dnation-kubernetes-monitoring-stack 5.0.2 Helm chart

Name: dnation-kubernetes-monitoring-stack Helm chart 5.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dnationcloud

Scored 9 Oct 2026

An umbrella helm chart for Kubernetes monitoring based on kube-prometheus-stack, thanos, loki, alloy and dnation-kubernetes-monitoring

Version 5.0.2 yesterdaydeploys tag v1.19.2 0Artifact Hub

dnation-kubernetes-monitoring-stack 5.0.2 deploys 18 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader, quay.io/prometheus/node-exporter, grafana/loki-canary and 14 more. Across them, 1,701 findings — 4 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.2-r1, fixed in 3.3.6-r0.

Radar Score

18,028423101,385

1,701 findings over 18 of 18 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

18 images

Image	Tag	Vulnerabilities	Radar Score
grafana/alloy	v1.19.2	009118	1,009
quay.io/prometheus-operator/prometheus-config-reloader	v0.91.0	001055	645
quay.io/prometheus/node-exporter	v1.12.1-distroless	00129	221
grafana/loki-canary	3.2.0	0030129	1,766
dnationcloud/kubernetes-jsonnet-translator×2	2.0.1	1178286	4,247
quay.io/kiwigrid/k8s-sidecar×2	2.8.1	001131	531
grafana/grafana	13.1.0	0026106	1,447
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.19.1	00340	338
quay.io/prometheus-operator/prometheus-operator	v0.92.1	00339	324
nginxinc/nginx-unprivileged	1.27-alpine	102569	1,095
grafana/loki×3	3.2.0	0031135	1,829
bitnamilegacy/thanos	0.37.1-debian-12-r0	0022113	1,403
pgsty/silo	RELEASE.2026-09-03T13-18-01Z	001029	335
kiwigrid/k8s-sidecar	1.28.0	112148	947
library/memcached×2	1.6.32-alpine	101116	402
prom/memcached-exporter×2	v0.15.0	001894	1,197
ghcr.io/jkroepke/kube-webhook-certgen×2	1.8.4	00128	211
pgsty/mc	RELEASE.2026-09-13T00-00-00Z	00020	81

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

681 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2025-4116	golang.org/x/crypto@v0.26.0	0.43.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-54874	openssl@3.0.14-1~deb12u2	3.0.22-1~deb12u1
Low	DEBIAN-CVE-2023-50495	ncurses@6.4-4	no fix listed
Low	GO-2026-4870	stdlib@go1.22.7	1.25.9
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.26.0	0.52.0
Low	GO-2026-4971	stdlib@go1.22.7	1.25.10
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.1	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.1	0.6.4
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.1	0.6.4
Low	GO-2026-4947	stdlib@go1.22.7	1.25.9
Low	ALPINE-CVE-2026-11586	curl@8.20.0-r1	8.21.0-r0
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	GHSA-mmfr-pmjx-hw9w	github.com/getkin/kin-openapi@v0.140.0	0.141.0
Low	ALPINE-CVE-2025-49795	libxml2@2.13.4-r6	2.13.9-r0
Low	ALPINE-CVE-2025-69419	openssl@3.3.2-r1	3.3.6-r0
Low	DEBIAN-CVE-2025-69419	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Low	GO-2026-5037	stdlib@go1.22.7	1.25.11
Low	GO-2026-5972	stdlib@go1.22.7	1.25.13
Low	GO-2026-6088	stdlib@go1.22.7	1.25.13
Low	GO-2026-6089	stdlib@go1.22.7	1.25.13
Low	GO-2026-6090	stdlib@go1.22.7	1.25.13
Low	GHSA-wf93-45jw-7689	pip@23.0.1	26.1.2
Low	DEBIAN-CVE-2026-41992	gzip@1.12-1	no fix listed
Low	ALPINE-CVE-2026-80229	curl@8.20.0-r1	8.22.0-r0
Low	GO-2026-5038	stdlib@go1.22.7	1.25.11
Low	GHSA-33mj-cw25-m34h	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Low	ALPINE-CVE-2026-76641	expat@2.7.0-r0	2.8.4-r0
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u8	2.36-9+deb12u14
Low	GO-2026-6218	stdlib@go1.22.7	1.25.13
Low	DEBIAN-CVE-2026-42011	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.10.1-3	no fix listed
Low	ALPINE-CVE-2026-42766	openssl@3.3.3-r0	3.3.7-r1
Low	DEBIAN-CVE-2026-42766	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
Low	GHSA-rm6m-hrcw-jw33	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Low	DEBIAN-CVE-2025-6297	dpkg@1.21.22	1.21.23
Low	DEBIAN-CVE-2025-6020	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	ALPINE-CVE-2025-29087	sqlite@3.45.3-r1	3.45.3-r2
Low	DEBIAN-CVE-2026-86145	pcre2@10.42-1	10.42-1+deb12u1
Low	ALPINE-CVE-2026-84782	openssl@3.3.3-r0	3.3.7-r2
Low	DEBIAN-CVE-2026-84782	openssl@3.0.14-1~deb12u2	no fix listed
Low	ALPINE-CVE-2024-50602	expat@2.6.3-r0	2.6.4-r0
Low	DEBIAN-CVE-2024-50602	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u2
Low	DEBIAN-CVE-2025-69720	ncurses@6.4-4	no fix listed
Low	GO-2026-6355	golang.org/x/crypto@v0.26.0	0.56.0
Low	DEBIAN-CVE-2025-15281	glibc@2.36-9+deb12u8	2.36-9+deb12u14
Low	GO-2025-3751	stdlib@go1.22.7	1.23.10
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u8	no fix listed
Low	ALPINE-CVE-2026-9547	curl@8.20.0-r1	8.21.0-r0
Low	DEBIAN-CVE-2026-9547	curl@7.88.1-10+deb12u15	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.2latest	yesterday	v1.19.2	423101,385	18,028
5.0.0	16 days ago	v1.19.2	18335101,710	28,576
4.0.3	21 days ago	v1.12.1-distroless	20345221,677	28,991
4.0.2	1 month ago	v1.12.1-distroless	18334911,537	26,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dnationcloud/dnation-kubernetes-monitoring-stack.svg)](https://charts.stackradar.io/charts/dnationcloud/dnation-kubernetes-monitoring-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.