oes Helm chart

Name: oes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opsmx

Scored 15 Sept 2026

ISD and Spinnaker with cve v1.33.3 SAML2 Configuration

Latest 4.0.32 2 months agodeploys tag RELEASE.2020-12-03T05-49-24Z 2Artifact Hub

oes 4.0.32 deploys 25 container images: minio/minio, quay.io/opsmxpublic/busybox, osixia/openldap, quay.io/opsmxpublic/pgchecker and 19 more. Across the 24 measured, 6,212 findings — 57 critical, 404 high — 23 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.16, fixed in 10.1.35.

Radar Score

107,899574042,0693,678

6,212 findings over 24 of 25 images measured

KEV ×23 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

25 images

Image	Tag	Vulnerabilities	Radar Score
minio/minio	RELEASE.2020-12-03T05-49-24Z	1966204	3,894
quay.io/opsmxpublic/busybox	1.28	0000	0
osixia/openldap	1.2.4	003550	1,360
quay.io/opsmxpublic/pgchecker×4	v1	0000	0
quay.io/opsmxpublic/ubi8-oes-audit-client	isd-spin-2025.10.01-cb1bfce-202511261037	445155131	7,641
quay.io/opsmxpublic/ubi8-oes-autopilot	isd-spin-2025.10.01-af26a30d4-202511261054	445168177	8,347
quay.io/opsmxpublic/ubi8-oes-datascience	isd-spin-2025.10.01-af26a30d4-202511261054	0163267	3,816
quay.io/opsmxpublic/ubi8-gate×2	isd-spin-2025.10.01-5c720954-202511260810	448178173	8,694
quay.io/opsmxpublic/ubi8-oes-platform	isd-spin-2025.10.01-a7c191ec-202511261122	445167165	8,185
quay.io/opsmxpublic/rabbitmq	4.2-management	0127247	2,511
quay.io/opsmxpublic/ubi8-oes-ui	isd-spin-2025.10.01-e6f6f01-202512100640	03812261	5,576
quay.io/opsmxpublic/opa	1.12.0	00678	747
quay.io/opsmxpublic/opa	opa-sidecar-v1.0	011996	1,169
quay.io/opsmxpublic/forwarder-controller	v3.5.7	2738147	2,566
quay.io/opsmxpublic/bitnami-redis	5.0.7-debian-10-r0	022948	1,366
quay.io/opsmxpublic/awsgit	v3-js	41257149	3,539
quay.io/opsmxpublic/k8s-decoder	hal	19299	1,345
quay.io/opsmxpublic/bitnami-kubectl	1.18.5	012542	1,150
quay.io/opsmxpublic/ubi8-halyard-cve×4	1.65.0-c25674a2-202511260857	—	not yet scanned
quay.io/opsmxpublic/ubi8-oes-db	v3.0.0	662248330	13,345
quay.io/opsmxpublic/spin-sample-pipeline	v1.0.1	1637434830	20,624
quay.io/opsmxpublic/create-secret	v4.0.4	41142151	3,103
minio/mc	RELEASE.2020-11-25T23-04-07Z	11056191	3,634
quay.io/opsmxpublic/awsgit	v2-openssh	51372159	4,153
quay.io/opsmxpublic/oes-pre-configure	v2	17376	1,550

