oes Helm chart

Name: oes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opsmx

Scored 15 Sept 2026

ISD and Spinnaker with cve v1.33.3 SAML2 Configuration

Latest 4.0.32 2 months agodeploys tag RELEASE.2020-12-03T05-49-24Z 2Artifact Hub

oes 4.0.32 deploys 25 container images: minio/minio, quay.io/opsmxpublic/busybox, osixia/openldap, quay.io/opsmxpublic/pgchecker and 19 more. Across the 24 measured, 6,212 findings — 57 critical, 404 high — 23 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.16, fixed in 10.1.35.

Radar Score

107,899574042,0693,678

6,212 findings over 24 of 25 images measured

KEV ×23 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

25 images

Image	Tag	Vulnerabilities	Radar Score
minio/minio	RELEASE.2020-12-03T05-49-24Z	1966204	3,887
quay.io/opsmxpublic/busybox	1.28	0000	0
osixia/openldap	1.2.4	003550	1,360
quay.io/opsmxpublic/pgchecker×4	v1	0000	0
quay.io/opsmxpublic/ubi8-oes-audit-client	isd-spin-2025.10.01-cb1bfce-202511261037	445155130	7,629
quay.io/opsmxpublic/ubi8-oes-autopilot	isd-spin-2025.10.01-af26a30d4-202511261054	445168176	8,335
quay.io/opsmxpublic/ubi8-oes-datascience	isd-spin-2025.10.01-af26a30d4-202511261054	0162268	3,806
quay.io/opsmxpublic/ubi8-gate×2	isd-spin-2025.10.01-5c720954-202511260810	448178173	8,691
quay.io/opsmxpublic/ubi8-oes-platform	isd-spin-2025.10.01-a7c191ec-202511261122	445167164	8,173
quay.io/opsmxpublic/rabbitmq	4.2-management	0126248	2,505
quay.io/opsmxpublic/ubi8-oes-ui	isd-spin-2025.10.01-e6f6f01-202512100640	03812261	5,575
quay.io/opsmxpublic/opa	1.12.0	00678	738
quay.io/opsmxpublic/opa	opa-sidecar-v1.0	011897	1,169
quay.io/opsmxpublic/forwarder-controller	v3.5.7	2738147	2,558
quay.io/opsmxpublic/bitnami-redis	5.0.7-debian-10-r0	022948	1,366
quay.io/opsmxpublic/awsgit	v3-js	41257149	3,539
quay.io/opsmxpublic/k8s-decoder	hal	19299	1,345
quay.io/opsmxpublic/bitnami-kubectl	1.18.5	012542	1,150
quay.io/opsmxpublic/ubi8-halyard-cve×4	1.65.0-c25674a2-202511260857	—	not yet scanned
quay.io/opsmxpublic/ubi8-oes-db	v3.0.0	662248296	13,018
quay.io/opsmxpublic/spin-sample-pipeline	v1.0.1	1637434830	20,623
quay.io/opsmxpublic/create-secret	v4.0.4	41141152	3,103
minio/mc	RELEASE.2020-11-25T23-04-07Z	11056191	3,627
quay.io/opsmxpublic/awsgit	v2-openssh	51372159	4,152
quay.io/opsmxpublic/oes-pre-configure	v2	17376	1,550

