clair 0.1.14 Helm chart

Name: clair Helm chart 0.1.14: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

devtron

Scored 14 Sept 2026

Clair is an open source project for the static analysis of vulnerabilities in application containers.

Version 0.1.14 1 year agodeploys tag 4.3.6 1Artifact Hub

clair 0.1.14 deploys 2 container images: quay.io/devtron/postgres and quay.io/devtron/clair. Across them, 414 findings — 4 critical, 15 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8, fixed in 0:2.28-236.el8_9.13.

Radar Score

6,237415111284

414 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/postgres	11.3	003144	1,210
quay.io/devtron/clair	4.3.6	41580240	5,027

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

414 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-wf45-q9ch-q8gh	github.com/apache/thrift@v0.13.0	0.23.0
Medium	RHSA-2024:0253	sqlite@3.26.0-15.el8	0:3.26.0-19.el8_9
Medium	RHSA-2023:3018	libarchive@3.3.3-1.el8	0:3.3.3-5.el8
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Medium	RHSA-2023:1140	curl@7.61.1-22.el8	0:7.61.1-25.el8_7.3
Medium	DSA-4472-1	expat@2.2.0-2+deb9u1	2.2.0-2+deb9u2
Medium	GHSA-6wrf-mxfj-pf5p	github.com/docker/docker@v20.10.7+incompatible	20.10.24
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Medium	DLA-2492-1	openssl@1.1.0j-1~deb9u1	1.1.0l-1~deb9u2
Medium	RHSA-2023:0116	libtasn1@4.13-3.el8	0:4.13-4.el8_7
Medium	GHSA-m7wr-2xf7-cm9p	github.com/jackc/pgx/v4@v4.13.0	4.18.2
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20210809222454-d867a43fc93e	0.0.0-20220412211240-33da011f77ad
Medium	RHSA-2023:5249	ncurses@6.1-9.20180224.el8	0:6.1-9.20180224.el8_8.1
Medium	RHSA-2025:11327	glib2@2.56.4-156.el8	0:2.56.4-166.el8_10
Medium	RHBA-2024:5736	ca-certificates@2021.2.50-80.0.el8_4	0:2024.2.69_v8.0.303-80.0.el8_10
Medium	DSA-4530-1	expat@2.2.0-2+deb9u1	2.2.0-2+deb9u3
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.8.1	1.8.3
Medium	DLA-2456-1	python3.5@3.5.3-1+deb9u1	3.5.3-1+deb9u3
Medium	GHSA-hqxw-f8mx-cpmw	github.com/docker/distribution@v2.7.1+incompatible	2.8.2-beta.1
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
Medium	DLA-2972-1	libxml2@2.9.4+dfsg1-2.2+deb9u2	2.9.4+dfsg1-2.2+deb9u6
Medium	RHSA-2026:26354	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.5
Medium	RHSA-2023:4523	curl@7.61.1-22.el8	0:7.61.1-30.el8_8.3
Medium	DSA-4475-1	openssl@1.1.0j-1~deb9u1	1.1.0k-1~deb9u1
Medium	GO-2022-1144	stdlib@go1.17.6	1.18.9
Medium	RHSA-2025:17415	gnutls@3.6.16-4.el8	0:3.6.16-8.el8_10.4
Medium	DLA-2409-1	mariadb-10.1@10.1.38-0+deb9u1	10.1.47-0+deb9u1
Medium	RHSA-2026:38503	openssl@1:1.1.1k-5.el8_5	1:1.1.1k-17.el8_6
Low	RHSA-2023:3106	curl@7.61.1-22.el8	0:7.61.1-30.el8_8.2
Low	RHSA-2026:7667	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.2
Low	DLA-2976-1	gzip@1.6-5+b1	1.6-5+deb9u1
Low	DLA-2977-1	xz-utils@5.2.2-1.2+b1	5.2.2-1.2+deb9u1
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Low	DLA-2904-1	expat@2.2.0-2+deb9u1	2.2.0-2+deb9u4
Low	RHSA-2022:5311	libgcrypt@1.8.5-6.el8	0:1.8.5-7.el8_6
Low	GO-2023-1571	stdlib@go1.17.6	1.19.6
Low	DSA-4687-1	exim4@4.89-2+deb9u4	4.89-2+deb9u7
Low	DSA-4666-1	openldap@2.4.44+dfsg-5+deb9u2	2.4.44+dfsg-5+deb9u4
Low	DLA-2437-1	krb5@1.15-1+deb9u1	1.15-1+deb9u2
Low	RHSA-2023:4524	libcap@2.26-5.el8	0:2.48-5.el8_8
Low	GHSA-jqcq-xjh3-6g23	github.com/jackc/pgproto3/v2@v2.1.1	no fix listed
Low	RHSA-2026:0337	openssl@1:1.1.1k-5.el8_5	1:1.1.1k-14.el8_10
Low	RHSA-2022:7720	e2fsprogs@1.45.6-2.el8	0:1.45.6-5.el8
Low	DLA-2966-1	libgc@1:7.4.2-8	1:7.4.2-8+deb9u1
Low	RHSA-2025:13203	libxml2@2.9.7-9.el8_4.2	0:2.9.7-21.el8_10.3
Low	DLA-2931-1	cyrus-sasl2@2.1.27~101-g0780600+dfsg-3	2.1.27~101-g0780600+dfsg-3+deb9u2
Low	RHSA-2023:3837	systemd@239-51.el8_5.2	0:239-74.el8_8.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.14latest	1 year ago	4.3.6	415111284	6,237

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/devtron/clair.svg)](https://charts.stackradar.io/charts/devtron/clair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.