orchestra 3.1.55 Helm chart
tremoloScored 14 Sept 2026
A Helm chart for Kubernetes
Version 3.1.55 10 days agoapp version 1.0.50 0Artifact Hub
orchestra 3.1.55 deploys 5 container images: ghcr.io/openunison/openunison-k8s, ghcr.io/headlamp-k8s/headlamp, ghcr.io/tremolosecurity/kube-oidc-proxy, ghcr.io/openunison/openunison-kubernetes-operator and 1 more. Across them, 793 findings — 0 critical, 0 high. The highest contribution is DLA-3807-1 in glibc 2.28-10+deb10u2, fixed in 2.28-10+deb10u3.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
5 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 1.0.50 | 0034234 | 2,580 |
| ghcr.io/ | v0.42.0 | 002083 | 1,061 |
| ghcr.io/ | 1.0.12 | 0019140 | 1,474 |
| ghcr.io/ | 1.0.11 | 0025202 | 2,126 |
| ghcr.io/ | 1.0.0 | 00432 | 396 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
414 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2026-45447 | openssl | 3.5.7-r0 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | UBUNTU-CVE-2026-19931 | curl | no fix listed |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | UBUNTU-CVE-2026-10536 | curl | 8.5.0-2ubuntu10.11 |
| Medium | UBUNTU-CVE-2026-18924 | curl | no fix listed |
| Medium | UBUNTU-CVE-2026-11856 | curl | 8.5.0-2ubuntu10.12 |
| Medium | UBUNTU-CVE-2026-8925 | curl | 8.5.0-2ubuntu10.10 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | UBUNTU-CVE-2026-42009 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | UBUNTU-CVE-2026-63076 | openssl | 3.0.13-0ubuntu3.15 |
| Medium | UBUNTU-CVE-2025-59375 | expat | no fix listed |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | UBUNTU-CVE-2026-33846 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | UBUNTU-CVE-2018-10126 | libjpeg-turbo | no fix listed |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.21.4 |
| Medium | UBUNTU-CVE-2026-5450 | glibc | 2.39-0ubuntu8.8 |
| Medium | GHSA-v3pr-hxpr-mfm8 | mina-core | 2.1.13 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.21.4 |
| Medium | ALPINE-CVE-2026-34182 | openssl | 3.5.7-r0 |
| Medium | UBUNTU-CVE-2026-34182 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2026-34183 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-31790 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-34180 | openssl | 3.5.7-r0 |
| Medium | UBUNTU-CVE-2026-34180 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | UBUNTU-CVE-2026-7383 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | UBUNTU-CVE-2026-8924 | curl | 8.5.0-2ubuntu10.10 |
| Medium | UBUNTU-CVE-2025-69720 | ncurses | 6.4+20240113-1ubuntu2.1 |
| Medium | DLA-3530-1 | openssl | 1.1.1n-0+deb10u6 |
| Medium | UBUNTU-CVE-2026-8376 | perl | 5.38.2-3.2ubuntu0.3 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | GHSA-v853-w46p-fv2h | activemq-broker | 6.2.6 |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.2.16.Final |
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-hg6c-8mvr-jqc9 | activemq-broker | 6.2.6 |
| Medium | UBUNTU-CVE-2026-8927 | curl | 8.5.0-2ubuntu10.10 |
| Medium | UBUNTU-CVE-2026-42010 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/tremolo/orchestra)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.