tfy-cloudflared 0.6.0 Helm chart

Name: tfy-cloudflared Helm chart 0.6.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

truefoundry

Scored 18 Sept 2026

Cloudflare Tunnel client for secure, outbound-only connections between Kubernetes services and Cloudflare's network

Version 0.6.0 2 days agoapp version 2026.3.0 0Artifact Hub

tfy-cloudflared 0.6.0 deploys 2 container images: public.ecr.aws/docker/library/caddy and tfy.jfrog.io/tfy-mirror/cloudflare/cloudflared. Across the 1 measured, 183 findings — 0 critical, 5 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-2650 in openssl 1.1.1t-r0, fixed in 1.1.1u-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

2,0250522156

183 findings over 1 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
public.ecr.aws/docker/library/caddy	2.6.3	0522156	2,025
tfy.jfrog.io/tfy-mirror/cloudflare/cloudflared	2026.3.0	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

183 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4946	stdlib@go1.20	1.25.9
Low	GO-2026-4603	stdlib@go1.20	1.25.8
Low	GO-2026-6303	golang.org/x/crypto@v0.5.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.5.0	0.56.0
Low	GO-2026-4982	stdlib@go1.20	1.25.10
Low	GO-2026-6091	stdlib@go1.20	1.25.13
Low	GHSA-j7c9-79x7-8hpr	github.com/smallstep/certificates@v0.23.2	0.29.0
Low	GO-2025-3750	stdlib@go1.20	1.23.10
Low	GO-2026-4864	stdlib@go1.20	1.25.9
Low	GO-2025-3447	stdlib@go1.20	1.22.12
Low	GO-2026-4865	stdlib@go1.20	1.25.9
Low	GO-2026-4869	stdlib@go1.20	1.25.9
Low	GO-2026-5320	github.com/yuin/goldmark@v1.5.4	1.7.17
Low	GO-2026-4340	stdlib@go1.20	1.24.12
Low	GO-2025-4175	stdlib@go1.20	1.24.11
Low	GO-2026-4403	stdlib@go1.20	1.23.9
Low	GO-2026-5025	golang.org/x/net@v0.5.0	0.55.0
Low	GO-2026-4970	stdlib@go1.20	1.25.12
Low	GO-2026-5027	golang.org/x/net@v0.5.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.5.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.5.0	0.55.0
Low	GHSA-vcc4-2c75-vc9v	github.com/caddyserver/caddy/v2@v2.6.3	2.11.4
Low	GO-2026-4316	github.com/go-chi/chi@v4.1.2+incompatible	no fix listed
Low	GO-2026-4602	stdlib@go1.20	1.25.8
Low	ALPINE-CVE-2023-2602	libcap@2.64-r0	2.64-r1
Low	GHSA-gx7w-56w6-g48x	github.com/caddyserver/caddy/v2@v2.6.3	2.11.3
Low	GO-2026-5024	golang.org/x/sys@v0.5.0	0.44.0
Low	GO-2023-2153	google.golang.org/grpc@v1.52.3	1.56.3
Low	GO-2026-5408	github.com/caddyserver/caddy/v2@v2.6.3	2.11.3
Low	GO-2026-5932	golang.org/x/crypto@v0.5.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.52.3	1.82.1
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v4@v4.17.2	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.13.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.0latest	2 days ago	2026.3.0	0522156	2,025
0.5.0	1 month ago	2026.3.0	0522156	2,025

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/truefoundry/tfy-cloudflared.svg)](https://charts.stackradar.io/charts/truefoundry/tfy-cloudflared)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.