dnation-kubernetes-monitoring-stack Helm chart
dnationcloudScored 14 Sept 2026
An umbrella helm chart for Kubernetes monitoring based on kube-prometheus-stack, thanos, loki, promtail and dnation-kubernetes-monitoring
Latest 4.0.2 13 days agodeploys tag v1.12.1-distroless 0Artifact Hub
dnation-kubernetes-monitoring-stack 4.0.2 deploys 17 container images: quay.io/prometheus/node-exporter, grafana/loki-canary, grafana/promtail, dnationcloud/kubernetes-jsonnet-translator and 13 more. Across the 16 measured, 1,823 findings — 14 critical, 33 high — 10 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-189.5.el8_6, fixed in 0:2.28-236.el8_9.13.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v1.12.1-distroless | 00012 | 78 |
| grafana/ | 3.2.0 | 0017121 | 1,277 |
| grafana/ | 3.0.0 | — | unmeasured |
| dnationcloud/ | 2.0.1 | 1171258 | 3,822 |
| quay.io/ | 2.8.1 | 001025 | 444 |
| grafana/ | 13.1.0 | 001494 | 1,073 |
| registry.k8s.io/ | v2.19.1 | 00024 | 163 |
| quay.io/ | v0.92.1 | 00021 | 144 |
| nginxinc/ | 1.27-alpine | 011659 | 840 |
| grafana/ | 3.2.0 | 0017126 | 1,330 |
| bitnamilegacy/ | 0.37.1-debian-12-r0 | 0010103 | 961 |
| quay.io/ | RELEASE.2022-10-24T18-35-07Z | 61569241 | 4,960 |
| kiwigrid/ | 1.28.0 | 112045 | 879 |
| library/ | 1.6.32-alpine | 011017 | 382 |
| prom/ | v0.15.0 | 00886 | 782 |
| ghcr.io/ | 1.8.4 | 00011 | 74 |
| quay.io/ | RELEASE.2022-10-20T23-26-33Z | 61464207 | 4,432 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2024-2600 | stdlib | 1.21.8 |
| Low | GHSA-pvcr-v8j8-j5q3 | github.com/ | 1.2.28 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | DEBIAN-CVE-2026-4873 | curl | no fix listed |
| Low | GO-2024-2609 | stdlib | 1.21.8 |
| Low | ALPINE-CVE-2026-34743 | xz | 5.8.3-r0 |
| Low | DEBIAN-CVE-2026-34743 | xz-utils | 5.4.1-1+deb12u1 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GO-2023-1751 | stdlib | 1.19.9 |
| Low | GO-2023-1753 | stdlib | 1.19.9 |
| Low | GHSA-pq67-6m6q-mj2v | urllib3 | 2.5.0 |
| Low | GHSA-ffqx-q65f-36jf | github.com/ | 2.10.3 |
| Low | RHSA-2025:8958 | libxml2 | 0:2.9.7-20.el8_10 |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | GHSA-cp6g-7hqx-qxhp | go.mongodb.org/ | 1.17.7 |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | RHSA-2026:33126 | glibc | 0:2.28-251.el8_10.38 |
| Low | DEBIAN-CVE-2026-7010 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | ALPINE-CVE-2026-22801 | libpng | 1.6.54-r0 |
| Low | DEBIAN-CVE-2023-52426 | expat | no fix listed |
| Low | RHSA-2026:13285 | libcap | 0:2.48-6.el8_10.1 |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | GHSA-497x-rrr9-68jp | github.com/ | 3.6.4 |
| Low | GHSA-65pc-fj4g-8rjx | idna | 3.15 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | GO-2023-2041 | stdlib | 1.20.8 |
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | ALPINE-CVE-2026-42769 | openssl | 3.5.7-r0 |
| Low | RHSA-2025:3828 | glibc | 0:2.28-251.el8_10.16 |
| Low | GHSA-vffh-x6r8-xx99 | github.com/ | 0.311.2-0.20260410083055-07c6232d159b |
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | GO-2023-2186 | stdlib | 1.20.11 |
| Low | RHSA-2026:50077 | systemd | 0:239-58.el8_6.16 |
| Low | RHSA-2026:20587 | glibc | 0:2.28-251.el8_10.37 |
| Low | GHSA-32fw-gq77-f2f2 | github.com/ | 1.5.1 |
| Low | GO-2024-3333 | golang.org/ | 0.33.0 |
| Low | GHSA-9h8m-3fm2-qjrq | go.opentelemetry.io/ | 1.40.0 |
| Low | ALPINE-CVE-2026-78408 | util-linux | 2.41.6-r1 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-jpcw-4wr7-c3vq | github.com/ | 0.144.0 |
| Low | RHSA-2026:43420 | acl | 0:2.4.0-1.el8_10 |
| Low | DEBIAN-CVE-2026-41989 | libgcrypt20 | 1.10.1-3+deb12u1 |
| Low | GHSA-48p4-8xcf-vxj5 | urllib3 | 2.5.0 |
| Low | RHSA-2025:1517 | libxml2 | 0:2.9.7-18.el8_10.2 |
| Low | RHSA-2025:21977 | libssh | 0:0.9.6-16.el8_10 |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | GO-2022-1095 | stdlib | 1.18.8 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 4.0.2latest | 13 days ago | v1.12.1-distroless | 14333261,450 | 21,641 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.