StackRadar

prometheus-operator Helm chart

cloudnativeapp

Scored 14 Sept 2026

Provides easy monitoring definitions for Kubernetes services, and deployment and management of Prometheus instances.

Latest 6.4.0 5 years agoapp version 0.31.1 0Artifact Hub

prometheus-operator 6.4.0 deploys 7 container images: registry.cn-hangzhou.aliyuncs.com/kubeapps/quay-node-exporter, kiwigrid/k8s-sidecar, grafana/grafana, registry.cn-hangzhou.aliyuncs.com/kubeapps/quay-kube-state-metrics and 3 more. Across the 4 measured, 180 findings1 critical, 5 high 1 on CISA KEV. The highest contribution is ALPINE-CVE-2019-9513 in nghttp2 1.32.0-r0, fixed in 1.39.2-r0.

Radar Score

2,9541571103

180 findings over 4 of 7 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
registry.cn-hangzhou.aliyuncs.com/kubeapps/quay-node-exporterv0.18.0unmeasured
kiwigrid/k8s-sidecar×20.0.180138581,402
grafana/grafana6.2.50127381,102
registry.cn-hangzhou.aliyuncs.com/kubeapps/quay-kube-state-metricsv1.7.2unmeasured
registry.cn-hangzhou.aliyuncs.com/kubeapps/quay-prometheus-operatorv0.31.1unmeasured
squareup/ghostunnelv1.4.11310259
jettech/kube-webhook-certgen×2v1.0.00057191

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

55 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumPYSEC-2024-225cryptography@2.742.0.4
MediumDLA-2664-1curl@7.52.1-5+deb9u97.52.1-5+deb9u14
MediumGHSA-xrx6-fmxq-rjj2rsa@4.04.7
MediumGHSA-jr27-m4p2-rc6rpyasn1@0.4.50.6.3
MediumGHSA-5xp3-jfq3-5q8xpip@19.1.121.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.4.0latest5 years ago0.31.115711032,954

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/prometheus-operator.svg)](https://charts.stackradar.io/charts/cloudnativeapp/prometheus-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.