StackRadar

catalyst-agents 0.1.33 Helm chart

catalyst-agents

Not scored yet

A Helm chart for Catalyst Agents developer inner-loop

Version 0.1.33deploys tag v2.8.3 0Artifact Hub

catalyst-agents 0.1.33 deploys 18 container images: ghcr.io/chaos-mesh/chaos-daemon, quay.io/prometheus/node-exporter, grafana/loki-canary, ghcr.io/chaos-mesh/chaos-mesh and 14 more. The highest contribution is ALPINE-CVE-2025-48384 in git 2.47.2-r0, fixed in 2.47.3-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 18 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

18 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/chaos-mesh/chaos-daemonv2.8.300382632,946
quay.io/prometheus/node-exporterv1.12.1-distroless0001278
grafana/loki-canary3.0.003161161,380
ghcr.io/chaos-mesh/chaos-meshv2.8.300658591
ghcr.io/chaos-mesh/chaos-corednsv0.2.803261021,537
quay.io/kiwigrid/k8s-sidecar×22.10.100411190
grafana/grafana13.1.300852582
registry.k8s.io/kube-state-metrics/kube-state-metricsv2.19.100024170
quay.io/prometheus-operator/prometheus-operatorv0.93.000015115
nginxinc/nginx-unprivileged1.24-alpine121516679
otel/opentelemetry-collector-contrib0.156.000031222
library/nginxalpinenot yet scanned
library/memcached×21.6.23-alpine02511311
prom/memcached-exporter×2v0.14.2011096981
grafana/loki3.0.003161191,409
grafana/tempo2.5.002281501,867
ghcr.io/jkroepke/kube-webhook-certgen×21.8.5000856
alpine/k8s1.32.317602753,985

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

739 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalALPINE-CVE-2025-48384KEVgit@2.47.2-r02.47.3-r0
CriticalALPINE-CVE-2023-44487KEVnginx@1.24.0-r11.24.0-r7
HighALPINE-CVE-2025-6965sqlite@3.48.0-r03.48.0-r3
HighALPINE-CVE-2025-15467openssl@3.3.3-r03.3.6-r0
HighALPINE-CVE-2024-6119openssl@3.1.4-r13.1.7-r0
HighALPINE-CVE-2024-2398curl@8.5.0-r08.7.1-r0
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.5.00.17.0
HighGHSA-v23v-6jw2-98fqgithub.com/docker/docker@v20.10.24+incompatible23.0.15
HighGHSA-qppj-fm5r-hxr3KEVgolang.org/x/net@v0.12.00.17.0
HighGHSA-4v7x-pqxf-cx7mgolang.org/x/net@v0.22.00.23.0
HighALPINE-CVE-2024-2511openssl@3.1.4-r13.1.4-r6
HighGHSA-7fxm-f474-hf8wk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.24.17
MediumGO-2024-2687stdlib@go1.20.51.21.9
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.21.00.52.0
MediumALPINE-CVE-2024-7264curl@8.5.0-r08.9.1-r0
MediumGHSA-f5f7-6478-qm6pk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.19.15
MediumALPINE-CVE-2024-5535openssl@3.1.4-r13.1.6-r0
MediumDEBIAN-CVE-2019-1010022glibc@2.36-9+deb12u14no fix listed
MediumDEBIAN-CVE-2023-45853zlib@1:1.2.13.dfsg-1no fix listed
MediumGHSA-hq6q-c2x6-hmchk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.25.16
MediumGHSA-cg3q-j54f-5p7pgithub.com/prometheus/client_golang@v1.11.01.11.1
MediumDEBIAN-CVE-2014-8166cups@2.4.2-3+deb12u9no fix listed
MediumGHSA-wqv3-8cm6-h6wgk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.16.11
MediumDEBIAN-CVE-2018-20796glibc@2.36-9+deb12u14no fix listed
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.21.00.31.0
MediumGHSA-34jx-wx69-9x8vk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.11.9
MediumGHSA-q78c-gwqw-jcmck8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.24.17
MediumDEBIAN-CVE-2019-1010023glibc@2.36-9+deb12u14no fix listed
MediumGHSA-vvpx-j8f3-3w6hgolang.org/x/net@v0.0.0-20210614182718-04defd469f4e0.7.0
MediumGHSA-33c5-9fx5-fvjmk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.16.13
MediumALPINE-CVE-2024-6197curl@8.5.0-r08.9.0-r0
MediumGHSA-hp87-p4gw-j4gqgopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b3.0.1
MediumGHSA-8c26-wmh5-6g9vgolang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb830.0.0-20220314234659-1baeb1ce4c0b
MediumGHSA-27wf-5967-98gxk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.28.12
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.12.00.17.0
MediumGHSA-g42g-737j-qx6jk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa1.18.18
MediumGHSA-69cg-p879-7622golang.org/x/net@v0.0.0-20210614182718-04defd469f4e0.0.0-20220906165146-f3363e06e74c
MediumALPINE-CVE-2024-45492expat@2.6.2-r02.6.3-r0
MediumGHSA-38jv-5279-wg99urllib3@2.3.02.6.3
MediumALPINE-CVE-2024-4741openssl@3.1.4-r13.1.6-r0
MediumALPINE-CVE-2025-4517python3@3.12.9-r03.12.11-r0
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.62.11.79.3
MediumGHSA-j9wf-vvm6-4r9wk8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aano fix listed
MediumALPINE-CVE-2025-49796libxml2@2.13.4-r52.13.9-r0
MediumALPINE-CVE-2026-19931curl@8.21.0-r08.22.0-r0
MediumALPINE-CVE-2024-45491expat@2.6.2-r02.6.3-r0
MediumPYSEC-2025-49setuptools@76.0.078.1.1
MediumDEBIAN-CVE-2019-9192glibc@2.36-9+deb12u14no fix listed
MediumDEBIAN-CVE-2016-1585apparmor@3.0.8-3no fix listed
MediumDEBIAN-CVE-2023-31486perl@5.36.0-7+deb12u3no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.33latestv2.8.3
0.1.31v2.8.32232321,35917,099
0.1.30v2.8.31182021,23615,128

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/catalyst-agents/catalyst-agents.svg)](https://charts.stackradar.io/charts/catalyst-agents/catalyst-agents)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 17 Sept 2026 · scanned 16 Sept 2026 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.