kubedb-one Helm chart

Name: kubedb-one Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

appscode

Scored 14 Sept 2026

KubeDB and Stash by AppsCode - Production ready databases on Kubernetes

Latest 2023.12.28 1 year agodeploys tag v0.25.0 0Artifact Hub

kubedb-one 2023.12.28 deploys 10 container images: ghcr.io/kubedb/kubedb-autoscaler, ghcr.io/kubedb/kubedb-dashboard, ghcr.io/kubedb/kubedb-ops-manager, ghcr.io/kubedb/kubedb-provisioner and 6 more. Across them, 1,433 findings — 1 critical, 29 high — 3 on CISA KEV. The highest contribution is DEBIAN-CVE-2024-2961 in glibc 2.36-9+deb12u3, fixed in 2.36-9+deb12u6.

Radar Score

15,2001291901,213

1,433 findings over 10 of 10 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubedb/kubedb-autoscaler	v0.25.0	1650166	2,792
ghcr.io/kubedb/kubedb-dashboard	v0.16.0	0316128	1,482
ghcr.io/kubedb/kubedb-ops-manager	v0.27.1	0319132	1,578
ghcr.io/kubedb/kubedb-provisioner	v0.40.2	0319132	1,578
ghcr.io/kubedb/kubedb-schema-manager	v0.16.0	0317128	1,495
ghcr.io/kubedb/kubedb-webhook-server	v0.16.2	0318131	1,530
ghcr.io/stashed/stash-enterprise	v0.32.0	0325160	2,005
prom/pushgateway	v1.4.2	0322151	1,925
ghcr.io/appscode/kubectl	v1.22	0000	0
ghcr.io/stashed/stash-crd-installer	v0.32.0	02485	815

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

306 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-6wrf-mxfj-pf5p	github.com/docker/docker@v20.10.20+incompatible	20.10.24
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.14.0	0.52.0
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c	0.0.0-20220412211240-33da011f77ad
Medium	DEBIAN-CVE-2026-31790	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-34180	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	DEBIAN-CVE-2026-7383	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Medium	DEBIAN-CVE-2024-33601	glibc@2.36-9+deb12u3	2.36-9+deb12u7
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.9.0	1.9.1
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3
Medium	DEBIAN-CVE-2023-6780	glibc@2.36-9+deb12u3	2.36-9+deb12u4
Medium	GHSA-hqxw-f8mx-cpmw	github.com/docker/distribution@v2.8.1+incompatible	2.8.2-beta.1
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.14.0	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.14.0	0.35.0
Medium	DEBIAN-CVE-2026-28388	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2025-69421	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Medium	GO-2022-1144	stdlib@go1.18	1.18.9
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.13.0	0.27.0
Medium	DEBIAN-CVE-2026-28387	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-28389	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-28390	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-69420	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.14.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.14.0	0.52.0
Low	DSA-5611-1	glibc@2.36-9+deb12u3	2.36-9+deb12u4
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.4.2	4.5.2
Low	GO-2021-0263	stdlib@go1.16.9	1.16.10
Low	DEBIAN-CVE-2026-9076	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Low	GO-2023-1571	stdlib@go1.18	1.19.6
Low	GHSA-7rg2-cxvp-9p7p	github.com/prometheus/exporter-toolkit@v0.6.1	0.7.2
Low	GHSA-5pf6-2qwx-pxm2	github.com/cloudevents/sdk-go/v2@v2.11.0	2.15.2
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.58.3	1.83.1
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u3	2.36-9+deb12u14
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u3	2.36-9+deb12u11
Low	GO-2022-0435	stdlib@go1.18	1.17.9
Low	DEBIAN-CVE-2026-63072	openssl@3.0.11-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-45445	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Low	GO-2022-0288	stdlib@go1.16.9	1.16.12
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.0.0-20211209124913-491a49abca63
Low	DEBIAN-CVE-2024-33600	glibc@2.36-9+deb12u3	2.36-9+deb12u7
Low	GO-2023-2102	stdlib@go1.20.7	1.20.10
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u3	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-31789	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Low	DEBIAN-CVE-2025-69419	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-54874	openssl@3.0.11-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-42766	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v20.10.20+incompatible	20.10.24
Low	GHSA-r4pg-vg54-wxx4	github.com/cert-manager/cert-manager@v1.9.1	1.12.14
Low	GO-2021-0264	stdlib@go1.16.9	1.16.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2023.12.28latest	1 year ago	v0.25.0	1291901,213	15,200

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/appscode/kubedb-one.svg)](https://charts.stackradar.io/charts/appscode/kubedb-one)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.