codecov Helm chart

Name: codecov Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.2.4 6 months agoapp version 24.4.1 0Artifact Hub

codecov 0.2.4 deploys 8 container images: codecov/self-hosted-api, codecov/self-hosted-worker, codecov/self-hosted-gateway, codecov/self-hosted-frontend and 4 more. Across the 6 measured, 1,958 findings — 13 critical, 40 high — 6 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.7, fixed in 7.81.0-1ubuntu1.14.

Radar Score

24,91713403911,513

1,958 findings over 6 of 8 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
codecov/self-hosted-api	24.4.1	2962108	2,900
codecov/self-hosted-worker	24.4.1	264899	2,361
codecov/self-hosted-gateway	24.4.1	03594	998
codecov/self-hosted-frontend	24.4.1	04916	574
bitnami/postgresql	15.4.0-debian-11-r10	—	unmeasured
bitnami/redis	7.2.0-debian-11-r3	—	unmeasured
timescale/timescaledb-ha×2	pg14.6-ts2.9.1-p1	8142611,192	17,602
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,673 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2023-38545	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.14
Critical	UBUNTU-CVE-2023-4863KEV	libwebp@1.2.2-2	1.2.2-2ubuntu0.22.04.2
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.11.1+dfsg-1ubuntu0.1	2.11.1+dfsg-1ubuntu0.3
Critical	ALPINE-CVE-2025-1094	postgresql15@15.6-r0	15.11-r0
Critical	UBUNTU-CVE-2025-1094	postgresql-14@14.6-1.pgdg22.04+1	14.17-0ubuntu0.22.04.1
Critical	UBUNTU-CVE-2023-4911KEV	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.4
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.47.0-r0	1.47.0-r2
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.1
Critical	ALPINE-CVE-2025-6965	sqlite@3.41.2-r2	3.41.2-r4
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.5
Critical	UBUNTU-CVE-2024-2961	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.7
High	ALPINE-CVE-2025-15467	openssl@3.0.12-r4	3.0.19-r0
High	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
High	ALPINE-CVE-2024-6119	openssl@3.0.12-r4	3.0.15-r0
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.18
High	GHSA-86qp-5c8j-p5mrKEV	starlette@0.36.2	1.0.1
High	UBUNTU-CVE-2007-4559	python3.10@3.10.6-1~22.04.2	3.10.12-1~22.04.2
High	ALPINE-CVE-2023-0286	openssl@1.1.1s-r0	1.1.1t-r0
High	GHSA-x4qr-2fvf-3mr5	cryptography@3.4.8	39.0.1
High	UBUNTU-CVE-2023-0286	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
High	ALPINE-CVE-2024-2398	curl@8.5.0-r0	8.7.1-r0
High	UBUNTU-CVE-2024-2398	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.16
High	ALPINE-CVE-2023-2650	openssl@3.1.0-r4	3.1.1-r0
High	UBUNTU-CVE-2023-2650	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10
High	ALPINE-CVE-2023-48795	libssh2@1.10.0-r2	1.11.0-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20231218163308-9d2ee975ef9f
High	UBUNTU-CVE-2023-48795	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.2
High	GHSA-frmv-pr5f-9mcr	django@4.2.7	4.2.26
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.21.0	0.23.0
High	UBUNTU-CVE-2024-28182	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.2
High	GHSA-f6f8-9mx6-9mx2	django@4.2.7	4.2.14
High	ALPINE-CVE-2024-2511	openssl@3.0.12-r4	3.0.12-r5
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17
High	UBUNTU-CVE-2024-3596	krb5@1.19.2-2	1.19.2-2ubuntu0.5
High	GHSA-mwm9-4648-f68q	django@4.2.7	4.2.28
High	UBUNTU-CVE-2023-24329	python3.10@3.10.6-1~22.04.2	3.10.6-1~22.04.2ubuntu1.1
High	ALPINE-CVE-2022-4450	openssl@1.1.1s-r0	1.1.1t-r0
High	UBUNTU-CVE-2022-4450	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
High	PYSEC-2025-105	django@4.2.7	4.2.24
Medium	GO-2024-2687	stdlib@go1.22.0	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
Medium	UBUNTU-CVE-2023-21887	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.32-0buntu0.22.04.1
Medium	UBUNTU-CVE-2018-1311	xerces-c@3.2.3+debian-3build1	3.2.3+debian-3ubuntu0.1
Medium	ALPINE-CVE-2024-7264	curl@8.5.0-r0	8.9.1-r0
Medium	UBUNTU-CVE-2022-42898	krb5@1.19.2-2	1.19.2-2ubuntu0.1
Medium	UBUNTU-CVE-2024-7264	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.17
Medium	ALPINE-CVE-2024-5535	openssl@3.0.12-r4	3.0.14-r0
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17
Medium	GHSA-5hgc-2vfp-mqvc	django@4.2.7	4.2.16
Medium	UBUNTU-CVE-2019-2126	aom@3.3.0-1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.4latest	6 months ago	24.4.1	13403911,513	24,917

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/codecov.svg)](https://charts.stackradar.io/charts/douban/codecov)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.