dnation-kubernetes-monitoring-stack Helm chart

Name: dnation-kubernetes-monitoring-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dnationcloud

Scored 14 Sept 2026

An umbrella helm chart for Kubernetes monitoring based on kube-prometheus-stack, thanos, loki, promtail and dnation-kubernetes-monitoring

Latest 4.0.2 13 days agodeploys tag v1.12.1-distroless 0Artifact Hub

dnation-kubernetes-monitoring-stack 4.0.2 deploys 17 container images: quay.io/prometheus/node-exporter, grafana/loki-canary, grafana/promtail, dnationcloud/kubernetes-jsonnet-translator and 13 more. Across the 16 measured, 1,823 findings — 14 critical, 33 high — 10 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-189.5.el8_6, fixed in 0:2.28-236.el8_9.13.

Radar Score

21,64114333261,450

1,823 findings over 16 of 17 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

17 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.12.1-distroless	00012	78
grafana/loki-canary	3.2.0	0017121	1,277
grafana/promtail	3.0.0	—	unmeasured
dnationcloud/kubernetes-jsonnet-translator×2	2.0.1	1171258	3,822
quay.io/kiwigrid/k8s-sidecar×2	2.8.1	001025	444
grafana/grafana	13.1.0	001494	1,073
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.19.1	00024	163
quay.io/prometheus-operator/prometheus-operator	v0.92.1	00021	144
nginxinc/nginx-unprivileged	1.27-alpine	011659	840
grafana/loki×3	3.2.0	0017126	1,330
bitnamilegacy/thanos	0.37.1-debian-12-r0	0010103	961
quay.io/minio/minio	RELEASE.2022-10-24T18-35-07Z	61569241	4,960
kiwigrid/k8s-sidecar	1.28.0	112045	879
library/memcached×2	1.6.32-alpine	011017	382
prom/memcached-exporter×2	v0.15.0	00886	782
ghcr.io/jkroepke/kube-webhook-certgen×2	1.8.4	00011	74
quay.io/minio/mc×2	RELEASE.2022-10-20T23-26-33Z	61464207	4,432

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

817 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-cx63-2mw6-8hw5	setuptools@57.5.0	70.0.0
Medium	RHSA-2023:6292	curl@7.61.1-22.el8_6.4	0:7.61.1-22.el8_6.9
Medium	GHSA-38jv-5279-wg99	urllib3@1.25.11	2.6.3
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.50.1	1.79.3
Medium	RHSA-2024:7846	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_6
Medium	ALPINE-CVE-2025-49796	libxml2@2.13.4-r6	2.13.9-r0
Medium	RHSA-2025:10698	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.1
Medium	RHSA-2025:12098	libxml2@2.9.7-13.el8_6.1	0:2.9.7-13.el8_6.10
Medium	DEBIAN-CVE-2022-24975	git@1:2.39.5-0+deb12u3	no fix listed
Medium	GHSA-r9hx-vwmv-q579	setuptools@57.5.0	65.5.1
Medium	ALPINE-CVE-2026-19931	curl@8.20.0-r1	8.22.0-r0
Medium	DEBIAN-CVE-2026-19931	curl@7.88.1-10+deb12u15	no fix listed
Medium	RHSA-2022:7089	libksba@1.3.5-7.el8	0:1.3.5-8.el8_6
Medium	PYSEC-2025-49	setuptools@57.5.0	78.1.1
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u8	no fix listed
Medium	ALPINE-CVE-2026-9079	curl@8.20.0-r1	8.21.0-r0
Medium	DEBIAN-CVE-2026-42010	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Medium	RHSA-2023:0594	libksba@1.3.5-8.el8_6	0:1.3.5-9.el8_6
Medium	RHSA-2024:0208	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-12.el8_6
Medium	DEBIAN-CVE-2023-31486	perl@5.36.0-7+deb12u3	no fix listed
Medium	RHSA-2024:1601	curl@7.61.1-22.el8_6.4	0:7.61.1-33.el8_9.5
Medium	RHSA-2024:1102	gmp@1:6.1.2-10.el8	1:6.1.2-11.el8_6.1
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2018-5709	krb5@1.20.1-2+deb12u2	no fix listed
Medium	DEBIAN-CVE-2024-28757	expat@2.5.0-1+deb12u1	no fix listed
Medium	ALPINE-CVE-2026-10536	curl@8.20.0-r1	8.21.0-r0
Medium	DEBIAN-CVE-2026-10536	curl@7.88.1-10+deb12u15	no fix listed
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.1.0	0.4.0
Medium	DEBIAN-CVE-2023-2953	openldap@2.5.13+dfsg-5	no fix listed
Medium	RHSA-2022:7105	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6
Medium	RHSA-2024:5312	krb5@1.18.2-14.el8	0:1.18.2-29.el8_10
Medium	RHSA-2024:5625	krb5@1.18.2-14.el8	0:1.18.2-16.el8_6.1
Medium	DEBIAN-CVE-2023-52425	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u2
Medium	GHSA-fxg5-wq6x-vr4w	golang.org/x/net@v0.1.0	0.1.1-0.20221104162952-702349b0e862
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.10.1-3	no fix listed
Medium	RHSA-2026:20611	gnutls@3.6.16-4.el8	0:3.6.16-8.el8_10.6
Medium	RHSA-2026:30849	libtasn1@4.13-3.el8	0:4.13-3.el8_6.2
Medium	RHSA-2026:30849	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6.5
Medium	DEBIAN-CVE-2025-32988	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Medium	RHSA-2024:4264	openldap@2.4.46-18.el8	0:2.4.46-19.el8_10
Medium	RHSA-2024:0627	gnutls@3.6.16-4.el8	0:3.6.16-8.el8_9.1
Medium	RHSA-2024:8922	bzip2@1.0.6-26.el8	0:1.0.6-27.el8_10
Medium	ALPINE-CVE-2026-18924	curl@8.20.0-r1	8.22.0-r0
Medium	DEBIAN-CVE-2026-18924	curl@7.88.1-10+deb12u15	no fix listed
Medium	RHSA-2022:7108	sqlite@3.26.0-15.el8	0:3.26.0-16.el8_6
Medium	ALPINE-CVE-2025-9230	openssl@3.3.2-r1	3.3.5-r0
Medium	DEBIAN-CVE-2025-9230	openssl@3.0.14-1~deb12u2	3.0.17-1~deb12u3
Medium	ALPINE-CVE-2026-11856	curl@8.20.0-r1	8.21.0-r0
Medium	DEBIAN-CVE-2026-11856	curl@7.88.1-10+deb12u15	no fix listed
Medium	PYSEC-2023-192	urllib3@1.25.11	2.0.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.2latest	13 days ago	v1.12.1-distroless	14333261,450	21,641

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dnationcloud/dnation-kubernetes-monitoring-stack.svg)](https://charts.stackradar.io/charts/dnationcloud/dnation-kubernetes-monitoring-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.