cilium Helm chart

Name: cilium Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

vks-helm-charts

Scored 14 Sept 2026

eBPF-based Networking, Security, and Observability

Latest 1.17.14 5 months agoapp version 1.17.14 0Artifact Hub

cilium 1.17.14 deploys 3 container images: quay.io/cilium/cilium, quay.io/cilium/cilium-envoy and quay.io/cilium/operator-generic. Across them, 447 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.45.0, fixed in 0.52.0. Chart.yaml declares kubeVersion >= 1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

4,0460054393

447 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/cilium/cilium×7	v1.17.14	0027191	1,979
quay.io/cilium/cilium-envoy	v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	0020138	1,438
quay.io/cilium/operator-generic	v1.17.14	00764	629

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

192 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-57433	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-13221	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-42496	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.45.0	0.52.0
Low	UBUNTU-CVE-2026-39979	jq@1.7.1-3ubuntu0.24.04.1	1.7.1-3ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-9076	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-12087	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.0.5	4.1.4
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.79.2	1.83.1
Low	UBUNTU-CVE-2026-63072	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
Low	UBUNTU-CVE-2026-45445	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2
Low	UBUNTU-CVE-2026-31789	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
Low	UBUNTU-CVE-2026-54874	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
Low	UBUNTU-CVE-2026-42766	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.45.0	0.52.0
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-9538	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-2219	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6
Low	UBUNTU-CVE-2026-42497	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Low	UBUNTU-CVE-2026-41992	gzip@1.12-1ubuntu3.1	1.12-1ubuntu3.2
Low	GHSA-6r28-9ppf-4hj5	github.com/gopacket/gopacket@v1.3.1	1.6.1
Low	UBUNTU-CVE-2026-75803	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
Low	GHSA-g6v3-7xmc-w563	github.com/gopacket/gopacket@v1.3.1	1.6.1
Low	UBUNTU-CVE-2026-4046	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-48959	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-5928	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-40164	jq@1.7.1-3ubuntu0.24.04.1	1.7.1-3ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-6791	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	GO-2026-4341	stdlib@go1.25.4	1.24.12
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.1	no fix listed
Low	UBUNTU-CVE-2026-42767	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-48962	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	GHSA-q6h5-q3q6-f87x	github.com/cilium/cilium@v1.17.14	1.17.16
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-63074	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
Low	UBUNTU-CVE-2025-14831	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.5+Fips1.1
Low	UBUNTU-CVE-2026-6238	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.45.0	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.47.0	0.55.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.17.14latest	5 months ago	1.17.14	0054393	4,046

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/vks-helm-charts/cilium.svg)](https://charts.stackradar.io/charts/vks-helm-charts/cilium)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.