oes Helm chart

Name: oes Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

opsmx

Scored 14 Sept 2026

ISD and Spinnaker with cve v1.33.3 SAML2 Configuration

Latest 4.0.32 1 month agodeploys tag RELEASE.2020-12-03T05-49-24Z 2Artifact Hub

oes 4.0.32 deploys 25 container images: minio/minio, quay.io/opsmxpublic/busybox, osixia/openldap, quay.io/opsmxpublic/pgchecker and 19 more. Across the 24 measured, 6,201 findings — 59 critical, 402 high — 23 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.16, fixed in 10.1.35.

Radar Score

107,811594022,0683,668

6,201 findings over 24 of 25 images measured

KEV ×23 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

25 images

Image	Tag	Vulnerabilities	Radar Score
minio/minio	RELEASE.2020-12-03T05-49-24Z	1966204	3,887
quay.io/opsmxpublic/busybox	1.28	0000	0
osixia/openldap	1.2.4	003550	1,360
quay.io/opsmxpublic/pgchecker×4	v1	0000	0
quay.io/opsmxpublic/ubi8-oes-audit-client	isd-spin-2025.10.01-cb1bfce-202511261037	445155130	7,629
quay.io/opsmxpublic/ubi8-oes-autopilot	isd-spin-2025.10.01-af26a30d4-202511261054	445168176	8,333
quay.io/opsmxpublic/ubi8-oes-datascience	isd-spin-2025.10.01-af26a30d4-202511261054	0162268	3,793
quay.io/opsmxpublic/ubi8-gate×2	isd-spin-2025.10.01-5c720954-202511260810	448178173	8,691
quay.io/opsmxpublic/ubi8-oes-platform	isd-spin-2025.10.01-a7c191ec-202511261122	445167164	8,171
quay.io/opsmxpublic/rabbitmq	4.2-management	0126240	2,457
quay.io/opsmxpublic/ubi8-oes-ui	isd-spin-2025.10.01-e6f6f01-202512100640	03812261	5,575
quay.io/opsmxpublic/opa	1.12.0	00678	738
quay.io/opsmxpublic/opa	opa-sidecar-v1.0	011897	1,168
quay.io/opsmxpublic/forwarder-controller	v3.5.7	2738147	2,558
quay.io/opsmxpublic/bitnami-redis	5.0.7-debian-10-r0	022948	1,366
quay.io/opsmxpublic/awsgit	v3-js	41257149	3,539
quay.io/opsmxpublic/k8s-decoder	hal	19299	1,345
quay.io/opsmxpublic/bitnami-kubectl	1.18.5	012542	1,150
quay.io/opsmxpublic/ubi8-halyard-cve×4	1.65.0-c25674a2-202511260857	—	not yet scanned
quay.io/opsmxpublic/ubi8-oes-db	v3.0.0	761248296	13,018
quay.io/opsmxpublic/spin-sample-pipeline	v1.0.1	1736433828	20,603
quay.io/opsmxpublic/create-secret	v4.0.4	41141152	3,101
minio/mc	RELEASE.2020-11-25T23-04-07Z	11056191	3,627
quay.io/opsmxpublic/awsgit	v2-openssh	51372159	4,152
quay.io/opsmxpublic/oes-pre-configure	v2	17376	1,550

