consul 2.0.3 Helm chart

Name: consul Helm chart 2.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wenerme

Scored 14 Sept 2026

Official HashiCorp Consul Chart

Version 2.0.3 1 month agoapp version 2.0.3 0Artifact Hub

consul 2.0.3 deploys 2 container images: hashicorp/consul-k8s-control-plane and hashicorp/consul. Across them, 74 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

69500866

74 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
hashicorp/consul-k8s-control-plane×6	2.0.3	00421	254
hashicorp/consul	2.0.3	00445	441

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

49 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.82.1	1.83.1
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-49839	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5026	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.82.1	1.82.2
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5972	stdlib@go1.26.5	1.25.13
Low	GO-2026-6088	stdlib@go1.26.5	1.25.13
Low	GO-2026-6089	stdlib@go1.26.5	1.25.13
Low	GO-2026-6090	stdlib@go1.26.5	1.25.13
Low	GO-2026-5942	stdlib@go1.26.5	1.26.6
Low	GO-2026-6218	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-41256	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43894	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43896	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.82.1	1.83.1
Low	ALPINE-CVE-2026-47770	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-6355	golang.org/x/crypto@v0.53.0	0.56.0
Low	ALPINE-CVE-2026-41257	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.53.0	0.56.0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-54679	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43895	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5932	golang.org/x/crypto@v0.53.0	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.4latest	3 days ago	2.0.4	0002	8
2.0.3	1 month ago	2.0.3	00866	695

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wenerme/consul.svg)](https://charts.stackradar.io/charts/wenerme/consul)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.