oes Helm chart

Name: oes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opsmx

Scored 15 Sept 2026

ISD and Spinnaker with cve v1.33.3 SAML2 Configuration

Latest 4.0.32 1 month agodeploys tag RELEASE.2020-12-03T05-49-24Z 2Artifact Hub

oes 4.0.32 deploys 25 container images: minio/minio, quay.io/opsmxpublic/busybox, osixia/openldap, quay.io/opsmxpublic/pgchecker and 19 more. Across the 24 measured, 6,212 findings — 57 critical, 404 high — 23 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.16, fixed in 10.1.35.

Radar Score

107,899574042,0693,678

6,212 findings over 24 of 25 images measured

KEV ×23 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

25 images

Image	Tag	Vulnerabilities	Radar Score
minio/minio	RELEASE.2020-12-03T05-49-24Z	1966204	3,887
quay.io/opsmxpublic/busybox	1.28	0000	0
osixia/openldap	1.2.4	003550	1,360
quay.io/opsmxpublic/pgchecker×4	v1	0000	0
quay.io/opsmxpublic/ubi8-oes-audit-client	isd-spin-2025.10.01-cb1bfce-202511261037	445155130	7,629
quay.io/opsmxpublic/ubi8-oes-autopilot	isd-spin-2025.10.01-af26a30d4-202511261054	445168176	8,335
quay.io/opsmxpublic/ubi8-oes-datascience	isd-spin-2025.10.01-af26a30d4-202511261054	0162268	3,806
quay.io/opsmxpublic/ubi8-gate×2	isd-spin-2025.10.01-5c720954-202511260810	448178173	8,691
quay.io/opsmxpublic/ubi8-oes-platform	isd-spin-2025.10.01-a7c191ec-202511261122	445167164	8,173
quay.io/opsmxpublic/rabbitmq	4.2-management	0126248	2,505
quay.io/opsmxpublic/ubi8-oes-ui	isd-spin-2025.10.01-e6f6f01-202512100640	03812261	5,575
quay.io/opsmxpublic/opa	1.12.0	00678	738
quay.io/opsmxpublic/opa	opa-sidecar-v1.0	011897	1,169
quay.io/opsmxpublic/forwarder-controller	v3.5.7	2738147	2,558
quay.io/opsmxpublic/bitnami-redis	5.0.7-debian-10-r0	022948	1,366
quay.io/opsmxpublic/awsgit	v3-js	41257149	3,539
quay.io/opsmxpublic/k8s-decoder	hal	19299	1,345
quay.io/opsmxpublic/bitnami-kubectl	1.18.5	012542	1,150
quay.io/opsmxpublic/ubi8-halyard-cve×4	1.65.0-c25674a2-202511260857	—	not yet scanned
quay.io/opsmxpublic/ubi8-oes-db	v3.0.0	662248296	13,018
quay.io/opsmxpublic/spin-sample-pipeline	v1.0.1	1637434830	20,623
quay.io/opsmxpublic/create-secret	v4.0.4	41141152	3,103
minio/mc	RELEASE.2020-11-25T23-04-07Z	11056191	3,627
quay.io/opsmxpublic/awsgit	v2-openssh	51372159	4,152
quay.io/opsmxpublic/oes-pre-configure	v2	17376	1,550

