dapr-agents Helm chart

Name: dapr-agents Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dapr-agents-dev

Scored 14 Sept 2026

A comprehensive developer stack for working with Dapr Agents as well as Observability & Traceability of AI Agents.

Latest 0.1.5 6 months agodeploys tag v1.10.2 0Artifact Hub

dapr-agents 0.1.5 deploys 31 container images: quay.io/prometheus/node-exporter, grafana/loki-canary, ghcr.io/dapr/operator, ghcr.io/dapr/sentry and 27 more. Across the 29 measured, 2,287 findings — 0 critical, 6 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

22,193062901,991

2,287 findings over 29 of 31 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

31 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.10.2	00563	574
grafana/loki-canary	3.6.5	00768	657
ghcr.io/dapr/operator	1.17.0-rc.3	00665	634
ghcr.io/dapr/sentry	1.17.0-rc.3	00665	634
ghcr.io/dapr/injector	1.17.0-rc.3	00665	634
mcp/grafana	latest	0014111	1,181
ghcr.io/kagent-dev/kagent/tools	0.0.13	0017149	1,521
ghcr.io/kagent-dev/kmcp/controller	0.2.2	00257	440
ghcr.io/kagent-dev/doc2vec/mcp	1.1.14	011880	1,104
cr.kagent.dev/kagent-dev/kagent/controller	0.7.14	—	unmeasured
cr.kagent.dev/kagent-dev/kagent/ui	0.7.14	—	unmeasured
quay.io/kiwigrid/k8s-sidecar×2	2.5.0	011951	878
grafana/grafana	12.3.3	0036153	2,075
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.18.0	00665	618
quay.io/prometheus-operator/prometheus-operator	v0.88.1	00145	333
nginxinc/nginx-unprivileged	1.29-alpine	002168	1,085
otel/opentelemetry-collector-contrib	0.145.0	001196	954
public.ecr.aws/diagrid-dev/diagrid-dashboard	latest	00030	193
library/nginx	alpine	0004	34
library/redis×2	6.2	001493	1,049
redis/redisinsight	latest	011275	1,038
ghcr.io/dapr/placement	1.17.0-rc.3	00665	634
ghcr.io/dapr/scheduler	1.17.0-rc.3	00668	652
library/memcached×2	1.6.39-alpine	011730	674
prom/memcached-exporter×2	v0.15.4	00562	561
grafana/loki	3.6.5	00775	724
kiwigrid/k8s-sidecar	1.30.9	012552	999
grafana/tempo	2.9.0	00898	923
library/busybox	latest	0000	0
registry.k8s.io/kubectl	v1.31.0	011595	1,098
ghcr.io/jkroepke/kube-webhook-certgen×2	1.7.7	00043	292

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

542 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5775	github.com/go-chi/chi/v5@v5.2.4	5.3.0
Low	DEBIAN-CVE-2011-3374	apt@2.6.1	no fix listed
Low	GHSA-qvfw-j98x-7q72	multer@2.0.2	2.3.0
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+deb12u2	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.40.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.35.0	0.40.0
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	GHSA-xhgw-qwwf-pg32	github.com/cilium/ebpf@v0.20.0	0.22.0
Low	CGA-cvw6-9pj6-fx5j	openssl@3.6.0-r4	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.6.0-r4	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-19542	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-53613	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-53615	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u14	no fix listed
Low	GO-2024-2453	github.com/cloudflare/circl@v1.3.3	1.3.7
Low	GO-2026-5048	github.com/hamba/avro/v2@v2.30.0	no fix listed
Low	GO-2026-5410	github.com/slack-go/slack@v0.12.2	0.23.1
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.5	1.18.7
Low	GO-2026-5884	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GO-2026-5932	golang.org/x/crypto@v0.47.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.80.0	1.82.1
Low	GO-2026-6094	github.com/google/cel-go@v0.26.0	0.30.0
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r18	1.37.0-r20
Low	DEBIAN-CVE-2026-40228	systemd@252.39-1~deb12u2	no fix listed
Low	CGA-qpvq-5fx6-qjf7	nodejs-25@25.2.1-r0	no fix listed
Low	CGA-j345-m9mc-qmxv	nodejs-25@25.2.1-r0	no fix listed
Low	CGA-pwwv-hw6h-fpq3	nodejs-25@25.2.1-r0	25.3.0-r0
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v5@v5.8.0	5.9.2
Low	DEBIAN-CVE-2011-4116	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@25.2	26.0
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r18	1.37.0-r20
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-xf85-363p-868w	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	CGA-52mh-4gcr-5r65	nodejs-25@25.2.1-r0	no fix listed
Low	GHSA-995v-fvrw-c78m	go.opentelemetry.io/otel/schema@v0.0.14	0.0.17
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u14	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.5latest	6 months ago	v1.10.2	062901,991	22,193

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dapr-agents-dev/dapr-agents.svg)](https://charts.stackradar.io/charts/dapr-agents-dev/dapr-agents)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.