iteration-zero Helm chart

Name: iteration-zero Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Helm chart to install the cli-tools image into a cluster so that the iteration-zero scripts can be run

Latest 0.2.0 4 years agoapp version v1.1-v1.8.2 0Artifact Hub

iteration-zero 0.2.0 deploys 1 container image: quay.io/cloudnativetoolkit/cli-tools. Across them, 483 findings — 5 critical, 21 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38408 in openssh 9.0_p1-r1, fixed in 9.0_p1-r4.

Radar Score

6,921521118337

483 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/cloudnativetoolkit/cli-tools	v1.1-v1.8.2	521118337	6,921

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

483 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2023-38408	openssh@9.0_p1-r1	9.0_p1-r4
Critical	ALPINE-CVE-2023-38545	curl@7.83.1-r1	8.4.0-r0
Critical	ALPINE-CVE-2022-23521	git@2.36.1-r0	2.36.4-r0
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.47.0-r0	1.47.0-r2
Critical	ALPINE-CVE-2022-41903	git@2.36.1-r0	2.36.4-r0
High	ALPINE-CVE-2023-0286	openssl@1.1.1o-r0	1.1.1t-r0
High	GHSA-x4qr-2fvf-3mr5	cryptography@37.0.2	39.0.1
High	ALPINE-CVE-2023-25652	git@2.36.1-r0	2.36.6-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1o-r0	1.1.1u-r0
High	ALPINE-CVE-2023-48795	openssh@9.0_p1-r1	9.0_p1-r5
High	GHSA-45x7-px36-x8w8	paramiko@2.11.0	3.4.0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20231218163308-9d2ee975ef9f
High	ALPINE-CVE-2022-37434	zlib@1.2.12-r1	1.2.12-r2
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v20.10.3+incompatible	23.0.15
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.23.0
High	GHSA-crp2-qrr5-8pq7	github.com/containerd/containerd@v1.5.1	1.5.10
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.0.1	1.1.12
High	ALPINE-CVE-2018-18312	perl@5.34.1-r0	5.26.3-r0
High	ALPINE-CVE-2018-18311	perl@5.34.1-r0	5.26.3-r0
High	ALPINE-CVE-2022-40303	libxml2@2.9.14-r0	2.9.14-r2
High	ALPINE-CVE-2022-32206	curl@7.83.1-r1	7.83.1-r2
High	GHSA-ffhg-7mh4-33c4	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20200220183623-bac4c82f6975
High	ALPINE-CVE-2022-4450	openssl@1.1.1o-r0	1.1.1t-r0
High	ALPINE-CVE-2022-43551	curl@7.83.1-r1	7.83.1-r5
High	ALPINE-CVE-2022-32207	curl@7.83.1-r1	7.83.1-r2
Medium	GO-2024-2687	stdlib@go1.18.1	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
Medium	ALPINE-CVE-2023-51385	openssh@9.0_p1-r1	9.0_p1-r5
Medium	ALPINE-CVE-2022-37454	python3@3.10.4-r0	3.10.9-r0
Medium	ALPINE-CVE-2022-32221	curl@7.83.1-r1	7.83.1-r4
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1o-r0	1.1.1t-r0
Medium	PYSEC-2022-43177	azure-cli@2.37.0	2.40.0
Medium	ALPINE-CVE-2022-40304	libxml2@2.9.14-r0	2.9.14-r2
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.0.0-20210520170846-37e1c6afe023
Medium	GHSA-x24g-9w7v-vprh	github.com/hashicorp/go-getter@v1.5.7	1.6.1
Medium	ALPINE-CVE-2023-29007	git@2.36.1-r0	2.36.6-r0
Medium	GHSA-wr6v-9f75-vh2g	github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0	0.12.5
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.1.0	1.11.1
Medium	ALPINE-CVE-2022-1586	pcre2@10.39-r0	10.40-r0
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.31.0
Medium	GHSA-r48q-9g5r-8q2h	github.com/emicklei/go-restful@v2.9.5+incompatible	2.16.0
Medium	ALPINE-CVE-2022-39260	git@2.36.1-r0	2.36.3-r0
Medium	GHSA-c3h9-896r-86jm	github.com/gogo/protobuf@v1.2.1	1.3.2
Medium	ALPINE-CVE-2022-32205	curl@7.83.1-r1	7.83.1-r2
Medium	GHSA-h6xx-pmxh-3wgp	go.etcd.io/etcd@v0.0.0-20211004023027-19e2e70e4f50	0.5.0-alpha.5.0.20190108173120-83c051b701d3
Medium	ALPINE-CVE-2023-28531	openssh@9.0_p1-r1	9.0_p1-r3
Medium	GHSA-28r2-q6m8-9hpx	github.com/hashicorp/go-getter@v1.5.7	1.6.1
Medium	GHSA-cjr4-fv6c-f3mv	github.com/hashicorp/go-getter@v1.5.7	1.6.1
Medium	GHSA-fcgg-rvwg-jv58	github.com/hashicorp/go-getter@v1.5.7	1.6.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	4 years ago	v1.1-v1.8.2	521118337	6,921

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/iteration-zero.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/iteration-zero)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.