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

2,902 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-293q-567p-wmwq	spring-security-web@6.0.5	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@6.0.5	6.0.14
Low	UBUNTU-CVE-2026-22013	openjdk-8@8u222-b10-1ubuntu1~16.04.1	8u492-ga~us2-0ubuntu1~16.04.1
Low	UBUNTU-CVE-2026-70907	openjdk-8@8u222-b10-1ubuntu1~16.04.1	no fix listed
Low	ALPINE-CVE-2026-45446	openssl@3.5.4-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-45446	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-4360	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.17
Low	UBUNTU-CVE-2024-21210	openjdk-8@8u222-b10-1ubuntu1~16.04.1	8u432-ga~us1-0ubuntu2~16.04.4
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220525230936-793ad666bf5e
Low	UBUNTU-CVE-2025-8177	tiff@4.0.6-1ubuntu0.6	4.0.6-1ubuntu0.8+esm18
Low	UBUNTU-CVE-2026-3446	python3.12@3.12.3-1ubuntu0.9	no fix listed
Low	UBUNTU-CVE-2020-21047	elfutils@0.165-3ubuntu1.2	0.165-3ubuntu1.2+esm1
Low	ALPINE-CVE-2023-45803	py3-urllib3@1.26.7-r0	1.26.18-r0
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.24.2	1.26.18
Low	GO-2025-4116	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.43.0
Low	GHSA-25qh-j22f-pwp8	logback-core@1.4.14	1.5.19
Low	RHSA-2026:55804	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.3
Low	GO-2026-4870	stdlib@go1.25.5	1.25.9
Low	GO-2022-0532	stdlib@go1.16.15	1.17.11
Low	UBUNTU-CVE-2026-39956	jq@1.5+dfsg-1ubuntu0.1	1.5+dfsg-1ubuntu0.1+esm4
Low	GO-2025-4009	stdlib@go1.16.15	1.24.8
Low	UBUNTU-CVE-2026-86138	libxml2@2.9.3+dfsg1-1ubuntu0.6	no fix listed
Low	GO-2026-4947	stdlib@go1.25.5	1.25.9
Low	UBUNTU-CVE-2026-2297	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2021-20193	tar@1.28-2.1ubuntu0.1	1.28-2.1ubuntu0.2+esm1
Low	GHSA-fq3f-m5qm-99f5	opentelemetry-javaagent@2.17.1	2.27.0
Low	UBUNTU-CVE-2026-86143	libxml2@2.9.3+dfsg1-1ubuntu0.6	no fix listed
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-4006	stdlib@go1.16.15	1.24.8
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	UBUNTU-CVE-2026-33948	jq@1.5+dfsg-1ubuntu0.1	1.5+dfsg-1ubuntu0.1+esm4
Low	UBUNTU-CVE-2025-29088	sqlite3@3.11.0-1ubuntu1.2	3.11.0-1ubuntu1.5+esm3
Low	UBUNTU-CVE-2024-21094	openjdk-8@8u222-b10-1ubuntu1~16.04.1	8u432-ga~us1-0ubuntu2~16.04.4
Low	UBUNTU-CVE-2026-18090	gdk-pixbuf@2.32.2-1ubuntu1.6	no fix listed
Low	GO-2026-5037	stdlib@go1.25.5	1.25.11
Low	UBUNTU-CVE-2018-16866	systemd@229-4ubuntu21.4	229-4ubuntu21.15
Low	UBUNTU-CVE-2026-40225	systemd@255.4-1ubuntu8.11	255.4-1ubuntu8.14
Low	UBUNTU-CVE-2026-43894	jq@1.5+dfsg-1ubuntu0.1	no fix listed
Low	GO-2026-4971	stdlib@go1.25.5	1.25.10
Low	UBUNTU-CVE-2026-3832	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2025-13837	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.11
Low	RHSA-2026:11349	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.4
Low	UBUNTU-CVE-2025-9714	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm10
Low	GO-2025-3495	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	no fix listed
Low	UBUNTU-CVE-2026-56409	expat@2.1.0-7ubuntu0.16.04.4	no fix listed
Low	UBUNTU-CVE-2026-43896	jq@1.5+dfsg-1ubuntu0.1	no fix listed
Low	RHSA-2026:56133	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
Low	GO-2026-5972	stdlib@go1.25.5	1.25.13
Low	GO-2026-6088	stdlib@go1.25.5	1.25.13
Low	GO-2026-6089	stdlib@go1.25.5	1.25.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.32latest	2 months ago	RELEASE.2020-12-03T05-49-24Z	574042,0693,678	107,899

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opsmx/oes.svg)](https://charts.stackradar.io/charts/opsmx/oes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.