ingress-stack 0.0.6 Helm chart

Name: ingress-stack Helm chart 0.0.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-ingress-stack

Scored 12 Oct 2026

Hardened ingress with TLS out of the box: ingress-nginx as the default IngressClass and cert-manager with a cluster CA issuer the stack creates, so an Ingress gets a certificate from a single annotation. Bring your own ACME issuer for public certificates. All QuenchWorks images are nonroot, 0-CVE, pinned by digest and cosign-signed.

Version 0.0.6app version 1.0.0 (not verified against the render) 0Artifact Hub

ingress-stack 0.0.6 deploys 5 container images: ghcr.io/quenchworks/images/cert-manager-cainjector, ghcr.io/quenchworks/images/cert-manager-controller, ghcr.io/quenchworks/images/cert-manager-webhook, ghcr.io/quenchworks/images/ingress-nginx and 1 more. Across them, 56 findings — 2 critical, 3 high. The highest contribution is GO-2025-3567 in k8s.io/ingress-nginx v1.15.10+dirty, with no fix listed.

Radar Score

78623843

56 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/cert-manager-cainjector	digest-pinned	0001	4
ghcr.io/quenchworks/images/cert-manager-controller	digest-pinned	0001	4
ghcr.io/quenchworks/images/cert-manager-webhook	digest-pinned	0001	4
ghcr.io/quenchworks/images/ingress-nginx×2	digest-pinned	23415	549
ghcr.io/quenchworks/images/kubectl	digest-pinned	00425	225

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

48 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GO-2025-3567	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Critical	GO-2025-3568	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
High	GO-2024-2428	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
High	GO-2025-3565	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
High	GO-2025-3566	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Medium	CGA-3vcm-8x8j-vfq4	kubernetes-1.37@1.37.1-r2	no fix listed
Medium	CGA-cq8w-gh2q-r887	kubernetes-1.37@1.37.1-r2	no fix listed
Medium	CGA-54xr-85g7-v6c7	kubernetes-1.37@1.37.1-r2	no fix listed
Medium	CGA-4jjx-m8gf-273m	kubernetes-1.37@1.37.1-r2	no fix listed
Medium	CGA-25j5-q798-fwm3	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed
Medium	GO-2026-4426	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Medium	GO-2026-4423	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Medium	GO-2025-3564	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Low	CGA-pjc7-rhj8-2m9q	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed
Low	CGA-w6c4-5355-g6w8	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed
Low	CGA-393j-mrfx-mmvp	libxslt@1.1.45-r5	no fix listed
Low	GO-2025-3521	k8s.io/kubernetes@v1.37.1+dirty	no fix listed
Low	GO-2026-4417	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Low	CGA-gg2p-w338-974m	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed
Low	CGA-549w-3rfh-p826	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed
Low	CGA-jqfv-2763-m3gw	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-3p64-pj6v-586c	glibc-2.44@2.44-r8	no fix listed
Low	CGA-5ff5-5vw4-4gx8	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-84qm-pxw8-f58f	glibc-2.44@2.44-r8	no fix listed
Low	CGA-387c-5f4p-4rh4	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed
Low	CGA-9hjr-hrh5-323f	libxslt@1.1.45-r5	no fix listed
Low	CGA-2727-9j94-3x3p	glibc-2.44@2.44-r8	no fix listed
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r8	no fix listed
Low	GO-2026-4419	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Low	CGA-484j-x24x-cpc9	kubernetes-1.37@1.37.1-r2	no fix listed
Low	GO-2025-3547	k8s.io/kubernetes@v1.37.1+dirty	no fix listed
Low	CGA-277p-vcvg-mmrw	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-3862-v47f-8qx7	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-6mf8-9rf9-jqwc	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-6rfr-jp65-jqrq	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-7crm-jg8v-hcmw	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-7rqw-r7ww-h5pc	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-84xc-6qp9-53q8	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-8p24-rg3m-6q67	helm-4@4.3.0-r2	no fix listed
Low	CGA-cmv4-xcrj-hvxq	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-fmf5-6rqm-vg97	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-m5hm-8jx9-rvx8	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-qvvv-7fmc-7vxv	kubernetes-1.37@1.37.1-r2	no fix listed
Low	CGA-rw59-v8cv-vgh9	helm-4@4.3.0-r2	no fix listed
Low	CGA-w8pf-x6mg-w88p	kubernetes-1.37@1.37.1-r2	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed
Low	CGA-37wc-rr96-hm3f	glibc-2.44@2.44-r8	no fix listed
Low	CGA-mv2h-3fqx-g4v8	ingress-nginx-controller-1.15@1.15.10-r9	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.6latest	—	1.0.0	23843	786
0.0.4	—	1.0.0	2320141	2,002
0.0.2	—	1.0.0	231493	1,399

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-ingress-stack/ingress-stack.svg)](https://charts.stackradar.io/charts/quench-ingress-stack/ingress-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.