StackRadar

kubedb-provider-gcp 2026.10.12 Helm chart

appscodeVerified publisher

Not scored yet

A Helm chart for KubeDB GCP Provider for Crossplane

Version 2026.10.12 yesterdayapp version v0.29.0 0Artifact Hub

kubedb-provider-gcp 2026.10.12 deploys 2 container images: ghcr.io/kubedb/provider-gcp and ghcr.io/appscode/kubectl-nonroot. The highest contribution is GO-2024-2687 in golang.org/x/net v0.9.0, fixed in 0.23.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 2 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/kubedb/provider-gcpv0.29.037791433,658
ghcr.io/appscode/kubectl-nonroot1.3400854708

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

235 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.47.01.82.1
LowGO-2024-2888stdlib@go1.19.11.21.11
LowALPINE-CVE-2023-42365busybox@1.35.0-r291.35.0-r31
LowGO-2026-4976stdlib@go1.24.131.25.10
LowGHSA-jc7w-c686-c4v9github.com/ulikunitz/xz@v0.5.80.5.15
LowGO-2026-5039stdlib@go1.24.131.25.11
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.42.35no fix listed
LowGO-2026-5856stdlib@go1.24.131.25.12
LowGO-2025-3750stdlib@go1.19.11.23.10
LowGO-2026-5027golang.org/x/net@v0.38.00.55.0
LowGO-2026-5029golang.org/x/net@v0.38.00.55.0
LowGO-2026-5030golang.org/x/net@v0.38.00.55.0
LowGO-2026-4340stdlib@go1.19.11.24.12
LowGO-2026-5320github.com/yuin/goldmark@v1.4.131.7.17
LowALPINE-CVE-2024-13176openssl@3.0.7-r23.0.19-r0
LowGHSA-m425-mq94-257ggoogle.golang.org/grpc@v1.47.01.56.3
LowGHSA-qxp5-gwg8-xv66golang.org/x/net@v0.23.00.36.0
LowGO-2025-3503stdlib@go1.19.11.23.7
LowGHSA-jpxj-2jvg-6jv9github.com/hashicorp/go-getter@v1.6.21.7.0
LowGO-2026-4869stdlib@go1.24.131.25.9
LowGO-2026-6599stdlib@go1.24.131.26.9
LowGO-2026-6600stdlib@go1.24.131.26.9
LowGO-2026-6617golang.org/x/net@v0.38.00.60.0
LowGO-2026-6617stdlib@go1.24.131.26.9
LowALPINE-CVE-2026-22795openssl@3.0.7-r23.0.19-r0
LowGO-2025-3447stdlib@go1.19.11.22.12
LowALPINE-CVE-2025-68160openssl@3.0.7-r23.0.19-r0
LowGHSA-29wx-vh33-7x7rgithub.com/golang-jwt/jwt/v4@v4.2.04.5.1
LowGO-2026-4403stdlib@go1.19.11.23.9
LowGO-2025-3547k8s.io/kubernetes@v1.34.5no fix listed
LowALPINE-CVE-2025-69418openssl@3.0.7-r23.0.19-r0
LowGO-2026-5932golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898no fix listed
LowGO-2026-5024golang.org/x/sys@v0.31.00.44.0
LowGO-2022-0635github.com/aws/aws-sdk-go@v1.42.35no fix listed
LowGO-2026-4602stdlib@go1.24.131.25.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2026.10.12latestyesterdayv0.29.0——
2026.7.107 days agov0.27.037861984,359

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/appscode/kubedb-provider-gcp.svg)](https://charts.stackradar.io/charts/appscode/kubedb-provider-gcp)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Oct 2026 · scanned 13 Oct 2026 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.