oes Helm chart

Name: oes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opsmx

Scored 14 Sept 2026

ISD and Spinnaker with cve v1.33.3 SAML2 Configuration

Latest 4.0.32 1 month agodeploys tag RELEASE.2020-12-03T05-49-24Z 2Artifact Hub

oes 4.0.32 deploys 25 container images: minio/minio, quay.io/opsmxpublic/busybox, osixia/openldap, quay.io/opsmxpublic/pgchecker and 19 more. Across the 24 measured, 6,201 findings — 59 critical, 402 high — 23 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.16, fixed in 10.1.35.

Radar Score

107,811594022,0683,668

6,201 findings over 24 of 25 images measured

KEV ×23 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

25 images

Image	Tag	Vulnerabilities	Radar Score
minio/minio	RELEASE.2020-12-03T05-49-24Z	1966204	3,887
quay.io/opsmxpublic/busybox	1.28	0000	0
osixia/openldap	1.2.4	003550	1,360
quay.io/opsmxpublic/pgchecker×4	v1	0000	0
quay.io/opsmxpublic/ubi8-oes-audit-client	isd-spin-2025.10.01-cb1bfce-202511261037	445155130	7,629
quay.io/opsmxpublic/ubi8-oes-autopilot	isd-spin-2025.10.01-af26a30d4-202511261054	445168176	8,333
quay.io/opsmxpublic/ubi8-oes-datascience	isd-spin-2025.10.01-af26a30d4-202511261054	0162268	3,793
quay.io/opsmxpublic/ubi8-gate×2	isd-spin-2025.10.01-5c720954-202511260810	448178173	8,691
quay.io/opsmxpublic/ubi8-oes-platform	isd-spin-2025.10.01-a7c191ec-202511261122	445167164	8,171
quay.io/opsmxpublic/rabbitmq	4.2-management	0126240	2,457
quay.io/opsmxpublic/ubi8-oes-ui	isd-spin-2025.10.01-e6f6f01-202512100640	03812261	5,575
quay.io/opsmxpublic/opa	1.12.0	00678	738
quay.io/opsmxpublic/opa	opa-sidecar-v1.0	011897	1,168
quay.io/opsmxpublic/forwarder-controller	v3.5.7	2738147	2,558
quay.io/opsmxpublic/bitnami-redis	5.0.7-debian-10-r0	022948	1,366
quay.io/opsmxpublic/awsgit	v3-js	41257149	3,539
quay.io/opsmxpublic/k8s-decoder	hal	19299	1,345
quay.io/opsmxpublic/bitnami-kubectl	1.18.5	012542	1,150
quay.io/opsmxpublic/ubi8-halyard-cve×4	1.65.0-c25674a2-202511260857	—	not yet scanned
quay.io/opsmxpublic/ubi8-oes-db	v3.0.0	761248296	13,018
quay.io/opsmxpublic/spin-sample-pipeline	v1.0.1	1736433828	20,603
quay.io/opsmxpublic/create-secret	v4.0.4	41141152	3,101
minio/mc	RELEASE.2020-11-25T23-04-07Z	11056191	3,627
quay.io/opsmxpublic/awsgit	v2-openssh	51372159	4,152
quay.io/opsmxpublic/oes-pre-configure	v2	17376	1,550

