pulsar 4.8.0 Helm chart

Name: pulsar Helm chart 4.8.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

apache

Not scored yet

Apache Pulsar Helm chart for Kubernetes

Version 4.8.0 todayapp version 5.0.0 13Artifact Hub

pulsar 4.8.0 deploys 10 container images: quay.io/prometheus/node-exporter, library/busybox, curlimages/curl, quay.io/kiwigrid/k8s-sidecar and 6 more. The highest contribution is GO-2024-2687 in stdlib go1.19, fixed in 1.21.9. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 10 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.10.2	001670	1,026
library/busybox	1.37.0	0000	0
curlimages/curl	8.18.0	102131	764
quay.io/kiwigrid/k8s-sidecar	2.5.0	102156	977
grafana/grafana	12.4.1	0053158	2,540
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.18.0	002070	1,060
victoriametrics/operator	v0.68.3	00650	650
apachepulsar/pulsar×17	5.0.0	—	not yet scanned
rancher/kubectl	v1.25.0	2362121	2,815
alpine/k8s×2	1.32.12	1060261	3,744

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

478 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4342	stdlib@go1.25.3	1.24.12
Low	ALPINE-CVE-2026-82209	curl@8.18.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	GO-2023-1840	stdlib@go1.19	1.19.10
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	ALPINE-CVE-2026-45186	expat@2.7.4-r0	2.8.1-r0
Low	ALPINE-CVE-2026-80255	curl@8.18.0-r0	8.22.0-r0
Low	GO-2026-5970	golang.org/x/text@v0.29.0	0.39.0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-13608	curl@8.18.0-r0	8.22.0-r0
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.13.0
Low	GO-2025-3521	k8s.io/kubernetes@v1.32.12	no fix listed
Low	GO-2025-4155	stdlib@go1.25.3	1.24.11
Low	ALPINE-CVE-2026-9080	curl@8.18.0-r0	8.21.0-r0
Low	GO-2025-4014	stdlib@go1.24.0	1.24.8
Low	GO-2026-6303	golang.org/x/crypto@v0.42.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.42.0	0.56.0
Low	GO-2023-2382	stdlib@go1.19	1.20.12
Low	ALPINE-CVE-2026-19553	python3@3.12.12-r0	3.14.8-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.303.1	0.311.3
Low	GHSA-4x4m-3c2p-qppc	k8s.io/kubernetes@v1.25.0	1.31.12
Low	GO-2024-3105	stdlib@go1.19	1.22.7
Low	ALPINE-CVE-2026-9545	curl@8.18.0-r0	8.21.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.18.0-r0	8.22.0-r0
Low	GO-2025-4007	stdlib@go1.24.0	1.24.9
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	GO-2026-6608	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-12064	curl@8.18.0-r0	8.21.0-r0
Low	GO-2026-5764	github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0	1.97.3
Low	GO-2026-5764	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4	1.7.8
Low	GO-2026-5764	github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.63.1	1.65.0
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v28.2.2+incompatible	29.2.0
Low	ALPINE-CVE-2026-8932	curl@8.18.0-r0	8.21.0-r0
Low	GHSA-8xwf-rjm4-xvhv	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GO-2026-6607	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-8286	curl@8.18.0-r0	8.21.0-r0
Low	GHSA-jxpm-75mh-9fp7	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GHSA-pxq6-2prw-chj9	github.com/moby/moby@v28.0.1+incompatible	no fix listed
Low	GO-2025-4013	stdlib@go1.24.0	1.24.8
Low	GO-2026-6609	stdlib@go1.25.3	1.26.9
Low	ALPINE-CVE-2026-17084	python3@3.12.12-r0	3.14.8-r0
Low	GO-2025-3749	stdlib@go1.24.0	1.24.4
Low	ALPINE-CVE-2026-80230	curl@8.18.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-6253	curl@8.18.0-r0	8.20.0-r0
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GO-2025-3420	stdlib@go1.19	1.22.11
Low	GO-2025-3956	stdlib@go1.24.0	1.23.12
Low	GO-2026-4946	stdlib@go1.25.3	1.25.9
Low	ALPINE-CVE-2026-6276	curl@8.18.0-r0	8.20.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.8.0latest	today	5.0.0	—	—
4.7.0	3 months ago	4.0.12	53259817	13,579

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/apache/pulsar.svg)](https://charts.stackradar.io/charts/apache/pulsar)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.