pulsar 4.8.0 Helm chart

Name: pulsar Helm chart 4.8.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

apache

Not scored yet

Apache Pulsar Helm chart for Kubernetes

Version 4.8.0 todayapp version 5.0.0 13Artifact Hub

pulsar 4.8.0 deploys 10 container images: quay.io/prometheus/node-exporter, library/busybox, curlimages/curl, quay.io/kiwigrid/k8s-sidecar and 6 more. The highest contribution is GO-2024-2687 in stdlib go1.19, fixed in 1.21.9. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 10 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.10.2	001670	1,026
library/busybox	1.37.0	0000	0
curlimages/curl	8.18.0	102131	764
quay.io/kiwigrid/k8s-sidecar	2.5.0	102156	977
grafana/grafana	12.4.1	0053158	2,540
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.18.0	002070	1,060
victoriametrics/operator	v0.68.3	00650	650
apachepulsar/pulsar×17	5.0.0	—	not yet scanned
rancher/kubectl	v1.25.0	2362121	2,815
alpine/k8s×2	1.32.12	1060261	3,744

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

478 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-p4r4-xvrq-gvmc	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.8.4
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e
Low	ALPINE-CVE-2026-93990	expat@2.7.4-r0	2.8.5-r0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.42.0	0.52.0
Low	GO-2025-4116	golang.org/x/crypto@v0.42.0	0.43.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.4-r0	3.5.8-r0
Low	GO-2026-4870	stdlib@go1.25.3	1.25.9
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.42.0	0.52.0
Low	GO-2026-4971	stdlib@go1.25.3	1.25.10
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.2	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.2	0.6.4
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.2	0.6.4
Low	GO-2026-4947	stdlib@go1.25.3	1.25.9
Low	ALPINE-CVE-2026-11586	curl@8.18.0-r0	8.21.0-r0
Low	GHSA-mmfr-pmjx-hw9w	github.com/getkin/kin-openapi@v0.133.0	0.141.0
Low	ALPINE-CVE-2026-7774	python3@3.12.12-r0	3.14.7-r0
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2025-69419	openssl@3.5.4-r0	3.5.5-r0
Low	GO-2026-5037	stdlib@go1.25.3	1.25.11
Low	GO-2026-6603	stdlib@go1.25.3	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-5972	stdlib@go1.25.3	1.25.13
Low	GO-2026-6088	stdlib@go1.25.3	1.25.13
Low	GO-2026-6089	stdlib@go1.25.3	1.25.13
Low	GO-2026-6090	stdlib@go1.25.3	1.25.13
Low	GO-2026-6611	stdlib@go1.25.3	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.44.0	0.60.0
Low	GHSA-wf93-45jw-7689	pip@25.3	26.1.2
Low	GO-2023-1987	stdlib@go1.19	1.19.12
Low	ALPINE-CVE-2026-80229	curl@8.18.0-r0	8.22.0-r0
Low	GO-2026-5038	stdlib@go1.25.3	1.25.11
Low	ALPINE-CVE-2026-9669	python3@3.12.12-r0	3.14.7-r0
Low	ALPINE-CVE-2026-76641	expat@2.7.4-r0	2.8.4-r0
Low	GO-2026-6218	stdlib@go1.25.3	1.25.13
Low	GO-2026-5942	golang.org/x/net@v0.44.0	0.56.0
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/selinux@v1.12.0	1.13.0
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20220621081337-cb9428e4ac1e	0.1.1
Low	GO-2024-2610	stdlib@go1.19	1.21.8
Low	ALPINE-CVE-2026-42766	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r0	10.48-r0
Low	GO-2022-1095	stdlib@go1.19	1.18.8
Low	GO-2023-2041	stdlib@go1.19	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.42.0	0.56.0
Low	ALPINE-CVE-2026-3644	python3@3.12.12-r0	3.14.5-r0
Low	GO-2025-3751	stdlib@go1.24.0	1.23.10
Low	GO-2026-5064	github.com/containerd/containerd@v1.7.28	no fix listed
Low	GO-2023-2043	stdlib@go1.19	1.20.8
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.6.3	2.8.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.8.0latest	today	5.0.0	—	—
4.7.0	3 months ago	4.0.12	53259817	13,579

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/apache/pulsar.svg)](https://charts.stackradar.io/charts/apache/pulsar)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.