tfy-cloudflared 0.6.0 Helm chart
truefoundryVerified publisherScored 18 Sept 2026
Cloudflare Tunnel client for secure, outbound-only connections between Kubernetes services and Cloudflare's network
Version 0.6.0 2 days agoapp version 2026.3.0 0Artifact Hub
tfy-cloudflared 0.6.0 deploys 2 container images: public.ecr.aws/docker/library/caddy and tfy.jfrog.io/tfy-mirror/cloudflare/cloudflared. Across the 1 measured, 183 findings — 0 critical, 5 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-2650 in openssl 1.1.1t-r0, fixed in 1.1.1u-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| public.ecr.aws/ | 2.6.3 | 0522156 | 2,025 |
| tfy.jfrog.io/ | 2026.3.0 | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | GHSA-vvpx-j8f3-3w6h | golang.org/ | 0.7.0 |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | ALPINE-CVE-2023-0464 | openssl | 1.1.1t-r1 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | GHSA-7jwh-3vrq-q3m8 | github.com/ | 2.3.3 |
| Medium | GHSA-mrww-27vc-gghv | github.com/ | 4.18.2 |
| Medium | ALPINE-CVE-2023-3446 | openssl | 1.1.1u-r2 |
| Medium | ALPINE-CVE-2023-5678 | openssl | 1.1.1w-r1 |
| Medium | GHSA-rcjv-mgp8-qvmr | go.opentelemetry.io/ | 0.44.0 |
| Medium | GHSA-8r3f-844c-mc37 | google.golang.org/ | 1.33.0 |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-c33x-xqrf-c478 | github.com/ | 0.42.0 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | GHSA-m7wr-2xf7-cm9p | github.com/ | 4.18.2 |
| Medium | GHSA-5r3v-vc8m-m96g | github.com/ | 2.11.1 |
| Medium | GHSA-4f99-4q7p-p3gh | github.com/ | 1.9.1 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.6.0latest | 2 days ago | 2026.3.0 | 0522156 | 2,025 |
| 0.5.0 | 1 month ago | 2026.3.0 | 0522156 | 2,025 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.