devtron-enterprise Helm chart

Name: devtron-enterprise Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

devtron-labs

Scored 14 Sept 2026

Chart to configure and install Devtron Enterprise Stack. Devtron is a Kubernetes Orchestration system.

Latest 48.0.0 1 month agodeploys tag v1.4.1 0Artifact Hub

devtron-enterprise 48.0.0 deploys 28 container images: quay.io/devtron/bats, quay.io/devtron/nats-box, quay.io/devtron/image-scanner, quay.io/devtron/casbin and 23 more. Across the 27 measured, 6,002 findings — 22 critical, 104 high — 13 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.20, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

68,240221049254,945

6,002 findings over 27 of 28 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

28 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/bats	v1.4.1	0691	522
quay.io/devtron/nats-box	latest	0622140	1,963
quay.io/devtron/image-scanner	94237c18-109-39420	0532216	2,658
quay.io/devtron/casbin	172ef62b-9450794d-464-39422	0013179	1,637
quay.io/devtron/dashboard	0d8f6cf4-60e17132-931-39393	00526	326
quay.io/devtron/authenticator	e414faff-393-13273	21139157	2,967
quay.io/devtron/dex	v2.30.2	0938189	2,989
quay.io/devtron/inception	7beef376-948-31378	516170371	8,436
quay.io/devtron/kubelink	94237c18-314-39417	0018207	1,972
quay.io/devtron/kubewatch	09867a9c-419-39288	0115114	1,234
quay.io/devtron/lens×2	3b3d6d0e-333-39292	011581	965
quay.io/devtron/notifier	9804331c-372-39294	14129794	9,853
quay.io/devtron/silver-surfer	e3b9a2f6-1191-38789	018106	1,053
quay.io/devtron/git-sensor×3	94237c18-950-39418	011696	1,099
quay.io/devtron/nats	2.9.3-alpine	0414109	1,426
quay.io/devtron/nats-server-config-reloader	0.6.2	005119	1,122
quay.io/devtron/prometheus-nats-exporter	0.9.0	0118143	1,667
quay.io/devtron/postgres×2	14.9	4469347	4,916
quay.io/devtron/postgres_exporter	v0.10.1	0322147	1,874
quay.io/devtron/timescaledb-ha	pg18	—	not yet scanned
quay.io/devtron/kubectl×3	latest	2965229	3,946
quay.io/devtron/chart-sync×2	94237c18-1021-39419	0018206	1,968
quay.io/devtron/k8s-utils	tutum-curl	1362	405
quay.io/devtron/devtron×4	9450794d-930-39415	0023274	2,569
quay.io/devtron/migrator×5	v4.16.2	0629132	1,977
quay.io/devtron/devtron-utils	dup-chart-repo-v1.1.0	711117486	7,813
quay.io/devtron/devtron-utils	geni-v1.1.4	02511	311
quay.io/devtron/cost-sync	172ef62b-1159-39429	00563	572

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,859 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-34544	openexr@3.1.5-5	no fix listed
Low	GO-2023-1705	stdlib@go1.17.6	1.19.8
Low	GHSA-m7pr-hjqh-92cm	axios@1.13.6	1.15.1
Low	DEBIAN-CVE-2026-47178	libheif@1.15.1-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2019-19645	sqlite3@3.11.0-1ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2026-53532	openexr@3.1.5-5	no fix listed
Low	DEBIAN-CVE-2026-8328	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-35414	openssh@1:9.2p1-2+deb12u7	1:9.2p1-2+deb12u10
Low	DEBIAN-CVE-2026-25982	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u7
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1+deb12u2	no fix listed
Low	GO-2023-1878	stdlib@go1.17.6	1.19.11
Low	DEBIAN-CVE-2025-65018	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	GHSA-jxxm-27vp-c3m5	github.com/nats-io/nats-server/v2@v2.2.5	2.11.15
Low	ALPINE-CVE-2023-2975	openssl@3.1.0-r4	3.1.1-r2
Low	DEBIAN-CVE-2026-44173	mariadb@1:10.11.14-0+deb12u2	1:10.11.18-0+deb12u1
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8
Low	DEBIAN-CVE-2026-0672	python3.11@3.11.2-6+deb12u6	3.11.2-6+deb12u7
Low	GHSA-9h84-qmv7-982p	helm.sh/helm/v3@v3.12.3	3.18.5
Low	GHSA-f9f8-9pmf-xv68	helm.sh/helm/v3@v3.12.3	3.18.5
Low	DEBIAN-CVE-2026-32775	libexif@0.6.24-1+b1	0.6.24-1+deb12u1
Low	GO-2022-1039	stdlib@go1.17.6	1.18.7
Low	DEBIAN-CVE-2026-3442	binutils@2.40-2	no fix listed
Low	GHSA-p6gq-j5cr-w38f	nodemailer@7.0.13	9.0.1
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	GO-2024-2963	stdlib@go1.17.6	1.21.12
Low	GO-2023-1702	stdlib@go1.17.6	1.19.8
Low	DEBIAN-CVE-2026-59981	openexr@3.1.5-5	no fix listed
Low	DEBIAN-CVE-2025-12495	openexr@3.1.5-5	no fix listed
Low	DEBIAN-CVE-2025-12839	openexr@3.1.5-5	no fix listed
Low	DEBIAN-CVE-2025-12840	openexr@3.1.5-5	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
Low	GHSA-jgfp-53c3-624w	k8s.io/kubernetes@v1.20.4	1.29.14
Low	GHSA-mmx7-hfxf-jppx	axios@1.13.6	1.18.0
Low	DEBIAN-CVE-2026-59189	openexr@3.1.5-5	no fix listed
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r8	1.2.5-r11
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-32739	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-16118	glib2.0@2.74.6-2+deb12u7	no fix listed
Low	GO-2022-0525	stdlib@go1.17.6	1.17.12
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd@v1.7.5	1.7.33
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.39-2	no fix listed
Low	GO-2022-0520	stdlib@go1.17.6	1.17.12
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@7.0.13	8.0.5
Low	DEBIAN-CVE-2025-7546	binutils@2.40-2	no fix listed
Low	ALPINE-CVE-2023-24056	pkgconf@1.8.0-r0	1.8.1-r0
Low	ALPINE-CVE-2025-66199	openssl@3.3.2-r4	3.3.6-r0
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v24.0.5+incompatible	24.0.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
48.0.0latest	1 month ago	v1.4.1	221049254,945	68,240

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/devtron-labs/devtron-enterprise.svg)](https://charts.stackradar.io/charts/devtron-labs/devtron-enterprise)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.