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

2,899 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2021-22946	curl@7.77.0-r0	7.79.0-r0
Medium	RHSA-2021:4059	curl@7.61.1-18.el8_4.1	0:7.61.1-18.el8_4.2
Medium	UBUNTU-CVE-2021-22946	curl@7.47.0-1ubuntu2.18	7.47.0-1ubuntu2.19+esm1
Medium	ALPINE-CVE-2022-22826	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-22827	expat@2.2.9-r1	2.2.10-r0
Medium	UBUNTU-CVE-2022-22826	expat@2.1.0-7ubuntu0.16.04.4	2.1.0-7ubuntu0.16.04.5+esm2
Medium	UBUNTU-CVE-2022-22827	expat@2.1.0-7ubuntu0.16.04.4	2.1.0-7ubuntu0.16.04.5+esm2
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1s-r0	1.1.1t-r0
Medium	UBUNTU-CVE-2023-0215	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm6
Medium	RHSA-2026:26275	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-16.el8_6
Medium	UBUNTU-CVE-2020-28196	krb5@1.13.2+dfsg-5ubuntu2.1	1.13.2+dfsg-5ubuntu2.2
Medium	UBUNTU-CVE-2020-17541	libjpeg-turbo@1.4.2-0ubuntu3.1	1.4.2-0ubuntu3.4+esm1
Medium	UBUNTU-CVE-2019-20388	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm1
Medium	UBUNTU-CVE-2017-5130	libxml2@2.9.3+dfsg1-1ubuntu0.6	no fix listed
Medium	UBUNTU-CVE-2016-8625	curl@7.47.0-1ubuntu2.18	no fix listed
Medium	UBUNTU-CVE-2020-10531	icu@55.1-7ubuntu0.4	55.1-7ubuntu0.5
Medium	ALPINE-CVE-2024-6197	curl@8.0.1-r0	8.9.0-r0
Medium	ALPINE-CVE-2021-46143	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-22825	expat@2.2.9-r1	2.2.10-r0
Medium	UBUNTU-CVE-2022-22825	expat@2.1.0-7ubuntu0.16.04.4	2.1.0-7ubuntu0.16.04.5+esm2
Medium	RHSA-2025:1917	emacs@1:26.1-5.el8	1:26.1-13.el8_10
Medium	RHSA-2021:4373	pcre@8.42-4.el8	0:8.42-6.el8
Medium	UBUNTU-CVE-2017-8872	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm1
Medium	UBUNTU-CVE-2022-44640	heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1	1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
Medium	UBUNTU-CVE-2021-27218	glib2.0@2.48.2-0ubuntu4.4	2.48.2-0ubuntu4.7
Medium	UBUNTU-CVE-2021-25214	bind9@1:9.10.3.dfsg.P4-8ubuntu1.18	1:9.10.3.dfsg.P4-8ubuntu1.19
Medium	UBUNTU-CVE-2019-19203	libonig@5.9.6-1ubuntu0.1	5.9.6-1ubuntu0.1+esm3
Medium	UBUNTU-CVE-2022-21476	openjdk-8@8u222-b10-1ubuntu1~16.04.1	8u342-b07-0ubuntu1~16.04
Medium	UBUNTU-CVE-2020-13790	libjpeg-turbo@1.4.2-0ubuntu3.1	1.4.2-0ubuntu3.4
Medium	UBUNTU-CVE-2021-2388	openjdk-8@8u222-b10-1ubuntu1~16.04.1	8u312-b07-0ubuntu1~16.04
Medium	RHSA-2022:1763	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-idna@2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-requests@2.20.0-2.1.el8_1	0:2.25.0-2.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-urllib3@1.24.2-5.el8	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Medium	ALPINE-CVE-2022-23990	expat@2.2.9-r1	2.2.10-r1
Medium	UBUNTU-CVE-2022-23990	expat@2.1.0-7ubuntu0.16.04.4	2.1.0-7ubuntu0.16.04.5+esm2
Medium	RHSA-2022:7622	unbound@1.7.3-15.el8	0:1.16.2-2.el8
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b	3.0.1
Medium	ALPINE-CVE-2022-42915	curl@7.83.1-r3	7.83.1-r4
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220314234659-1baeb1ce4c0b
Medium	UBUNTU-CVE-2017-17942	tiff@4.0.6-1ubuntu0.6	no fix listed
Medium	ALPINE-CVE-2021-46848	libtasn1@4.17.0-r0	4.17.0-r1
Medium	UBUNTU-CVE-2021-46848	libtasn1-6@4.7-3ubuntu0.16.04.3	4.7-3ubuntu0.16.04.3+esm3
Medium	UBUNTU-CVE-2009-5155	glibc@2.23-0ubuntu10	2.23-0ubuntu11.3
Medium	UBUNTU-CVE-2017-13728	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm1
Medium	GHSA-27wf-5967-98gx	k8s.io/kubernetes@v1.25.9	1.28.12
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.17.0
Medium	GHSA-wg47-6jq2-q2hh	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20250403145552-8c70975283f9
Medium	UBUNTU-CVE-2023-2828	bind9@1:9.10.3.dfsg.P4-8ubuntu1.18	1:9.10.3.dfsg.P4-8ubuntu1.19+esm6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.32latest	1 month ago	RELEASE.2020-12-03T05-49-24Z	594022,0683,668	107,811

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/opsmx/oes.svg)](https://charts.stackradar.io/charts/opsmx/oes)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.