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

982 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	RHSA-2023:7042	python-idna@2.5-5.el8	0:2.5-7.module+el8.9.0+19487+7dc18407
Medium	UBUNTU-CVE-2026-1519	bind9@1:9.10.3.dfsg.P4-8ubuntu1.18	no fix listed
Medium	DLA-2431-1	libonig@6.1.3-2	6.1.3-2+deb9u1
Medium	ALPINE-CVE-2023-5678	openssl@1.1.1q-r0	1.1.1w-r1
Medium	UBUNTU-CVE-2023-5678	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm11
Medium	UBUNTU-CVE-2022-1304	e2fsprogs@1.42.13-1ubuntu1	1.42.13-1ubuntu1.2+esm1
Medium	DLA-2340-1	sqlite3@3.16.2-5+deb9u1	3.16.2-5+deb9u2
Medium	RHSA-2022:7108	sqlite@3.26.0-13.el8	0:3.26.0-16.el8_6
Medium	RHSA-2024:3466	python-requests@2.20.0-2.1.el8_1	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:3466	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:3466	python-urllib3@1.24.2-5.el8	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2024:3466	python-idna@2.5-5.el8	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	RHSA-2024:3466	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	DSA-4944-1	krb5@1.17-3	1.17-3+deb10u2
Medium	ALPINE-CVE-2025-9230	openssl@3.0.8-r4	3.0.19-r0
Medium	UBUNTU-CVE-2025-9230	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	GHSA-pvp8-3xj6-8c6x	commons-configuration@1.10	no fix listed
Medium	UBUNTU-CVE-2020-14621	openjdk-8@8u222-b10-1ubuntu1~16.04.1	8u265-b01-0ubuntu2~16.04
Medium	UBUNTU-CVE-2026-11856	curl@7.47.0-1ubuntu2.18	7.47.0-1ubuntu2.19+esm18
Medium	ALPINE-CVE-2023-23914	curl@7.79.1-r1	7.79.1-r5
Medium	ALPINE-CVE-2023-43804	py3-urllib3@1.26.7-r0	1.26.17-r0
Medium	PYSEC-2023-192	urllib3@1.24.2	2.0.6
Medium	UBUNTU-CVE-2017-20230	perl@5.22.1-9ubuntu0.9	no fix listed
Medium	UBUNTU-CVE-2024-7006	tiff@4.0.6-1ubuntu0.6	4.0.6-1ubuntu0.8+esm17
Medium	ALPINE-CVE-2023-6129	openssl@3.0.8-r4	3.0.12-r2
Medium	GO-2022-0433	stdlib@go1.16.15	1.17.9
Medium	RHSA-2025:14900	python-urllib3@1.24.2-5.el8	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2025:14900	python-requests@2.20.0-2.1.el8_1	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:14900	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:14900	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:14900	python-idna@2.5-5.el8	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	UBUNTU-CVE-2024-12087	rsync@3.1.1-3ubuntu1.3	3.1.1-3ubuntu1.3+esm3
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@6.0.11	6.0.19
Medium	UBUNTU-CVE-2016-3619	tiff@4.0.6-1ubuntu0.6	no fix listed
Medium	RHSA-2024:6987	emacs@1:26.1-5.el8	1:26.1-12.el8_10
Medium	UBUNTU-CVE-2021-4156	libsndfile@1.0.25-10ubuntu0.16.04.2	1.0.25-10ubuntu0.16.04.3+esm2
Medium	RHSA-2025:10128	python3@3.6.8-38.el8_4	0:3.6.8-70.el8_10
Medium	UBUNTU-CVE-2015-9383	freetype@2.6.1-0.1ubuntu2.3	2.6.1-0.1ubuntu2.4
Medium	RHSA-2025:2660	libxml2@2.9.7-9.el8_4.2	0:2.9.7-9.el8_4.5
Medium	RHSA-2025:2686	libxml2@2.9.7-9.el8_4.2	0:2.9.7-19.el8_10
Medium	DLA-2500-1	curl@7.52.1-5+deb9u9	7.52.1-5+deb9u13
Medium	DSA-4881-1	curl@7.64.0-4	7.64.0-4+deb10u2
Medium	ALPINE-CVE-2026-18798	openssl@3.5.4-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-18798	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u2
Medium	GHSA-j288-q9x7-2f5v	commons-lang@2.6	no fix listed
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.12.0	3.18.0
Medium	GHSA-wqvq-5m8c-6g24	urllib3@1.24.2	1.25.9
Medium	UBUNTU-CVE-2020-14155	pcre3@2:8.38-3.1	2:8.38-3.1ubuntu0.1~esm1
Medium	ALPINE-CVE-2021-22947	curl@7.77.0-r0	7.79.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.32latest	1 month ago	RELEASE.2020-12-03T05-49-24Z	574042,0693,678	107,899

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opsmx/oes.svg)](https://charts.stackradar.io/charts/opsmx/oes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.