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

2,936 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-81893	gdk-pixbuf@2.32.2-1ubuntu1.6	no fix listed
Low	UBUNTU-CVE-2026-39316	cups@2.1.3-4ubuntu0.10	no fix listed
Low	UBUNTU-CVE-2026-0992	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm12
Low	UBUNTU-CVE-2026-41990	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	GHSA-vp2x-qp44-57v7	nltk@3.9.1	3.10.3
Low	UBUNTU-CVE-2026-45186	expat@2.1.0-7ubuntu0.16.04.4	no fix listed
Low	UBUNTU-CVE-2026-89160	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@6.1.3	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg@1.4.20-1ubuntu3.3	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.4.4-2ubuntu17.3	no fix listed
Low	UBUNTU-CVE-2026-87876	cups@2.1.3-4ubuntu0.10	no fix listed
Low	UBUNTU-CVE-2026-32776	expat@2.1.0-7ubuntu0.16.04.4	no fix listed
Low	ALPINE-CVE-2023-25815	git@2.32.1-r0	2.32.7-r0
Low	UBUNTU-CVE-2023-25815	git@1:2.7.4-0ubuntu1.10	1:2.7.4-0ubuntu1.10+esm8
Low	GHSA-jgj7-c8vj-w563	jasypt-spring-boot@3.0.5	no fix listed
Low	UBUNTU-CVE-2026-45232	rsync@3.1.1-3ubuntu1.3	3.1.1-3ubuntu1.3+esm5
Low	UBUNTU-CVE-2026-41080	expat@2.1.0-7ubuntu0.16.04.4	2.1.0-7ubuntu0.16.04.5+esm12
Low	UBUNTU-CVE-2026-57053	libidn@1.32-3ubuntu1.2	no fix listed
Low	RHSA-2023:7187	procps-ng@3.3.15-6.el8	0:3.3.15-14.el8
Low	GHSA-9f52-rjqv-25qv	spring-expression@6.1.3	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.94.Final	4.1.135.Final
Low	RHSA-2026:22730	vim@2:8.0.1763-15.el8	2:8.0.1763-23.el8_10
Low	UBUNTU-CVE-2025-9403	jq@1.5+dfsg-1ubuntu0.1	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-69418	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.7
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	UBUNTU-CVE-2025-8732	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm12
Low	UBUNTU-CVE-2025-8961	tiff@4.0.6-1ubuntu0.6	4.0.6-1ubuntu0.8+esm19
Low	GO-2026-5024	golang.org/x/sys@v0.38.0	0.44.0
Low	UBUNTU-CVE-2026-35387	openssh@1:7.2p2-4ubuntu2.10	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@6.1.3	no fix listed
Low	UBUNTU-CVE-2025-6199	gdk-pixbuf@2.32.2-1ubuntu1.6	2.32.2-1ubuntu1.6+esm2
Low	UBUNTU-CVE-2026-18477	tar@1.28-2.1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-73281	openssh@1:7.2p2-4ubuntu2.10	no fix listed
Low	DLA-2424-1	tzdata@2019a-0+deb9u1	2020d-0+deb9u1
Low	DLA-2431-2	libonig@6.1.3-2	6.1.3-2+deb9u2
Low	DLA-2509-1	tzdata@2019a-0+deb9u1	2020e-0+deb9u1
Low	DLA-2542-1	tzdata@2019a-0+deb9u1	2021a-0+deb9u1
Low	DLA-2593-1	ca-certificates@20161130+nmu1+deb9u1	20200601~deb9u2
Low	DLA-2751-1	postgresql-9.6@9.6.13-0+deb9u1	9.6.23-0+deb9u1
Low	DLA-2759-1	gnutls28@3.5.8-5+deb9u4	3.5.8-5+deb9u6
Low	DLA-2797-1	tzdata@2019a-0+deb9u1	2021a-0+deb9u2
Low	DLA-2948-1	debian-archive-keyring@2017.5	2017.5+deb9u2
Low	DLA-2963-1	tzdata@2019a-0+deb9u1	2021a-0+deb9u3
Low	DLA-3051-1	tzdata@2019a-0+deb9u1	2021a-0+deb9u4
Low	DLA-3112-1	bzip2@1.0.6-9.2~deb10u1	1.0.6-9.2~deb10u2
Low	DLA-3134-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u7
Low	DLA-3161-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u8
Low	DLA-3366-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u10
Low	DLA-3412-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.32latest	2 months ago	RELEASE.2020-12-03T05-49-24Z	574042,0693,678	107,899

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opsmx/oes.svg)](https://charts.stackradar.io/charts/opsmx/oes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.