dapr-agents 0.1.5 Helm chart

Name: dapr-agents Helm chart 0.1.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dapr-agents-dev

Scored 14 Sept 2026

A comprehensive developer stack for working with Dapr Agents as well as Observability & Traceability of AI Agents.

Version 0.1.5 6 months agodeploys tag v1.10.2 0Artifact Hub

dapr-agents 0.1.5 deploys 31 container images: quay.io/prometheus/node-exporter, grafana/loki-canary, ghcr.io/dapr/operator, ghcr.io/dapr/sentry and 27 more. Across the 29 measured, 2,287 findings — 0 critical, 6 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,193062901,991

2,287 findings over 29 of 31 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

31 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.10.2	00563	574
grafana/loki-canary	3.6.5	00768	657
ghcr.io/dapr/operator	1.17.0-rc.3	00665	634
ghcr.io/dapr/sentry	1.17.0-rc.3	00665	634
ghcr.io/dapr/injector	1.17.0-rc.3	00665	634
mcp/grafana	latest	0014111	1,181
ghcr.io/kagent-dev/kagent/tools	0.0.13	0017149	1,521
ghcr.io/kagent-dev/kmcp/controller	0.2.2	00257	440
ghcr.io/kagent-dev/doc2vec/mcp	1.1.14	011880	1,104
cr.kagent.dev/kagent-dev/kagent/controller	0.7.14	—	unmeasured
cr.kagent.dev/kagent-dev/kagent/ui	0.7.14	—	unmeasured
quay.io/kiwigrid/k8s-sidecar×2	2.5.0	011951	878
grafana/grafana	12.3.3	0036153	2,075
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.18.0	00665	618
quay.io/prometheus-operator/prometheus-operator	v0.88.1	00145	333
nginxinc/nginx-unprivileged	1.29-alpine	002168	1,085
otel/opentelemetry-collector-contrib	0.145.0	001196	954
public.ecr.aws/diagrid-dev/diagrid-dashboard	latest	00030	193
library/nginx	alpine	0004	34
library/redis×2	6.2	001493	1,049
redis/redisinsight	latest	011275	1,038
ghcr.io/dapr/placement	1.17.0-rc.3	00665	634
ghcr.io/dapr/scheduler	1.17.0-rc.3	00668	652
library/memcached×2	1.6.39-alpine	011730	674
prom/memcached-exporter×2	v0.15.4	00562	561
grafana/loki	3.6.5	00775	724
kiwigrid/k8s-sidecar	1.30.9	012552	999
grafana/tempo	2.9.0	00898	923
library/busybox	latest	0000	0
registry.k8s.io/kubectl	v1.31.0	011595	1,098
ghcr.io/jkroepke/kube-webhook-certgen×2	1.7.7	00043	292

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

542 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-69420	openssl@3.5.4-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u3	no fix listed
Low	ALPINE-CVE-2026-8926	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-j3q9-mxjg-w52f	path-to-regexp@8.2.0	8.4.0
Low	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.39.0	1.41.0
Low	ALPINE-CVE-2026-27135	nghttp2@1.68.0-r0	1.68.1
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u3	no fix listed
Low	GHSA-63vm-454h-vhhq	pyasn1@0.6.1	0.6.2
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u3	no fix listed
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.47.0	0.52.0
Low	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Low	ALPINE-CVE-2026-3805	curl@8.17.0-r1	8.19.0-r0
Low	GHSA-qc2g-gmh6-95p4	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.24.15
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.47.0	0.52.0
Low	ALPINE-CVE-2026-14456	openssl@3.5.4-r0	3.5.8-r0
Low	GHSA-34x7-hfp2-rc4v	tar@7.4.3	7.5.7
Low	ALPINE-CVE-2026-9076	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-82209	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-8r9q-7v3j-jr4g	@modelcontextprotocol/sdk@1.12.1	1.25.2
Low	ALPINE-CVE-2026-80255	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-mf9v-mfxr-j63j	urllib3@2.6.3	2.7.0
Low	GHSA-7hfp-qfw3-5jxh	helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366	3.9.4
Low	DEBIAN-CVE-2026-12087	perl@5.36.0-7+deb12u3	no fix listed
Low	GHSA-vv39-3w5q-974q	k8s.io/kubernetes@v1.29.3	1.29.13
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.0.5	4.1.4
Low	ALPINE-CVE-2026-11564	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.80.0	1.83.1
Low	GHSA-h7wq-jj8r-qm7p	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.27.0-alpha.1
Low	GHSA-p4r4-xvrq-gvmc	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.8.4
Low	GHSA-r635-g3xr-vw7x	engine.io@6.6.2	6.6.7
Low	ALPINE-CVE-2026-6732	libxml2@2.13.9-r0	2.13.9-r1
Low	CGA-9f7x-88h6-rvv4	glibc@2.42-r4	2.42-r6
Low	DEBIAN-CVE-2023-50495	ncurses@6.4-4	no fix listed
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.2	2.1.4
Low	ALPINE-CVE-2026-13608	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-5773	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-r277-6w6q-xmqw	github.com/getkin/kin-openapi@v0.133.0	0.144.0
Low	ALPINE-CVE-2026-63072	openssl@3.5.4-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-63072	openssl@3.0.20-1~deb12u2	no fix listed
Low	ALPINE-CVE-2026-11586	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-gr94-w7qr-f4j3	engine.io@6.6.2	6.6.7
Low	GHSA-xcpc-8h2w-3j85	adm-zip@0.5.10	0.6.0
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.22.0	0.24.0
Low	ALPINE-CVE-2026-45445	openssl@3.5.4-r0	3.5.7-r0
Low	CGA-6ph6-75jp-484p	zlib@1.3.1-r51	1.3.3-r0
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	GHSA-xwx5-5c9g-x68x	istio.io/istio@v0.0.0-20251127165946-6268e25f089a+dirty	1.12.18
Low	GHSA-qffp-2rhf-9h96	tar@7.4.3	7.5.10
Low	ALPINE-CVE-2026-80230	curl@8.17.0-r1	8.22.0-r0
Low	CGA-2g56-xw2x-g9cx	openssl@3.6.0-r4	3.6.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.5latest	6 months ago	v1.10.2	062901,991	22,193

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dapr-agents-dev/dapr-agents.svg)](https://charts.stackradar.io/charts/dapr-agents-dev/dapr-agents)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.