iteration-zero Helm chart

Name: iteration-zero Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Helm chart to install the cli-tools image into a cluster so that the iteration-zero scripts can be run

Latest 0.2.0 4 years agoapp version v1.1-v1.8.2 0Artifact Hub

iteration-zero 0.2.0 deploys 1 container image: quay.io/cloudnativetoolkit/cli-tools. Across them, 483 findings — 5 critical, 21 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38408 in openssh 9.0_p1-r1, fixed in 9.0_p1-r4.

Radar Score

6,921521118337

483 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/cloudnativetoolkit/cli-tools	v1.1-v1.8.2	521118337	6,921

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

118 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2023-28319	curl@7.83.1-r1	8.1.0-r0
Medium	ALPINE-CVE-2022-43680	expat@2.4.8-r0	2.5.0-r0
Medium	PYSEC-2025-49	setuptools@59.4.0	78.1.1
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1o-r0	1.1.1u-r2
Medium	GHSA-mvff-h3cj-wj9c	github.com/containerd/containerd@v1.5.1	1.5.9
Medium	ALPINE-CVE-2024-28757	expat@2.4.8-r0	2.6.2-r0
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.4.0
Medium	GHSA-5rcv-m4m3-hfh7	golang.org/x/text@v0.3.2	0.3.3
Medium	ALPINE-CVE-2023-52425	expat@2.4.8-r0	2.6.0-r0
Medium	ALPINE-CVE-2022-42916	curl@7.83.1-r1	7.83.1-r4
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.0.0-20210428140749-89ef3d95e781
Medium	GHSA-6wvf-f2vw-3425	github.com/containers/image/v5@v5.15.0	5.29.3
Medium	ALPINE-CVE-2022-2097	openssl@1.1.1o-r0	1.1.1q-r0
Medium	GHSA-j8r2-6x86-q33q	requests@2.28.0	2.31.0
Medium	ALPINE-CVE-2023-5678	openssl@1.1.1o-r0	1.1.1w-r1
Medium	PYSEC-2026-2269	pyopenssl@22.0.0	26.0.0
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	ALPINE-CVE-2023-23914	curl@7.83.1-r1	7.83.1-r6
Medium	PYSEC-2023-192	urllib3@1.26.9	2.0.6
Medium	GO-2022-0433	stdlib@go1.15.1	1.17.9
Medium	ALPINE-CVE-2022-30065	busybox@1.35.0-r13	1.35.0-r15
Medium	GHSA-3fwx-pjgw-3558	github.com/docker/docker@v20.10.3+incompatible	20.10.9
Medium	PYSEC-2024-60	idna@3.3	3.7
Medium	GO-2026-4887	github.com/docker/docker@v20.10.3+incompatible	no fix listed
Medium	GHSA-xfhp-jf8p-mh5w	github.com/hashicorp/go-getter@v1.5.7	1.7.5
Medium	GHSA-ppp9-7jff-5vj2	golang.org/x/text@v0.3.6	0.3.7
Medium	GHSA-2xhq-gv6c-p224	go.etcd.io/etcd@v0.5.0-alpha.5.0.20210428180535-15715dcf1ace	3.3.23
Medium	ALPINE-CVE-2023-28320	curl@7.83.1-r1	8.1.0-r0
Medium	ALPINE-CVE-2023-35945	nghttp2@1.47.0-r0	1.47.0-r1
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.27.1	1.33.0
Medium	GHSA-9v9h-cgj8-h64p	cryptography@37.0.2	42.0.2
Medium	GHSA-m3r6-h7wv-7xxv	github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0	0.12.5
Medium	ALPINE-CVE-2022-43552	curl@7.83.1-r1	7.83.1-r5
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
Medium	ALPINE-CVE-2023-7104	sqlite@3.38.5-r0	3.40.1-r1
Medium	ALPINE-CVE-2023-23946	git@2.36.1-r0	2.36.5-r0
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.26.9	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.26.9	2.6.0
Medium	ALPINE-CVE-2022-41409	pcre2@10.39-r0	10.42-r0
Medium	GHSA-3ww4-gg4f-jr7f	cryptography@37.0.2	42.0.0
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
Medium	ALPINE-CVE-2023-23916	curl@7.83.1-r1	7.83.1-r6
Medium	ALPINE-CVE-2023-46218	curl@7.83.1-r1	8.5.0-r0
Medium	GHSA-6wrf-mxfj-pf5p	github.com/docker/docker@v20.10.3+incompatible	20.10.24
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
Medium	GHSA-wr2v-9rpq-c35q	go.etcd.io/etcd@v0.5.0-alpha.5.0.20210428180535-15715dcf1ace	3.3.23
Medium	GO-2021-0243	stdlib@go1.15.1	1.15.14
Medium	GO-2022-0273	stdlib@go1.15.1	1.16.8
Medium	PYSEC-2024-230	certifi@2022.5.18.1	2024.7.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	4 years ago	v1.1-v1.8.2	521118337	6,921

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/iteration-zero.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/iteration-zero)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.