dnation-kubernetes-monitoring-stack 5.0.2 Helm chart

Name: dnation-kubernetes-monitoring-stack Helm chart 5.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dnationcloud

Scored 9 Oct 2026

An umbrella helm chart for Kubernetes monitoring based on kube-prometheus-stack, thanos, loki, alloy and dnation-kubernetes-monitoring

Version 5.0.2 yesterdaydeploys tag v1.19.2 0Artifact Hub

dnation-kubernetes-monitoring-stack 5.0.2 deploys 18 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader, quay.io/prometheus/node-exporter, grafana/loki-canary and 14 more. Across them, 1,701 findings — 4 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.2-r1, fixed in 3.3.6-r0.

Radar Score

18,028423101,385

1,701 findings over 18 of 18 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

18 images

Image	Tag	Vulnerabilities	Radar Score
grafana/alloy	v1.19.2	009118	1,009
quay.io/prometheus-operator/prometheus-config-reloader	v0.91.0	001055	645
quay.io/prometheus/node-exporter	v1.12.1-distroless	00129	221
grafana/loki-canary	3.2.0	0030129	1,766
dnationcloud/kubernetes-jsonnet-translator×2	2.0.1	1178286	4,247
quay.io/kiwigrid/k8s-sidecar×2	2.8.1	001131	531
grafana/grafana	13.1.0	0026106	1,447
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.19.1	00340	338
quay.io/prometheus-operator/prometheus-operator	v0.92.1	00339	324
nginxinc/nginx-unprivileged	1.27-alpine	102569	1,095
grafana/loki×3	3.2.0	0031135	1,829
bitnamilegacy/thanos	0.37.1-debian-12-r0	0022113	1,403
pgsty/silo	RELEASE.2026-09-03T13-18-01Z	001029	335
kiwigrid/k8s-sidecar	1.28.0	112148	947
library/memcached×2	1.6.32-alpine	101116	402
prom/memcached-exporter×2	v0.15.0	001894	1,197
ghcr.io/jkroepke/kube-webhook-certgen×2	1.8.4	00128	211
pgsty/mc	RELEASE.2026-09-13T00-00-00Z	00020	81

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

681 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-8376	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Medium	GHSA-c5pq-fr2g-9jpf	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-r277-6w6q-xmqw	github.com/getkin/kin-openapi@v0.140.0	0.144.0
Medium	ALPINE-CVE-2026-33416	libpng@1.6.47-r0	1.6.56-r0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.20.0-r1	8.22.0-r0
Medium	DEBIAN-CVE-2026-18924	curl@7.88.1-10+deb12u15	no fix listed
Medium	ALPINE-CVE-2025-31115	xz@5.6.2-r0	5.6.2-r1
Medium	DSA-5895-1	xz-utils@5.4.1-0.2	5.4.1-1
Medium	ALPINE-CVE-2026-31790	openssl@3.3.2-r1	3.3.7-r0
Medium	DEBIAN-CVE-2026-31790	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
Medium	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58	0.24.0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2024-2379	curl@7.88.1-10+deb12u15	no fix listed
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.65.0	1.82.2
Medium	ALPINE-CVE-2025-9232	openssl@3.3.2-r1	3.3.5-r0
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.14-1~deb12u2	3.0.17-1~deb12u3
Medium	ALPINE-CVE-2026-9076	openssl@3.3.3-r0	3.3.7-r1
Medium	DEBIAN-CVE-2026-9076	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
Medium	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Medium	GO-2026-4803	github.com/minio/minio@v0.0.0-20260903125440-9b11dc9469e6	no fix listed
Medium	GO-2026-5437	github.com/minio/minio@v0.0.0-20260903125440-9b11dc9469e6	no fix listed
Medium	ALPINE-CVE-2025-69421	openssl@3.3.2-r1	3.3.6-r0
Medium	DEBIAN-CVE-2025-69421	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.65.0	1.83.1
Medium	ALPINE-CVE-2026-6732	libxml2@2.13.4-r6	2.13.9-r1
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.26.0	0.35.0
Medium	GHSA-j497-x9hr-x34x	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-58pv-8j8x-9vj2	jaraco-context@5.3.0	6.1.0
Medium	GHSA-jr27-m4p2-rc6r	pyasn1@0.6.1	0.6.3
Medium	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	ALPINE-CVE-2026-63072	openssl@3.3.3-r0	3.3.7-r1
Medium	DEBIAN-CVE-2026-63072	openssl@3.0.14-1~deb12u2	3.0.22-1~deb12u1
Medium	ALPINE-CVE-2026-25646	libpng@1.6.47-r0	1.6.55-r0
Medium	ALPINE-CVE-2025-69420	openssl@3.3.2-r1	3.3.6-r0
Medium	DEBIAN-CVE-2025-69420	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Medium	ALPINE-CVE-2026-80231	curl@8.20.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.20.0-r1	8.21.0-r0
Medium	DEBIAN-CVE-2026-8927	curl@7.88.1-10+deb12u15	no fix listed
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb	0.305.2
Medium	ALPINE-CVE-2026-27135	nghttp2@1.64.0-r0	1.68.1
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	DEBIAN-CVE-2026-7383	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
Medium	GHSA-4v58-74mf-rjx3	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-r9c8-gcjp-xfwh	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-xwwf-m8fg-p9q2	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.40.0	1.41.0
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.22.0	0.27.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.26.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.26.0	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.2latest	yesterday	v1.19.2	423101,385	18,028
5.0.0	16 days ago	v1.19.2	18335101,710	28,576
4.0.3	21 days ago	v1.12.1-distroless	20345221,677	28,991
4.0.2	1 month ago	v1.12.1-distroless	18334911,537	26,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dnationcloud/dnation-kubernetes-monitoring-stack.svg)](https://charts.stackradar.io/charts/dnationcloud/dnation-kubernetes-monitoring-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.