StackRadar

oauth2-proxy Helm chart

presto-loadbalancer

Scored 14 Sept 2026

A reverse proxy that provides authentication with Google, Github or other providers

Latest 4.3.18 2 years agodeploys tag 1.15.9-alpine 0Artifact Hub

oauth2-proxy 4.3.18 deploys 2 container images: library/nginx and quay.io/oauth2-proxy/oauth2-proxy. Across them, 260 findings3 critical, 11 high 2 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3. Chart.yaml declares kubeVersion >=1.9.0-0; rendered for Kubernetes 1.9.0.

Radar Score

3,95831167179

260 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/nginx1.15.9-alpine23235951
quay.io/oauth2-proxy/oauth2-proxyv6.1.118441743,007

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

254 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-w73w-5m7g-f7qcgithub.com/dgrijalva/jwt-go@v3.2.0+incompatibleno fix listed
MediumALPINE-CVE-2021-42383busybox@1.31.1-r91.31.1-r11
MediumALPINE-CVE-2018-14498libjpeg-turbo@1.5.3-r41.5.3-r5
MediumGHSA-xrjj-mj9h-534mgolang.org/x/net@v0.0.0-20200520004742-59133d7f0dd70.4.0
MediumGHSA-5rcv-m4m3-hfh7golang.org/x/text@v0.3.20.3.3
MediumALPINE-CVE-2019-13118libxslt@1.1.32-r01.1.33-r3
MediumGHSA-h86h-8ppg-mxmhgolang.org/x/net@v0.0.0-20200520004742-59133d7f0dd70.0.0-20210428140749-89ef3d95e781
MediumGHSA-r5c5-pr8j-pfp7golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.0.0-20190320223903-b7391e95e576
MediumGHSA-69ch-w2m2-3vjpgolang.org/x/text@v0.3.20.3.8
MediumALPINE-CVE-2019-11038gd@2.2.5-r12.2.5-r3
MediumGO-2022-0433stdlib@go1.14.41.17.9
MediumALPINE-CVE-2020-14155pcre@8.42-r18.42-r2
MediumGHSA-ppp9-7jff-5vj2golang.org/x/text@v0.3.20.3.7
MediumGHSA-8r3f-844c-mc37google.golang.org/protobuf@v1.23.01.33.0
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0
MediumGHSA-gwc9-m7rh-j2wwgolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.0.0-20211202192323-5770296d904e
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0
MediumGO-2021-0243stdlib@go1.14.41.15.14
MediumGO-2022-0273stdlib@go1.14.41.16.8
MediumGHSA-p782-xgp4-8hr8golang.org/x/sys@v0.0.0-20200519105757-fe76b779f2990.0.0-20220412211240-33da011f77ad
MediumALPINE-CVE-2019-12904libgcrypt@1.8.4-r01.8.4-r1
MediumGHSA-x3jr-pf6g-c48fgolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.0.0-20190424203555-c05e17bb3b2d
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.35.0
MediumGO-2022-1144stdlib@go1.14.41.18.9
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d0.27.0
LowGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0
LowGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0
LowGO-2021-0142stdlib@go1.14.41.13.15
LowGO-2021-0263stdlib@go1.14.41.16.10
LowGO-2023-1571stdlib@go1.14.41.19.6
LowGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.27.01.83.1
LowGO-2022-0435stdlib@go1.14.41.17.9
LowGO-2022-0288stdlib@go1.14.41.16.12
LowGO-2022-0288golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd70.0.0-20211209124913-491a49abca63
LowGO-2021-0069stdlib@go1.14.41.14.12
LowGO-2023-2102stdlib@go1.14.41.20.10
LowGO-2022-0236stdlib@go1.14.41.15.12
LowGO-2021-0226stdlib@go1.14.41.14.8
LowGO-2021-0240stdlib@go1.14.41.15.13
LowGO-2021-0242stdlib@go1.14.41.15.13
LowGO-2021-0264stdlib@go1.14.41.16.10
LowGO-2022-0969stdlib@go1.14.41.18.6
LowGO-2021-0239stdlib@go1.14.41.15.13
LowGO-2021-0347stdlib@go1.14.41.16.15
LowGO-2021-0245stdlib@go1.14.41.15.15
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0
LowGO-2021-0319stdlib@go1.14.41.16.14
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a20.52.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.3.18latest2 years ago1.15.9-alpine311671793,958

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/presto-loadbalancer/oauth2-proxy.svg)](https://charts.stackradar.io/charts/presto-loadbalancer/oauth2-proxy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.