orchestra 3.1.57 Helm chart

Name: orchestra Helm chart 3.1.57: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

tremolo

Scored 7 Oct 2026

A Helm chart for Kubernetes

Version 3.1.57 yesterdayapp version 1.0.53 0Artifact Hub

orchestra 3.1.57 deploys 5 container images: ghcr.io/openunison/openunison-k8s, ghcr.io/headlamp-k8s/headlamp, ghcr.io/tremolosecurity/kube-oidc-proxy, ghcr.io/openunison/openunison-kubernetes-operator and 1 more. Across them, 300 findings — 1 critical, 0 high. The highest contribution is DLA-3807-1 in glibc 2.28-10+deb10u2, fixed in 2.28-10+deb10u3.

Radar Score

2,8131035264

300 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openunison/openunison-k8s	1.0.53	00786	799
ghcr.io/headlamp-k8s/headlamp	v0.45.0	00820	326
ghcr.io/tremolosecurity/kube-oidc-proxy	1.0.13	00748	477
ghcr.io/openunison/openunison-kubernetes-operator	1.0.13	00792	868
ghcr.io/tremolosecurity/python-slim-nonroot/python3	1.0.0	10618	343

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

157 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	DLA-3807-1	glibc@2.28-10+deb10u2	2.28-10+deb10u3
Medium	GHSA-cx63-2mw6-8hw5	setuptools@65.5.1	70.0.0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	PYSEC-2025-49	setuptools@65.5.1	78.1.1
Medium	UBUNTU-CVE-2016-20013	glibc@2.39-0ubuntu8.9	no fix listed
Medium	DLA-3783-1	expat@2.2.6-2+deb10u6	2.2.6-2+deb10u7
Medium	DLA-3740-1	gnutls28@3.6.7-4+deb10u10	3.6.7-4+deb10u12
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	DLA-3586-1	ncurses@6.1+20181013-2+deb10u3	6.1+20181013-2+deb10u4
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2018-10126	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.83.1	1.83.2
Medium	DLA-3530-1	openssl@1.1.1n-0+deb10u5	1.1.1n-0+deb10u6
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.82.1	1.83.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2024-10524	wget@1.21.4-1ubuntu4.5	no fix listed
Low	UBUNTU-CVE-2026-82560	perl@5.38.2-3.2ubuntu0.6	no fix listed
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	DLA-3660-1	gnutls28@3.6.7-4+deb10u10	3.6.7-4+deb10u11
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.5	no fix listed
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.22.0	2.22.2
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-83357	openjdk-21@21.0.12.1+1-1~24.04.4	no fix listed
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed
Low	GHSA-wf93-45jw-7689	pip@23.1.2	26.1.2
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-p6pp-m3f8-5c89	jackson-core@2.22.0	2.22.3
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu1.1+Fips2
Low	UBUNTU-CVE-2026-83408	openjdk-21@21.0.12.1+1-1~24.04.4	no fix listed
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GO-2026-6355	golang.org/x/crypto@v0.53.0	0.56.0
Low	GO-2026-5064	github.com/containerd/containerd@v1.7.33	no fix listed
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.22.0	2.22.3
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u3	6.1+20181013-2+deb10u5
Low	UBUNTU-CVE-2026-47057	openjdk-21@21.0.12.1+1-1~24.04.4	no fix listed
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.22.0	2.22.3
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.22.0	2.22.3
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.53.0	0.56.0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.57latest	yesterday	1.0.53	1035264	2,813
3.1.56	23 days ago	1.0.51	1038310	3,307
3.1.55	1 month ago	1.0.50	00102691	7,637

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/tremolo/orchestra.svg)](https://charts.stackradar.io/charts/tremolo/orchestra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.