kube-prometheus 9.3.1 Helm chart
choerodonScored 14 Sept 2026
Provides easy monitoring definitions for Kubernetes services, and deployment and management of Prometheus instances.
Version 9.3.1 4 years agoapp version 0.38.1 6Artifact Hub
kube-prometheus 9.3.1 deploys 7 container images: quay.io/prometheus/node-exporter, kiwigrid/k8s-sidecar, grafana/grafana, quay.io/coreos/kube-state-metrics and 3 more. Across the 5 measured, 937 findings — 4 critical, 26 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
7 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v1.0.0 | 0327163 | 2,188 |
| kiwigrid/ | 0.1.151 | 143024 | 1,194 |
| grafana/ | 7.0.3 | 1748186 | 3,191 |
| quay.io/ | v1.9.7 | — | unmeasured |
| quay.io/ | v0.38.1 | — | unmeasured |
| squareup/ | v1.5.2 | 0839175 | 2,855 |
| jettech/ | v1.2.1 | 2443172 | 2,809 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
324 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2021-3711 | openssl | 1.1.1l-r0 |
| Critical | GHSA-39qc-96h7-956f | golang.org/ | 0.0.0-20190813141303-74dc4d7220e7 |
| Critical | GHSA-hgr8-6h9x-f7q9 | golang.org/ | 0.0.0-20190813141303-74dc4d7220e7 |
| High | ALPINE-CVE-2020-1967 | openssl | 1.1.1g-r0 |
| High | ALPINE-CVE-2021-23840 | openssl | 1.1.1j-r0 |
| High | ALPINE-CVE-2021-3712 | openssl | 1.1.1l-r0 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.0.0-20231218163308-9d2ee975ef9f |
| High | ALPINE-CVE-2022-37434 | zlib | 1.2.11-r4 |
| High | GHSA-qppj-fm5r-hxr3KEV | golang.org/ | 0.17.0 |
| High | GHSA-4v7x-pqxf-cx7m | golang.org/ | 0.23.0 |
| High | ALPINE-CVE-2021-3449 | openssl | 1.1.1k-r0 |
| High | GHSA-ffhg-7mh4-33c4 | golang.org/ | 0.0.0-20200220183623-bac4c82f6975 |
| High | GO-2022-0535KEV | stdlib | 1.12.16 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | GHSA-8q59-q68h-6hv4 | pyyaml | 5.4 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | GO-2022-0536 | golang.org/ | 0.0.0-20190813141303-74dc4d7220e7 |
| Medium | DLA-3008-1 | openssl | 1.1.0l-1~deb9u6 |
| Medium | DLA-2952-1 | openssl | 1.1.0l-1~deb9u5 |
| Medium | GHSA-4hq8-gmxx-h6w9 | github.com/ | 0.4.3 |
| Medium | ALPINE-CVE-2020-8285 | curl | 7.66.0-r3 |
| Medium | DLA-2563-1 | openssl | 1.1.0l-1~deb9u3 |
| Medium | DLA-2766-1 | openssl | 1.1.0l-1~deb9u4 |
| Medium | GHSA-83g2-8m93-v3w7 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 |
| Medium | GHSA-cg3q-j54f-5p7p | github.com/ | 1.11.1 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | ALPINE-CVE-2020-11080 | nghttp2 | 1.39.2-r1 |
| Medium | GHSA-c3h9-896r-86jm | github.com/ | 1.3.2 |
| Medium | ALPINE-CVE-2019-1551 | openssl | 1.1.1d-r2 |
| Medium | ALPINE-CVE-2021-36159 | apk-tools | 2.10.7-r0 |
| Medium | ALPINE-CVE-2020-8286 | curl | 7.66.0-r3 |
| Medium | GHSA-vvpx-j8f3-3w6h | golang.org/ | 0.7.0 |
| Medium | GHSA-33c5-9fx5-fvjm | k8s.io/ | 0.16.13 |
| Medium | ALPINE-CVE-2020-28196 | krb5 | 1.17.2-r0 |
| Medium | ALPINE-CVE-2020-11655 | sqlite | 3.30.1-r2 |
| Medium | GHSA-j2jp-wvqg-wc2g | github.com/ | 0.4.9 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | ALPINE-CVE-2020-8231 | curl | 7.66.0-r2 |
| Medium | ALPINE-CVE-2021-23841 | openssl | 1.1.1j-r0 |
| Medium | ALPINE-CVE-2020-8169 | curl | 7.66.0-r1 |
| Medium | ALPINE-CVE-2020-1971 | openssl | 1.1.1i-r0 |
| Medium | GHSA-q2q7-5pp4-w6pg | urllib3 | 1.26.5 |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | GHSA-3vm4-22fp-5rfm | golang.org/ | 0.0.0-20201216223049-8b5274cf687f |
| Medium | ALPINE-CVE-2019-15847 | gcc | 9.3.0-r0 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | ALPINE-CVE-2021-42380 | busybox | 1.31.1-r11 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/choerodon/kube-prometheus)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.