wonder-mesh-net Helm chart
strrl-helmScored 14 Sept 2026
What a wonder, comrade.
Latest 2026.629.0 1 month agoapp version v2026.629.0 0Artifact Hub
wonder-mesh-net 2026.629.0 deploys 3 container images: quay.io/keycloak/keycloak, ghcr.io/strrl/wonder-mesh-net and headscale/headscale. Across them, 487 findings — 1 critical, 1 high. The highest contribution is RHSA-2025:11992 in sqlite 3.34.1-7.el9_3, fixed in 0:3.34.1-8.el9_6.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | 26.0 | 1021167 | 2,003 |
| ghcr.io/ | v2026.629.0 | 0022133 | 1,523 |
| headscale/ | 0.27.1 | 0127115 | 1,537 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-9623-mj7j-p9v4 | quarkus-vertx | 3.15.6 |
| Low | GHSA-m32f-8vh9-2hh3 | keycloak-services | no fix listed |
| Low | GHSA-33j3-g875-37rp | keycloak-services | no fix listed |
| Low | GHSA-4hx9-48xh-5mxr | keycloak-ldap-federation | 26.2.11 |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | GHSA-xvr9-35cr-46v9 | mariadb-java-client | 3.4.3 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | GHSA-38f8-5428-x5cv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-xq3w-v528-46rv | netty-common | 4.1.115.Final |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.1.137.Final |
| Low | DEBIAN-CVE-2026-34743 | xz-utils | 5.4.1-1+deb12u1 |
| Low | GHSA-5jfq-x6xp-7rw2 | keycloak-services | 26.2.2 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | GHSA-389x-839f-4rhx | netty-common | 4.1.118.Final |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | GHSA-gvgg-2r3r-53x7 | keycloak-services | 26.0.10 |
| Low | RHSA-2026:33226 | glibc | 0:2.34-272.el9_8 |
| Low | DEBIAN-CVE-2026-7010 | perl | no fix listed |
| Low | GHSA-4mp9-239f-g9hg | netty-codec-http | 4.1.136.Final |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | GHSA-cpf7-j4cf-vqx4 | keycloak-services | no fix listed |
| Low | RHSA-2026:12441 | libcap | 0:2.48-10.el9_7.1 |
| Low | GHSA-m4j5-5x4r-2xp9 | keycloak-services | 26.2.8 |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | RHSA-2025:4244 | glibc | 0:2.34-125.el9_5.8 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | GHSA-8hxp-qmph-w5gq | keycloak-model-storage-services | no fix listed |
| Low | GHSA-f6r7-6w34-x2gp | keycloak-ldap-federation | 26.6.3 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | RHSA-2026:42736 | acl | 0:2.4.0-1.el9_8 |
| Low | RHSA-2025:9877 | glibc | 0:2.34-168.el9_6.20 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | DEBIAN-CVE-2026-4438 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | GHSA-fqjh-8322-vgrv | keycloak-services | no fix listed |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | GHSA-fm6w-rrp3-2x4w | keycloak-services | 26.2.13 |
| Low | GHSA-rrv7-3mqf-hxfr | keycloak-services | 26.6.2 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2026.629.0latest | 1 month ago | v2026.629.0 | 1170415 | 5,063 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.