StackRadar

cosbench Helm chart

cloudnativeapp

Scored 14 Sept 2026

A benchmark tool for cloud object storage services

Latest 1.0.1 5 years agoapp version 0.0.6 0Artifact Hub

cosbench 1.0.1 deploys 1 container image: zenko/zenko-cosbench. Across them, 206 findings9 critical, 20 high 1 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 3.0.7, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion ^1.8.0-0; rendered for Kubernetes 1.8.0.

Radar Score

4,9069209483

206 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
zenko/zenko-cosbench×20.0.692094834,906

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

83 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDLA-1730-4libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u5
LowDLA-1891-1openldap@2.4.40+dfsg-1+deb8u22.4.40+dfsg-1+deb8u5
LowDLA-1638-1libjpeg-turbo@1:1.3.1-121:1.3.1-12+deb8u1
LowDLA-2255-1libtasn1-6@4.2-3+deb8u24.2-3+deb8u4
LowDLA-1586-1openssl@1.0.1t-1+deb8u51.0.1t-1+deb8u10
LowDSA-3872-1nss@2:3.26-1+debu8u12:3.26-1+debu8u2
LowDSA-3830-1icu@52.1-8+deb8u452.1-8+deb8u5
LowDLA-2199-1openldap@2.4.40+dfsg-1+deb8u22.4.40+dfsg-1+deb8u6
LowDSA-3839-1freetype@2.5.2-3+deb8u12.5.2-3+deb8u2
LowDLA-2203-1sqlite3@3.8.7.1-1+deb8u23.8.7.1-1+deb8u5
LowDLA-1447-1libidn@1.29-1+deb8u21.29-1+deb8u3
LowDSA-3901-1libgcrypt20@1.6.3-2+deb8u21.6.3-2+deb8u4
LowDSA-3960-1gnupg@1.4.18-7+deb8u31.4.18-7+deb8u4
LowDLA-1906-1python2.7@2.7.9-2+deb8u12.7.9-2+deb8u4
LowDLA-1932-1openssl@1.0.1t-1+deb8u51.0.1t-1+deb8u12
LowDLA-1991-1libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u6
LowDLA-1560-1gnutls28@3.3.8-6+deb8u43.3.30-0+deb8u1
LowDLA-2058-1nss@2:3.26-1+debu8u12:3.26-1+debu8u10
LowDLA-1698-1file@1:5.22+15-2+deb8u31:5.22+15-2+deb8u5
LowDSA-3884-1gnutls28@3.3.8-6+deb8u43.3.8-6+deb8u6
LowDSA-3998-1nss@2:3.26-1+debu8u12:3.26-1+debu8u3
LowDLA-1719-1libjpeg-turbo@1:1.3.1-121:1.3.1-12+deb8u2
LowDLA-1639-1systemd@215-17+deb8u6215-17+deb8u9
LowDLA-2008-1nss@2:3.26-1+debu8u12:3.26-1+debu8u7
LowDLA-1412-1cups@1.7.5-11+deb8u11.7.5-11+deb8u3
LowDLA-1857-1nss@2:3.26-1+debu8u12:3.26-1+debu8u5
LowDSA-3774-1lcms2@2.6-3+b32.6-3+deb8u1
LowDLA-1887-1freetype@2.5.2-3+deb8u12.5.2-3+deb8u3
LowDSA-3887-1glibc@2.19-18+deb8u72.19-18+deb8u10
LowDLA-2151-1icu@52.1-8+deb8u452.1-8+deb8u8
LowDLA-1643-1krb5@1.12.1+dfsg-19+deb8u21.12.1+dfsg-19+deb8u5
LowDSA-4150-1icu@52.1-8+deb8u452.1-8+deb8u7
LowDSA-3873-1perl@5.20.2-3+deb8u65.20.2-3+deb8u7
LowDSA-3880-1libgcrypt20@1.6.3-2+deb8u21.6.3-2+deb8u3
LowDLA-1909-1freetype@2.5.2-3+deb8u12.5.2-3+deb8u4
LowDSA-4071-1sensible-utils@0.0.90.0.9+deb8u1
LowDLA-1893-1cups@1.7.5-11+deb8u11.7.5-11+deb8u5
LowDLA-1684-1systemd@215-17+deb8u6215-17+deb8u10
LowDLA-2237-1cups@1.7.5-11+deb8u11.7.5-11+deb8u8
LowDLA-1969-1file@1:5.22+15-2+deb8u31:5.22+15-2+deb8u6
LowDLA-1936-1cups@1.7.5-11+deb8u11.7.5-11+deb8u6
LowGHSA-hw42-3568-wj87google-oauth-client@1.19.01.33.3
LowDLA-1496-1lcms2@2.6-3+b32.6-3+deb8u2
LowGHSA-4gc7-5j7h-4qphspring-context@3.0.7no fix listed
LowDLA-2015-1nss@2:3.26-1+debu8u12:3.26-1+debu8u8
LowDLA-2210-1apt@1.0.9.8.41.0.9.8.6
LowDLA-1762-1systemd@215-17+deb8u6215-17+deb8u12
LowDLA-1935-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u1
LowGHSA-r7wm-3cxj-wff9jackson-core@2.5.32.18.8
LowDLA-2156-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latest5 years ago0.0.692094834,906

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/cosbench.svg)](https://charts.stackradar.io/charts/cloudnativeapp/cosbench)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.