StackRadar

wallarm-sidecar 6.13.0 Helm chart

wallarmOfficialVerified publisher

Scored 14 Sept 2026

Sidecar controller for Kubernetes. Injects sidecar proxy based on NGINX with Wallarm module and helper services.

Version 6.13.0 1 month agoapp version 6.13.0 2Artifact Hub

wallarm-sidecar 6.13.0 deploys 3 container images: wallarm/sidecar-controller, wallarm/node-helpers and registry.k8s.io/ingress-nginx/kube-webhook-certgen. Across them, 128 findings0 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.4-r0, fixed in 3.3.6-r0. Chart.yaml declares kubeVersion >=1.19.16-0; rendered for Kubernetes 1.19.16.

Radar Score

1,1770214112

128 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
wallarm/sidecar-controller1.8.001915345
wallarm/node-helpers×46.13.000416212
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2v1.4.101181620

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

121 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighALPINE-CVE-2025-15467openssl@3.3.4-r03.3.6-r0
HighGHSA-4v7x-pqxf-cx7mgolang.org/x/net@v0.22.00.23.0
MediumALPINE-CVE-2026-63073openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2025-9230openssl@3.3.4-r03.3.5-r0
MediumALPINE-CVE-2026-18798openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2025-9231openssl@3.3.4-r03.3.5-r0
MediumALPINE-CVE-2026-63076openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-31790openssl@3.3.4-r03.3.7-r0
MediumALPINE-CVE-2026-14457openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2025-9232openssl@3.3.4-r03.3.5-r0
MediumALPINE-CVE-2026-28388openssl@3.3.4-r03.3.7-r0
MediumALPINE-CVE-2025-69421openssl@3.3.4-r03.3.6-r0
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.18.00.27.0
MediumALPINE-CVE-2026-28387openssl@3.3.4-r03.3.7-r0
MediumALPINE-CVE-2026-28389openssl@3.3.4-r03.3.7-r0
MediumALPINE-CVE-2026-28390openssl@3.3.4-r03.3.7-r0
LowALPINE-CVE-2025-69420openssl@3.3.4-r03.3.6-r0
LowALPINE-CVE-2026-14456openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-63072openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-31789openssl@3.3.4-r03.3.7-r0
LowALPINE-CVE-2025-69419openssl@3.3.4-r03.3.6-r0
LowALPINE-CVE-2026-54874openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-63075openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-22184zlib@1.3.1-r11.3.2-r0
LowALPINE-CVE-2025-15468openssl@3.3.4-r03.3.6-r0
LowALPINE-CVE-2026-75803openssl@3.5.7-r03.5.8-r0
LowGO-2026-4341stdlib@go1.22.21.24.12
LowGO-2024-2887stdlib@go1.22.21.21.11
LowALPINE-CVE-2026-63074openssl@3.5.7-r03.5.8-r0
LowGO-2024-2963stdlib@go1.22.21.21.12
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.22.00.55.0
LowALPINE-CVE-2026-40200musl@1.2.5-r11.2.5-r3
LowALPINE-CVE-2025-66199openssl@3.3.4-r03.3.6-r0
LowGHSA-vvgc-356p-c3xwgolang.org/x/net@v0.22.00.38.0
LowALPINE-CVE-2026-22796openssl@3.3.4-r03.3.6-r0
LowGO-2024-3106stdlib@go1.22.21.22.7
LowGO-2024-3107stdlib@go1.22.21.22.7
LowGO-2024-2824stdlib@go1.22.21.22.3
LowGO-2024-3333golang.org/x/net@v0.22.00.33.0
LowGO-2024-3105stdlib@go1.22.21.22.7
LowGO-2026-4981stdlib@go1.22.21.25.10
LowGO-2025-3563stdlib@go1.22.21.23.8
LowGO-2026-4977stdlib@go1.22.21.25.10
LowGO-2026-4986stdlib@go1.22.21.25.10
LowGO-2026-4918stdlib@go1.22.21.25.10
LowGO-2026-4918golang.org/x/net@v0.22.00.53.0
LowGO-2026-4337stdlib@go1.22.21.24.13
LowGO-2026-4601stdlib@go1.22.21.25.8
LowGO-2026-5026golang.org/x/net@v0.22.00.55.0
LowGO-2026-5026stdlib@go1.22.21.25.13

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.13.1latest17 days ago6.13.1021096965
6.13.01 month ago6.13.002141121,177

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/wallarm/wallarm-sidecar.svg)](https://charts.stackradar.io/charts/wallarm/wallarm-sidecar)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.