cosmo 0.21.0 Helm chart
cosmo-platformOfficialVerified publisherScored 7 Oct 2026
This is the official Helm Chart for WunderGraph Cosmo - The Full Lifecycle GraphQL API Management Solution.
Version 0.21.0App version not verified against the render 2Artifact Hub
cosmo 0.21.0 deploys 10 container images: ghcr.io/wundergraph/cosmo/cdn, ghcr.io/wundergraph/cosmo/controlplane, ghcr.io/wundergraph/cosmo/graphqlmetrics, bitnamilegacy/minio and 6 more. Across them, 2,863 findings — 17 critical, 12 high — 2 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis(R) 7.2.4-5, fixed in 6.2.20.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 0.14.1 | 0030228 | 2,662 |
| ghcr.io/ | 0.133.1 | 2268272 | 4,180 |
| ghcr.io/ | 0.33.0 | 1039127 | 2,086 |
| bitnamilegacy/ | 2025.7.23-debian-12-r5 | 1087299 | 4,559 |
| ghcr.io/ | 0.18.1 | 22102488 | 6,689 |
| ghcr.io/ | 0.111.0 | 2141198 | 2,946 |
| bitnamilegacy/ | 24.6.2-debian-12-r3 | 1255195 | 3,028 |
| ghcr.io/ | 0.13.0 | 0025116 | 1,605 |
| bitnamilegacy/ | 15.4.0-debian-11-r45 | 4031123 | 2,177 |
| bitnamilegacy/ | 7.2.4-debian-12-r16 | 4581227 | 4,388 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-v5g5-wwmp-jppw | keycloak-services | 26.6.3 |
| Low | BIT-postgresql-2026-14679 | postgresql | 14.24.0 |
| Low | BIT-postgresql-2026-14679 | PostgreSQL | 14.24.0 |
| Low | GHSA-pxq6-2prw-chj9 | github.com/ | no fix listed |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | GHSA-794g-x443-36f7 | keycloak-services | no fix listed |
| Low | DEBIAN-CVE-2025-49506 | apr-util | 1.6.3-1+deb12u1 |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | DEBIAN-CVE-2024-53589 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-66863 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-66865 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-58051 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2026-80230 | curl | no fix listed |
| Low | DEBIAN-CVE-2025-32414 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2025-66862 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-17084 | python3.11 | no fix listed |
| Low | BIT-minio-2026-42600 | minio | no fix listed |
| Low | GO-2026-5757 | github.com/ | no fix listed |
| Low | BIT-postgresql-2025-4207 | postgresql | 13.21.0 |
| Low | BIT-postgresql-2025-4207 | PostgreSQL | 13.21.0 |
| Low | DLA-3878-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u5 |
| Low | GHSA-6chq-wfr3-2hj9 | axios | 1.15.1 |
| Low | DEBIAN-CVE-2026-6253 | curl | no fix listed |
| Low | GO-2026-5841 | github.com/ | 1.18.7 |
| Low | DEBIAN-CVE-2024-46901 | subversion | 1.14.2-4+deb12u1 |
| Low | DEBIAN-CVE-2026-5435 | glibc | no fix listed |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | GO-2025-3956 | stdlib | 1.23.12 |
| Low | DEBIAN-CVE-2022-27943 | gcc-12 | no fix listed |
| Low | GHSA-jqh4-m9w3-8hp9 | axios | 1.18.0 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | GHSA-hq3p-w4xv-x7vp | keycloak-services | 26.6.2 |
| Low | GHSA-6j4f-fj2g-mc7p | brace-expansion | 2.1.5 |
| Low | GHSA-qhr7-859c-m2p7 | brace-expansion | 2.1.6 |
| Low | DEBIAN-CVE-2026-6276 | curl | no fix listed |
| Low | GO-2025-3595 | golang.org/ | 0.38.0 |
| Low | GHSA-7xf9-4jfc-wgm4 | keycloak-services | 26.5.6 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | DSA-5951-1 | icu | 72.1-3+deb12u1 |
| Low | GHSA-fvcv-3m26-pcqx | axios | 1.15.0 |
| Low | GHSA-j8rh-479h-cp32 | axios | 1.20.0 |
| Low | DEBIAN-CVE-2026-8328 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2026-5545 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-58471 | wget | no fix listed |
| Low | DEBIAN-CVE-2026-58472 | wget | no fix listed |
| Low | RHSA-2026:58936 | sqlite | 0:3.34.1-11.el9_8 |
| Low | DEBIAN-CVE-2026-4437 | glibc | 2.36-9+deb12u14 |
| Low | GO-2024-2598 | stdlib | 1.21.8 |
| Low | DEBIAN-CVE-2026-42015 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-35387 | openssh | 1:9.2p1-2+deb12u10 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.21.0latest | — | — | 17125592,273 | 34,320 |
| 0.20.0 | — | — | 17125592,273 | 34,320 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.