StackRadar

iteration-zero 0.2.0 Helm chart

cloud-native-toolkit

Scored 14 Sept 2026

Helm chart to install the cli-tools image into a cluster so that the iteration-zero scripts can be run

Version 0.2.0 4 years agoapp version v1.1-v1.8.2 0Artifact Hub

iteration-zero 0.2.0 deploys 1 container image: quay.io/cloudnativetoolkit/cli-tools. Across them, 483 findings5 critical, 21 high 2 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38408 in openssh 9.0_p1-r1, fixed in 9.0_p1-r4.

Radar Score

6,921521118337

483 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
quay.io/cloudnativetoolkit/cli-toolsv1.1-v1.8.25211183376,921

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

483 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowPYSEC-2026-3553cryptography@37.0.249.0.0
LowGHSA-qw64-3x98-g7q2github.com/go-git/go-billy/v5@v5.1.05.9.0
LowGHSA-wf93-45jw-7689pip@22.1.226.1.2
LowGHSA-p436-gjf2-799pgithub.com/docker/cli@v20.10.11+incompatible29.2.0
LowGHSA-xgmm-8j9v-c9wxpyjwt@2.4.02.13.0
LowGO-2022-0537stdlib@go1.18.11.17.13
LowGO-2021-0234stdlib@go1.15.11.15.9
LowGHSA-c5q2-7r4c-mv6ggopkg.in/square/go-jose.v2@v2.5.1no fix listed
LowGHSA-rc4r-wh2q-q6c4github.com/docker/docker@v20.10.3+incompatible20.10.18
LowGHSA-mq39-4gv4-mvpxgithub.com/docker/docker@v20.10.3+incompatible23.0.11
LowGHSA-vpvm-3wq2-2wvmgithub.com/opencontainers/runc@v1.0.11.1.5
LowGHSA-pjcq-xvwq-hhpjgithub.com/Azure/go-ntlmssp@v0.0.0-20200615164410-66371956d46c0.1.1
LowALPINE-CVE-2023-6597python3@3.10.4-r03.10.14-r0
LowGHSA-m4p7-r5rc-7g4jpyasn1@0.4.80.6.4
LowGO-2023-1703stdlib@go1.18.11.19.8
LowGHSA-9hjg-9r4m-mvj7requests@2.28.02.32.4
LowGO-2021-0241stdlib@go1.15.11.15.13
LowGO-2022-0521stdlib@go1.18.11.17.12
LowGHSA-9p26-698r-w4hxgithub.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca00.12.5
LowGHSA-8ppf-4f7h-5ppjpyasn1@0.4.80.6.4
LowGHSA-hm4w-wwcw-mr6rpyasn1@0.4.80.6.4
LowGO-2022-0477stdlib@go1.18.11.17.11
LowGO-2026-4341stdlib@go1.18.11.24.12
LowGO-2022-0533stdlib@go1.18.11.17.11
LowGHSA-hc8v-wwc9-vgxmgithub.com/go-git/go-git/v5@v5.3.05.19.2
LowGO-2022-0523stdlib@go1.18.11.17.12
LowGO-2024-2887stdlib@go1.18.11.21.11
LowGO-2022-0522stdlib@go1.18.11.17.12
LowGO-2022-0527stdlib@go1.18.11.17.12
LowGO-2022-0524stdlib@go1.18.11.17.12
LowGHSA-pxq6-2prw-chj9github.com/docker/docker@v20.10.3+incompatibleno fix listed
LowGO-2023-1704stdlib@go1.18.11.19.8
LowALPINE-CVE-2025-26519musl@1.2.3-r01.2.3-r4
LowGO-2022-0289stdlib@go1.15.11.16.12
LowALPINE-CVE-2023-40217python3@3.10.4-r03.10.13-r0
LowALPINE-CVE-2023-22490git@2.36.1-r02.36.5-r0
LowGHSA-752w-5fwx-jx9fpyjwt@2.4.02.12.0
LowALPINE-CVE-2023-28322curl@7.83.1-r18.1.0-r0
LowGO-2022-0526stdlib@go1.18.11.17.12
LowGO-2023-1568stdlib@go1.18.11.19.6
LowGHSA-m3xc-h892-ggx6github.com/go-git/go-billy/v5@v5.1.05.9.0
LowGHSA-c2h3-6mxw-7mvqgithub.com/containerd/containerd@v1.5.11.5.7
LowGO-2022-1037stdlib@go1.18.11.18.7
LowPYSEC-2026-3554cryptography@37.0.249.0.0
LowGHSA-qgq7-7hm3-q39jgithub.com/go-git/go-git/v5@v5.3.05.19.2
LowGO-2023-1987stdlib@go1.18.11.19.12
LowGHSA-2mm7-x5h6-5pvqgithub.com/docker/docker@v20.10.3+incompatible20.10.14
LowGO-2023-1752stdlib@go1.18.11.19.9
LowALPINE-CVE-2022-35252curl@7.83.1-r17.83.1-r3
LowGHSA-34jh-p97f-mpxfurllib3@1.26.91.26.19

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.0latest4 years agov1.1-v1.8.25211183376,921

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/iteration-zero.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/iteration-zero)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.