StackRadar

tigera-operator 2.14.1 Helm chart

stevehipwellVerified publisher

Scored 14 Sept 2026

Helm chart to install the Tigera Operator for managing Calico.

Version 2.14.1 2 months agoapp version 1.42.3 2Artifact Hub

tigera-operator 2.14.1 deploys 1 container image: quay.io/tigera/operator. Across them, 35 findings0 critical, 0 high. The highest contribution is GHSA-vp52-pcj8-j9qc in google.golang.org/grpc v1.80.0, fixed in 1.83.1.

Radar Score

24000035

35 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
quay.io/tigera/operator×2v1.42.300035240

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

35 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.80.01.83.1
LowGHSA-8xwf-rjm4-xvhvoras.land/oras-go/v2@v2.6.02.6.1
LowGHSA-jxpm-75mh-9fp7oras.land/oras-go/v2@v2.6.02.6.1
LowGHSA-fxhp-mv3v-67qporas.land/oras-go/v2@v2.6.02.6.2
LowGHSA-wcrf-9vrr-854fgithub.com/envoyproxy/gateway@v1.8.01.8.1
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.80.01.82.1
LowGO-2026-5026stdlib@go1.26.4-X:boringcrypto1.25.13
LowGHSA-22xc-xg2r-9j7vgithub.com/envoyproxy/gateway@v1.8.01.8.1
LowGO-2026-5972stdlib@go1.26.4-X:boringcrypto1.25.13
LowGO-2026-6088stdlib@go1.26.4-X:boringcrypto1.25.13
LowGO-2026-6089stdlib@go1.26.4-X:boringcrypto1.25.13
LowGO-2026-6090stdlib@go1.26.4-X:boringcrypto1.25.13
LowGO-2026-5942stdlib@go1.26.4-X:boringcrypto1.26.6
LowGO-2026-6218stdlib@go1.26.4-X:boringcrypto1.25.13
LowGHSA-vh4v-2xq2-g5cgoras.land/oras-go/v2@v2.6.02.6.1
LowGO-2026-5970golang.org/x/text@v0.38.00.39.0
LowGHSA-cxpq-8v7q-cg56github.com/envoyproxy/gateway@v1.8.01.8.1
LowGHSA-h7pq-86h8-rp5xgithub.com/envoyproxy/gateway@v1.8.01.8.1
LowGHSA-m2v6-2jmh-4c68github.com/envoyproxy/gateway@v1.8.01.8.1
LowGHSA-fcrp-7gc2-93g7github.com/envoyproxy/gateway@v1.8.01.8.1
LowGO-2026-5856stdlib@go1.26.4-X:boringcrypto1.25.12
LowGO-2026-6355golang.org/x/crypto@v0.53.00.56.0
LowGO-2026-5064github.com/containerd/containerd@v1.7.33no fix listed
LowGO-2026-6303golang.org/x/crypto@v0.53.00.55.0
LowGO-2026-6354golang.org/x/crypto@v0.53.00.56.0
LowGO-2026-6091stdlib@go1.26.4-X:boringcrypto1.25.13
LowGO-2026-5338github.com/containerd/containerd@v1.7.33no fix listed
LowGHSA-8fv2-88gg-hm7qgithub.com/envoyproxy/gateway@v1.8.01.8.1
LowGO-2026-4970stdlib@go1.26.4-X:boringcrypto1.25.12
LowGO-2026-5622github.com/containerd/containerd@v1.7.33no fix listed
LowGO-2026-5841github.com/klauspost/compress@v1.18.51.18.7
LowGO-2026-5884oras.land/oras-go/v2@v2.6.02.6.1
LowGO-2026-5932golang.org/x/crypto@v0.53.0no fix listed
LowGO-2026-6061google.golang.org/grpc@v1.80.01.82.1
LowGHSA-xf85-363p-868woras.land/oras-go/v2@v2.6.02.6.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.14.2latest6 days ago1.42.6000316
2.14.12 months ago1.42.300035240

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/stevehipwell/tigera-operator.svg)](https://charts.stackradar.io/charts/stevehipwell/tigera-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 8 Sept 2026 · advisories as of 8 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.