ztunnel 0.0.5 Helm chart

Name: ztunnel Helm chart 0.0.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-ztunnel

Scored 24 Oct 2026

Istio ztunnel, the per-node L4 proxy of ambient mode: it gives every ambient pod a SPIFFE identity and carries its traffic over mutual TLS (HBONE), with no sidecars. Pairs with the QuenchWorks istiod and istio-cni charts. Hardened by QuenchWorks: built from source, 0-CVE, cosign-signed and pinned by digest.

Version 0.0.5app version 1.30.7 (not verified against the render) 0Artifact Hub

ztunnel 0.0.5 deploys 1 container image: ghcr.io/quenchworks/images/ztunnel. Across them, 16 findings — 0 critical, 0 high. The highest contribution is CGA-3p64-pj6v-586c in glibc-2.44 2.44-r9, with no fix listed.

Radar Score

7100016

16 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/ztunnel	digest-pinned	00016	71

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

16 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	CGA-3p64-pj6v-586c	glibc-2.44@2.44-r9	no fix listed
Low	CGA-84qm-pxw8-f58f	glibc-2.44@2.44-r9	no fix listed
Low	CGA-2727-9j94-3x3p	glibc-2.44@2.44-r9	no fix listed
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r9	no fix listed
Low	RUSTSEC-2024-0384	instant@0.1.13	no fix listed
Low	RUSTSEC-2024-0449	unsafe-libyaml@0.2.11	no fix listed
Low	RUSTSEC-2025-0012	backoff@0.4.0	no fix listed
Low	RUSTSEC-2025-0134	rustls-pemfile@2.2.0	no fix listed
Low	RUSTSEC-2026-0186	memmap2@0.9.9	0.9.11
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	RUSTSEC-2026-0346	rustls@0.23.45	0.23.46
Low	RUSTSEC-2026-0386	tokio@1.53.2	1.51.6
Low	CGA-37wc-rr96-hm3f	glibc-2.44@2.44-r9	no fix listed
Low	RUSTSEC-2026-0348	rustls@0.23.45	0.23.46
Low	RUSTSEC-2026-0349	rustls@0.23.45	0.23.46
Low	RUSTSEC-2026-0347	rustls@0.23.45	0.23.46

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.5latest	—	1.30.7	00016	71
0.0.3	—	1.30.6	00017	76
0.0.2	—	1.30.5	00016	71

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-ztunnel/ztunnel.svg)](https://charts.stackradar.io/charts/quench-ztunnel/ztunnel)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.