apisix 2.18.0 Helm chart

Name: apisix Helm chart 2.18.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wener

Scored 3 Oct 2026

A Helm chart for Apache APISIX v3

Version 2.18.0 2 days agoapp version 3.19.0 0Artifact Hub

apisix 2.18.0 deploys 3 container images: library/busybox, apache/apisix and bitnamilegacy/etcd. Across them, 321 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2019-1010022 in glibc 2.36-9+deb12u10, with no fix listed.

Radar Score

3,3950048273

321 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.28	0000	0
apache/apisix	3.19.0-ubuntu	00863	646
bitnamilegacy/etcd×2	latest	0040210	2,749

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

232 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u10	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.36.0	0.45.0
Low	GO-2025-4011	stdlib@go1.23.10	1.24.8
Low	GO-2025-4015	stdlib@go1.23.10	1.24.8
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.34.0	1.43.0
Low	GO-2026-4440	golang.org/x/net@v0.38.0	0.45.0
Low	GO-2025-4175	stdlib@go1.23.10	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.71.1	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.36.0	0.52.0
Low	GO-2026-4864	stdlib@go1.23.10	1.25.9
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	GO-2026-4441	golang.org/x/net@v0.38.0	0.45.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.36.0	0.45.0
Low	GO-2026-4603	stdlib@go1.23.10	1.25.8
Low	GO-2026-4865	stdlib@go1.23.10	1.25.9
Low	GO-2026-4982	stdlib@go1.23.10	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.38.0	0.55.0
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GO-2026-6091	stdlib@go1.23.10	1.25.13
Low	BIT-etcd-2026-33343	etcd@3.6.1-1	3.4.42
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3ubuntu3.9	no fix listed
Low	GO-2025-4008	stdlib@go1.23.10	1.24.8
Low	GO-2025-4010	stdlib@go1.23.10	1.24.8
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.71.1	1.82.1
Low	UBUNTU-CVE-2026-89158	pcre2@10.42-4ubuntu2.1	no fix listed
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-86143	libxml2@2.9.14+dfsg-1.3ubuntu3.9	no fix listed
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.4	5.38.2-3.2ubuntu0.6
Low	GO-2026-4976	stdlib@go1.23.10	1.25.10
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.34.0	1.40.0
Low	GO-2026-5039	stdlib@go1.23.10	1.25.11
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2011-3374	apt@2.6.1	no fix listed
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2013-4392	systemd@252.38-1~deb12u1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11
Low	UBUNTU-CVE-2026-75806	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-5856	stdlib@go1.23.10	1.25.12
Low	UBUNTU-CVE-2026-86139	libxml2@2.9.14+dfsg-1.3ubuntu3.9	no fix listed
Low	DEBIAN-CVE-2026-40225	systemd@252.38-1~deb12u1	252.39-1~deb12u2
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	DEBIAN-CVE-2025-68973	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2
Low	DEBIAN-CVE-2023-31439	systemd@252.38-1~deb12u1	no fix listed
Low	UBUNTU-CVE-2026-86142	libxml2@2.9.14+dfsg-1.3ubuntu3.9	no fix listed
Low	UBUNTU-CVE-2026-8674	glibc@2.39-0ubuntu8.9	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.18.0latest	2 days ago	3.19.0	0048273	3,395
2.17.1	3 days ago	3.18.0	0052307	3,744
2.17.0	1 month ago	3.18.0	0052307	3,744

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wener/apisix.svg)](https://charts.stackradar.io/charts/wener/apisix)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.