orchestra 3.1.58 Helm chart

Name: orchestra Helm chart 3.1.58: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

tremolo

Scored 12 Oct 2026

A Helm chart for Kubernetes

Version 3.1.58 todayapp version 1.0.53 0Artifact Hub

orchestra 3.1.58 deploys 5 container images: ghcr.io/openunison/openunison-k8s, ghcr.io/headlamp-k8s/headlamp, ghcr.io/tremolosecurity/kube-oidc-proxy, ghcr.io/openunison/openunison-kubernetes-operator and 1 more. Across them, 312 findings — 1 critical, 0 high. The highest contribution is DLA-3807-1 in glibc 2.28-10+deb10u2, fixed in 2.28-10+deb10u3.

Radar Score

3,0311038273

312 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/openunison/openunison-k8s	1.0.53	00779	763
ghcr.io/headlamp-k8s/headlamp	v0.45.0	00937	525
ghcr.io/tremolosecurity/kube-oidc-proxy	1.0.13	00964	678
ghcr.io/openunison/openunison-kubernetes-operator	1.0.15	00775	722
ghcr.io/tremolosecurity/python-slim-nonroot/python3	1.0.0	10618	343

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

135 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-77214	expat@2.6.1-2ubuntu0.6	no fix listed
Low	UBUNTU-CVE-2024-10524	wget@1.21.4-1ubuntu4.5	no fix listed
Low	UBUNTU-CVE-2026-82560	perl@5.38.2-3.2ubuntu0.6	no fix listed
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	DLA-3660-1	gnutls28@3.6.7-4+deb10u10	3.6.7-4+deb10u11
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.5	no fix listed
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-6603	stdlib@go1.27.1	1.27.2
Low	GO-2026-6603	golang.org/x/net@v0.57.0	0.60.0
Low	UBUNTU-CVE-2026-83357	openjdk-21@21.0.12.1+1-1~24.04.4	no fix listed
Low	GO-2026-6611	stdlib@go1.27.1	1.27.2
Low	GO-2026-6611	golang.org/x/net@v0.57.0	0.60.0
Low	GHSA-wf93-45jw-7689	pip@23.1.2	26.1.2
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu1.1+Fips2
Low	UBUNTU-CVE-2026-83408	openjdk-21@21.0.12.1+1-1~24.04.4	no fix listed
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GO-2026-6355	golang.org/x/crypto@v0.53.0	0.56.0
Low	GO-2026-5064	github.com/containerd/containerd@v1.7.33	no fix listed
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u3	6.1+20181013-2+deb10u5
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	UBUNTU-CVE-2026-47057	openjdk-21@21.0.12.1+1-1~24.04.4	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.53.0	0.56.0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-6608	stdlib@go1.27.1	1.26.9
Low	UBUNTU-CVE-2026-93990	expat@2.6.1-2ubuntu0.6	no fix listed
Low	GO-2026-6607	stdlib@go1.27.1	1.26.9
Low	GO-2026-6609	stdlib@go1.27.1	1.26.9
Low	UBUNTU-CVE-2026-47058	openjdk-21@21.0.12.1+1-1~24.04.4	no fix listed
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.6	1.18.7
Low	UBUNTU-CVE-2025-5222	icu@74.2-1ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed
Low	DLA-3782-1	util-linux@2.33.1-0.1	2.33.1-0.1+deb10u1
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-6613	stdlib@go1.27.1	1.26.9
Low	GO-2026-6605	stdlib@go1.27.1	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.57.0	0.60.0
Low	GO-2026-6610	stdlib@go1.27.1	1.27.2
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.40.0	0.46.2
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.3	no fix listed
Low	GHSA-pg57-6jwg-q645	github.com/containerd/containerd@v1.7.33	1.7.36
Low	UBUNTU-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg1-5ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	UBUNTU-CVE-2024-52616	avahi@0.8-13ubuntu6.2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.58latest	today	1.0.53	1038273	3,031
3.1.57	5 days ago	1.0.53	1038297	3,241
3.1.56	27 days ago	1.0.51	1041343	3,706
3.1.55	1 month ago	1.0.50	00102691	7,637

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/tremolo/orchestra.svg)](https://charts.stackradar.io/charts/tremolo/orchestra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.