dnation-kubernetes-monitoring-stack 5.0.2 Helm chart

Name: dnation-kubernetes-monitoring-stack Helm chart 5.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dnationcloud

Scored 9 Oct 2026

An umbrella helm chart for Kubernetes monitoring based on kube-prometheus-stack, thanos, loki, alloy and dnation-kubernetes-monitoring

Version 5.0.2 yesterdaydeploys tag v1.19.2 0Artifact Hub

dnation-kubernetes-monitoring-stack 5.0.2 deploys 18 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader, quay.io/prometheus/node-exporter, grafana/loki-canary and 14 more. Across them, 1,701 findings — 4 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.2-r1, fixed in 3.3.6-r0.

Radar Score

18,028423101,385

1,701 findings over 18 of 18 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

18 images

Image	Tag	Vulnerabilities	Radar Score
grafana/alloy	v1.19.2	009118	1,009
quay.io/prometheus-operator/prometheus-config-reloader	v0.91.0	001055	645
quay.io/prometheus/node-exporter	v1.12.1-distroless	00129	221
grafana/loki-canary	3.2.0	0030129	1,766
dnationcloud/kubernetes-jsonnet-translator×2	2.0.1	1178286	4,247
quay.io/kiwigrid/k8s-sidecar×2	2.8.1	001131	531
grafana/grafana	13.1.0	0026106	1,447
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.19.1	00340	338
quay.io/prometheus-operator/prometheus-operator	v0.92.1	00339	324
nginxinc/nginx-unprivileged	1.27-alpine	102569	1,095
grafana/loki×3	3.2.0	0031135	1,829
bitnamilegacy/thanos	0.37.1-debian-12-r0	0022113	1,403
pgsty/silo	RELEASE.2026-09-03T13-18-01Z	001029	335
kiwigrid/k8s-sidecar	1.28.0	112148	947
library/memcached×2	1.6.32-alpine	101116	402
prom/memcached-exporter×2	v0.15.0	001894	1,197
ghcr.io/jkroepke/kube-webhook-certgen×2	1.8.4	00128	211
pgsty/mc	RELEASE.2026-09-13T00-00-00Z	00020	81

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

681 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4970	stdlib@go1.22.7	1.25.12
Low	GO-2025-3373	stdlib@go1.22.7	1.22.11
Low	DEBIAN-CVE-2026-11824	sqlite3@3.40.1-2	no fix listed
Low	GHSA-8988-9cw3-xx77	urllib3@2.2.3	2.8.0
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	ALPINE-CVE-2026-8458	curl@8.20.0-r1	8.21.0-r0
Low	DEBIAN-CVE-2026-8458	curl@7.88.1-10+deb12u15	no fix listed
Low	ALPINE-CVE-2026-25210	expat@2.7.0-r0	2.7.4-r0
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg-10	no fix listed
Low	DSA-6140-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.26.0	0.52.0
Low	GHSA-34jh-p97f-mpxf	urllib3@1.25.11	1.26.19
Low	GHSA-4xh5-x5gv-qwph	pip@23.0.1	25.3
Low	GHSA-hjf4-fphr-2h65	go.opentelemetry.io/otel/sdk/log@v0.19.0	0.21.0
Low	GHSA-gh4c-6fx4-qh6g	urllib3@2.7.0	2.8.0
Low	GO-2025-4012	stdlib@go1.22.7	1.24.8
Low	DEBIAN-CVE-2026-103111	pcre2@10.42-1	10.42-1+deb12u2
Low	ALPINE-CVE-2025-66199	openssl@3.3.2-r1	3.3.6-r0
Low	ALPINE-CVE-2025-65018	libpng@1.6.47-r0	1.6.53-r0
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u1	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@57.5.0	83.0.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	DEBIAN-CVE-2026-78408	util-linux@2.38.1-5+deb12u1	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r0	1.2.5-r3
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	GO-2026-4980	stdlib@go1.22.7	1.25.10
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	ALPINE-CVE-2025-62408	c-ares@1.34.5-r0	1.34.6-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42767	openssl@3.0.14-1~deb12u2	3.0.22-1~deb12u1
Low	ALPINE-CVE-2026-22796	openssl@3.3.2-r1	3.3.6-r0
Low	DEBIAN-CVE-2026-22796	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-102010	gcc-12@12.2.0-14	no fix listed
Low	ALPINE-CVE-2026-34743	xz@5.6.3-r1	5.8.3-r0
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-0.2	5.4.1-1+deb12u1
Low	GO-2026-4440	golang.org/x/net@v0.28.0	0.45.0
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u8	2.36-9+deb12u10
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u8	no fix listed
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.26.0	0.45.0
Low	GO-2025-4011	stdlib@go1.22.7	1.24.8
Low	GO-2025-4015	stdlib@go1.22.7	1.24.8
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u15	no fix listed
Low	GO-2026-4441	golang.org/x/net@v0.28.0	0.45.0
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.28.0	1.43.0
Low	PYSEC-2026-3721	pip@23.0.1	26.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.2latest	yesterday	v1.19.2	423101,385	18,028
5.0.0	16 days ago	v1.19.2	18335101,710	28,576
4.0.3	21 days ago	v1.12.1-distroless	20345221,677	28,991
4.0.2	1 month ago	v1.12.1-distroless	18334911,537	26,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dnationcloud/dnation-kubernetes-monitoring-stack.svg)](https://charts.stackradar.io/charts/dnationcloud/dnation-kubernetes-monitoring-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.