codecov 0.2.4 Helm chart

Name: codecov Helm chart 0.2.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.2.4 6 months agoapp version 24.4.1 0Artifact Hub

codecov 0.2.4 deploys 8 container images: codecov/self-hosted-api, codecov/self-hosted-worker, codecov/self-hosted-gateway, codecov/self-hosted-frontend and 4 more. Across the 6 measured, 1,958 findings — 13 critical, 40 high — 6 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.7, fixed in 7.81.0-1ubuntu1.14.

Radar Score

24,91713403911,513

1,958 findings over 6 of 8 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
codecov/self-hosted-api	24.4.1	2962108	2,900
codecov/self-hosted-worker	24.4.1	264899	2,361
codecov/self-hosted-gateway	24.4.1	03594	998
codecov/self-hosted-frontend	24.4.1	04916	574
bitnami/postgresql	15.4.0-debian-11-r10	—	unmeasured
bitnami/redis	7.2.0-debian-11-r3	—	unmeasured
timescale/timescaledb-ha×2	pg14.6-ts2.9.1-p1	8142611,192	17,602
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,673 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1s-r0	1.1.1t-r0
Medium	UBUNTU-CVE-2022-4304	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2020-10735	python3.10@3.10.6-1~22.04.2	no fix listed
Medium	ALPINE-CVE-2024-10979	postgresql15@15.6-r0	15.9-r0
Medium	UBUNTU-CVE-2024-10979	postgresql-14@14.6-1.pgdg22.04+1	14.15-0ubuntu0.22.04.1
Medium	UBUNTU-CVE-2023-5869	postgresql-14@14.6-1.pgdg22.04+1	14.10-0ubuntu0.22.04.1
Medium	UBUNTU-CVE-2022-48522	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.3
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.31.0
Medium	UBUNTU-CVE-2019-9543	poppler@22.02.0-2ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2018-13876	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-8j24-cjrq-gr2m	django@4.2.7	4.2.21
Medium	UBUNTU-CVE-2022-1253	libde265@1.0.8-1	1.0.8-1ubuntu0.1
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1s-r0	1.1.1t-r0
Medium	UBUNTU-CVE-2023-0215	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2018-13867	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2012-0880	xerces-c@3.2.3+debian-3build1	no fix listed
Medium	ALPINE-CVE-2024-6197	curl@8.5.0-r0	8.9.0-r0
Medium	UBUNTU-CVE-2018-13874	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2018-13871	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2018-13872	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b
Medium	GHSA-w3h3-4rj7-4ph4	gunicorn@20.1.0	22.0.0
Medium	UBUNTU-CVE-2021-46848	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.2
Medium	UBUNTU-CVE-2024-45490	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.4
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1s-r0	1.1.1t-r1
Medium	UBUNTU-CVE-2023-0464	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.9
Medium	UBUNTU-CVE-2023-27534	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.10
Medium	PYSEC-2024-187	virtualenv@20.4.3	20.26.6
Medium	UBUNTU-CVE-2018-13866	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2018-13868	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	ALPINE-CVE-2023-5363	openssl@3.1.0-r4	3.1.4-r0
Medium	UBUNTU-CVE-2023-5363	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.12
Medium	ALPINE-CVE-2024-37371	krb5@1.20.1-r1	1.20.2-r1
Medium	UBUNTU-CVE-2024-37371	krb5@1.19.2-2	1.19.2-2ubuntu0.4
Medium	GHSA-2m57-hf25-phgg	sqlparse@0.4.4	0.5.0
Medium	UBUNTU-CVE-2023-27533	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.10
Medium	GHSA-m9g8-fxxm-xg86	django@4.2.7	4.2.17
Medium	GHSA-cx63-2mw6-8hw5	setuptools@59.6.0	70.0.0
Medium	UBUNTU-CVE-2024-6345	setuptools@59.6.0-1.2	59.6.0-1.2ubuntu0.22.04.2
Medium	ALPINE-CVE-2024-45492	expat@2.5.0-r1	2.6.3-r0
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-13ubuntu0.22.04.1	no fix listed
Medium	UBUNTU-CVE-2018-11205	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-38jv-5279-wg99	urllib3@1.26.18	2.6.3
Medium	UBUNTU-CVE-2026-21441	python-urllib3@1.26.5-1~exp1	1.26.5-1~exp1ubuntu0.5
Medium	UBUNTU-CVE-2019-9545	poppler@22.02.0-2ubuntu0.1	no fix listed
Medium	ALPINE-CVE-2024-4741	openssl@3.0.12-r4	3.0.14-r0
Medium	UBUNTU-CVE-2024-4741	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17
Medium	UBUNTU-CVE-2022-28321	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.1
Medium	UBUNTU-CVE-2021-32292	json-c@0.15-3~ubuntu1.22.04.1	0.15-3~ubuntu1.22.04.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.4latest	6 months ago	24.4.1	13403911,513	24,917

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/codecov.svg)](https://charts.stackradar.io/charts/douban/codecov)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.