orchestra 3.1.56 Helm chart

Name: orchestra Helm chart 3.1.56: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

tremolo

Scored 7 Oct 2026

A Helm chart for Kubernetes

Version 3.1.56 23 days agoapp version 1.0.51 0Artifact Hub

orchestra 3.1.56 deploys 5 container images: ghcr.io/openunison/openunison-k8s, ghcr.io/headlamp-k8s/headlamp, ghcr.io/tremolosecurity/kube-oidc-proxy, ghcr.io/openunison/openunison-kubernetes-operator and 1 more. Across them, 349 findings — 1 critical, 0 high. The highest contribution is DLA-3807-1 in glibc 2.28-10+deb10u2, fixed in 2.28-10+deb10u3.

Radar Score

3,3071038310

349 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openunison/openunison-k8s	1.0.51	0010126	1,233
ghcr.io/headlamp-k8s/headlamp	v0.45.0	00820	326
ghcr.io/tremolosecurity/kube-oidc-proxy	1.0.13	00754	523
ghcr.io/openunison/openunison-kubernetes-operator	1.0.13	00792	882
ghcr.io/tremolosecurity/python-slim-nonroot/python3	1.0.0	10618	343

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

24 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-cx63-2mw6-8hw5	setuptools@65.5.1	70.0.0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	PYSEC-2025-49	setuptools@65.5.1	78.1.1
Medium	UBUNTU-CVE-2016-20013	glibc@2.39-0ubuntu8.9	no fix listed
Medium	DLA-3783-1	expat@2.2.6-2+deb10u6	2.2.6-2+deb10u7
Medium	DLA-3740-1	gnutls28@3.6.7-4+deb10u10	3.6.7-4+deb10u12
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	DLA-3586-1	ncurses@6.1+20181013-2+deb10u3	6.1+20181013-2+deb10u4
Medium	UBUNTU-CVE-2025-59375	expat@2.6.1-2ubuntu0.4	2.6.1-2ubuntu0.5
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2018-10126	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2026-18924	curl@8.5.0-2ubuntu10.13	8.5.0-2ubuntu10.15
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.83.1	1.83.2
Medium	UBUNTU-CVE-2026-58016	glib2.0@2.80.0-6ubuntu3.8	2.80.0-6ubuntu3.9
Medium	DLA-3530-1	openssl@1.1.1n-0+deb10u5	1.1.1n-0+deb10u6
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.82.1	1.83.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.57latest	yesterday	1.0.53	1035264	2,813
3.1.56	23 days ago	1.0.51	1038310	3,307
3.1.55	1 month ago	1.0.50	00102691	7,637

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/tremolo/orchestra.svg)](https://charts.stackradar.io/charts/tremolo/orchestra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.