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

2,899 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2024-6119	openssl@3.0.8-r4	3.0.15-r0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@10.1.16	10.1.45
High	RHSA-2021:4162	python-requests@2.20.0-2.1.el8_1	0:2.22.0-9.module+el8.4.0+8888+89bc7e79
High	RHSA-2021:4162	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+8888+89bc7e79
High	RHSA-2021:4162	python-urllib3@1.24.2-5.el8	0:1.25.7-5.module+el8.5.0+11639+ea5b349d
High	RHSA-2021:4162	python-idna@2.5-5.el8	0:2.8-6.module+el8.4.0+8888+89bc7e79
High	RHSA-2021:4162	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79
High	RHSA-2023:1405	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-9.el8_7
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@10.1.16	10.1.42
High	ALPINE-CVE-2023-38039	curl@8.0.1-r0	8.3.0-r0
High	ALPINE-CVE-2023-0286	openssl@1.1.1s-r0	1.1.1t-r0
High	RHSA-2023:1440	openssl@1:1.1.1g-15.el8_3	1:1.1.1g-18.el8_4
High	UBUNTU-CVE-2023-0286	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm6
High	GHSA-xx8w-mq23-29g4	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20240131185645-0ae4915a9391
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@6.0.14	no fix listed
High	GHSA-g5vr-rgqm-vf78	spring-webflux@6.0.11	no fix listed
High	ALPINE-CVE-2024-2398	curl@8.0.1-r0	8.7.1-r0
High	UBUNTU-CVE-2024-2398	curl@7.47.0-1ubuntu2.18	7.47.0-1ubuntu2.19+esm12
High	RHSA-2025:1301KEV	gcc@8.4.1-1.el8	0:8.5.0-23.el8_10
High	ALPINE-CVE-2023-25652	git@2.32.1-r0	2.32.7-r0
High	UBUNTU-CVE-2023-25652	git@1:2.7.4-0ubuntu1.10	1:2.7.4-0ubuntu1.10+esm7
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.8.dfsg-2ubuntu4.1	1:1.2.8.dfsg-2ubuntu4.3+esm1
High	UBUNTU-CVE-2018-25032	rsync@3.1.1-3ubuntu1.3	3.1.1-3ubuntu1.3+esm1
High	ALPINE-CVE-2021-23840	openssl@1.1.1g-r0	1.1.1j-r0
High	RHSA-2021:4424	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-4.el8
High	UBUNTU-CVE-2021-23840	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.19
High	ALPINE-CVE-2023-2650	openssl@1.1.1q-r0	1.1.1u-r0
High	UBUNTU-CVE-2023-2650	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm9
High	ALPINE-CVE-2021-3712	openssl@1.1.1k-r0	1.1.1l-r0
High	RHSA-2021:5226	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-5.el8_5
High	UBUNTU-CVE-2021-3712	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm1
High	GHSA-2c2h-2855-mf97	camel-support@3.14.1	3.22.4
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	ALPINE-CVE-2023-48795	openssh@9.1_p1-r2	9.1_p1-r5
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20231218163308-9d2ee975ef9f
High	RHSA-2024:0628	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
High	UBUNTU-CVE-2023-48795	openssh@1:7.2p2-4ubuntu2.10	1:7.2p2-4ubuntu2.10+esm5
High	RHSA-2025:22785	expat@2.2.5-4.el8	0:2.2.10-1.el8_4
High	RHSA-2021:4151	python-idna@2.5-5.el8	0:2.5-7.module+el8.1.0+3111+de3f2d8e
High	RHSA-2021:4151	python-requests@2.20.0-2.1.el8_1	0:2.20.0-3.module+el8.2.0+4577+feefd9b8
High	RHSA-2021:4151	python-pysocks@1.6.8-3.el8	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
High	RHSA-2021:4151	python-chardet@3.0.4-7.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	UBUNTU-CVE-2022-37434	rsync@3.1.1-3ubuntu1.3	3.1.1-3ubuntu1.3+esm2
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.8.dfsg-2ubuntu4.1	1:1.2.8.dfsg-2ubuntu4.3+esm2
High	UBUNTU-CVE-2021-43527	nss@2:3.28.4-0ubuntu0.16.04.6	2:3.28.4-0ubuntu0.16.04.14+esm2
High	RHSA-2024:5654	curl@7.61.1-18.el8_4.1	0:7.61.1-34.el8_10.2
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.23.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.32latest	1 month ago	RELEASE.2020-12-03T05-49-24Z	594022,0683,668	107,811

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opsmx/oes.svg)](https://charts.stackradar.io/charts/opsmx/oes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.