orchestra 3.1.56 Helm chart

Name: orchestra Helm chart 3.1.56: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

tremolo

Scored 7 Oct 2026

A Helm chart for Kubernetes

Version 3.1.56 23 days agoapp version 1.0.51 0Artifact Hub

orchestra 3.1.56 deploys 5 container images: ghcr.io/openunison/openunison-k8s, ghcr.io/headlamp-k8s/headlamp, ghcr.io/tremolosecurity/kube-oidc-proxy, ghcr.io/openunison/openunison-kubernetes-operator and 1 more. Across them, 349 findings — 1 critical, 0 high. The highest contribution is DLA-3807-1 in glibc 2.28-10+deb10u2, fixed in 2.28-10+deb10u3.

Radar Score

3,3071038310

349 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openunison/openunison-k8s	1.0.51	0010126	1,233
ghcr.io/headlamp-k8s/headlamp	v0.45.0	00820	326
ghcr.io/tremolosecurity/kube-oidc-proxy	1.0.13	00754	523
ghcr.io/openunison/openunison-kubernetes-operator	1.0.13	00792	882
ghcr.io/tremolosecurity/python-slim-nonroot/python3	1.0.0	10618	343

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

172 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-102474	dash@0.5.12-6ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-87876	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	UBUNTU-CVE-2026-89156	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.35+dfsg-3ubuntu0.4	no fix listed
Low	DLA-3482-1	debian-archive-keyring@2019.1+deb10u1	2019.1+deb10u2
Low	DLA-3684-1	tzdata@2021a-0+deb10u11	2021a-0+deb10u12
Low	DLA-3788-1	tzdata@2021a-0+deb10u11	2024a-0+deb10u1
Low	GO-2026-5932	golang.org/x/crypto@v0.56.0	no fix listed
Low	UBUNTU-CVE-2026-95818	glibc@2.39-0ubuntu8.9	no fix listed
Low	UBUNTU-CVE-2025-66382	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-86137	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-96675	alsa-lib@1.2.11-1ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-32778	expat@2.6.1-2ubuntu0.4	2.6.1-2ubuntu0.5
Low	UBUNTU-CVE-2026-89162	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@23.1.2	26.0
Low	UBUNTU-CVE-2026-40228	systemd@255.4-1ubuntu8.17	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
Low	UBUNTU-CVE-2026-105712	gnupg2@2.4.4-2ubuntu17.6	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.57latest	yesterday	1.0.53	1035264	2,813
3.1.56	23 days ago	1.0.51	1038310	3,307
3.1.55	1 month ago	1.0.50	00102691	7,637

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/tremolo/orchestra.svg)](https://charts.stackradar.io/charts/tremolo/orchestra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.