium	RHSA-2024:3344	glibc@2.28-211.el8	0:2.28-251.el8_10.2
Medium	RHSA-2023:1569	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7
Medium	RHSA-2025:3913	expat@2.2.5-10.el8	0:2.2.5-17.el8_10
Medium	RHSA-2025:11036	python-setuptools@39.2.0-6.el8	0:39.2.0-9.el8_10
Medium	RHSA-2023:0835	python-setuptools@39.2.0-6.el8	0:39.2.0-6.el8_7.1
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.28.1	1.33.0
Medium	RHSA-2026:8534	libarchive@3.3.3-4.el8	0:3.3.3-7.el8_10
Medium	RHSA-2023:2963	curl@7.61.1-25.el8_7.1	0:7.61.1-30.el8
Medium	RHSA-2023:5997	python3@3.6.8-48.el8_7	0:3.6.8-51.el8_8.2
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.5.0	0.52.0
Medium	RHSA-2026:5588	python3@3.6.8-48.el8_7	0:3.6.8-74.el8_10
Medium	RHSA-2024:0253	sqlite@3.26.0-17.el8_7	0:3.26.0-19.el8_9
Medium	RHSA-2023:3018	libarchive@3.3.3-4.el8	0:3.3.3-5.el8
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.5.0	0.52.0
Medium	RHSA-2023:1140	curl@7.61.1-25.el8_7.1	0:7.61.1-25.el8_7.3
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.5.0	0.52.0
Medium	RHSA-2023:0116	libtasn1@4.13-3.el8	0:4.13-4.el8_7
Medium	RHSA-2023:5249	ncurses@6.1-9.20180224.el8	0:6.1-9.20180224.el8_8.1
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	RHSA-2025:11327	glib2@2.56.4-159.el8	0:2.56.4-166.el8_10
Medium	RHBA-2024:5736	ca-certificates@2022.2.54-80.2.el8_6	0:2024.2.69_v8.0.303-80.0.el8_10
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.5.0	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.5.0	0.35.0
Medium	RHSA-2023:0096	dbus@1:1.12.8-23.el8	1:1.12.8-23.el8_7.1
Medium	RHSA-2026:26354	libxml2@2.9.7-15.el8	0:2.9.7-21.el8_10.5
Medium	RHSA-2024:0256	python3@3.6.8-48.el8_7	0:3.6.8-56.el8_9.3
Medium	RHSA-2023:4523	curl@7.61.1-25.el8_7.1	0:7.61.1-30.el8_8.3
Medium	GO-2022-1144	stdlib@go1.18.4	1.18.9
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.4.0	0.27.0
Medium	RHSA-2025:17415	gnutls@3.6.16-5.el8_6	0:3.6.16-8.el8_10.4
Medium	RHSA-2026:38503	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6
Medium	GHSA-5xp3-jfq3-5q8x	pip@9.0.3	21.1
Low	RHSA-2026:1631	python3@3.6.8-48.el8_7	0:3.6.8-72.el8_10
Low	RHSA-2023:4498	dbus@1:1.12.8-23.el8	1:1.12.8-24.el8_8.1
Low	RHSA-2023:3106	curl@7.61.1-25.el8_7.1	0:7.61.1-30.el8_8.2
Low	RHSA-2026:7667	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.2
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.5.0	0.52.0
Low	RHSA-2024:10379	pam@1.3.1-22.el8	0:1.3.1-36.el8_10
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.5.0	0.52.0
Low	RHSA-2026:11077	python3@3.6.8-48.el8_7	0:3.6.8-76.el8_10
Low	GO-2023-1571	stdlib@go1.18.4	1.19.6
Low	RHSA-2026:56219	python3@3.6.8-48.el8_7	0:3.6.8-78.el8_10
Low	RHSA-2023:4524	libcap@2.48-4.el8	0:2.48-5.el8_8
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.49.0	1.83.1
Low	RHSA-2026:0337	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_10
Low	RHSA-2025:14560	python3@3.6.8-48.el8_7	0:3.6.8-71.el8_10
Low	RHSA-2026:39320	python3@3.6.8-48.el8_7	0:3.6.8-77.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.1-ubi8latest	—	1.2.1	2559271961	19,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/osm-edge.svg)](https://charts.stackradar.io/charts/openshift/osm-edge)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.