codecov 0.2.4 Helm chart

Name: codecov Helm chart 0.2.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.2.4 6 months agoapp version 24.4.1 0Artifact Hub

codecov 0.2.4 deploys 8 container images: codecov/self-hosted-api, codecov/self-hosted-worker, codecov/self-hosted-gateway, codecov/self-hosted-frontend and 4 more. Across the 6 measured, 1,958 findings — 13 critical, 40 high — 6 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.7, fixed in 7.81.0-1ubuntu1.14.

Radar Score

24,91713403911,513

1,958 findings over 6 of 8 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
codecov/self-hosted-api	24.4.1	2962108	2,900
codecov/self-hosted-worker	24.4.1	264899	2,361
codecov/self-hosted-gateway	24.4.1	03594	998
codecov/self-hosted-frontend	24.4.1	04916	574
bitnami/postgresql	15.4.0-debian-11-r10	—	unmeasured
bitnami/redis	7.2.0-debian-11-r3	—	unmeasured
timescale/timescaledb-ha×2	pg14.6-ts2.9.1-p1	8142611,192	17,602
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,673 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2021-46242	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2024-23807	xerces-c@3.2.3+debian-3build1	3.2.3+debian-3ubuntu0.1
Medium	UBUNTU-CVE-2024-34402	uriparser@0.9.6+dfsg-1	0.9.6+dfsg-1ubuntu0.1~esm1
Medium	UBUNTU-CVE-2023-0216	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2023-0217	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2023-0401	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2022-4904	c-ares@1.18.1-1build1	1.18.1-1ubuntu0.22.04.1
Medium	ALPINE-CVE-2023-36054	krb5@1.20.1-r1	1.20.2-r0
Medium	UBUNTU-CVE-2023-36054	krb5@1.19.2-2	1.19.2-2ubuntu0.3
Medium	UBUNTU-CVE-2023-52355	tiff@4.3.0-6ubuntu0.3	no fix listed
Medium	ALPINE-CVE-2023-52425	expat@2.5.0-r1	2.6.0-r0
Medium	UBUNTU-CVE-2023-52425	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.3
Medium	UBUNTU-CVE-2026-2006	postgresql-14@14.6-1.pgdg22.04+1	14.22-0ubuntu0.22.04.1
Medium	UBUNTU-CVE-2024-32622	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2021-3575	openjpeg2@2.4.0-6	2.4.0-6ubuntu0.2
Medium	ALPINE-CVE-2024-45490	expat@2.5.0-r1	2.6.3-r0
Medium	UBUNTU-CVE-2023-39417	postgresql-14@14.6-1.pgdg22.04+1	14.9-0ubuntu0.22.04.1
Medium	UBUNTU-CVE-2023-3138	libx11@2:1.7.5-1	2:1.7.5-1ubuntu0.2
Medium	UBUNTU-CVE-2024-33599	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.8
Medium	UBUNTU-CVE-2020-18494	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2025-13836	python3.10@3.10.6-1~22.04.2	3.10.12-1~22.04.13
Medium	UBUNTU-CVE-2026-6473	postgresql-14@14.6-1.pgdg22.04+1	14.23-0ubuntu0.22.04.1
Medium	UBUNTU-CVE-2024-0553	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.4
Medium	UBUNTU-CVE-2026-18924	curl@7.81.0-1ubuntu1.7	no fix listed
Medium	GHSA-j8r2-6x86-q33q	requests@2.25.1	2.31.0
Medium	UBUNTU-CVE-2023-32681	requests@2.25.1+dfsg-2	2.25.1+dfsg-2ubuntu0.1
Medium	UBUNTU-CVE-2022-4899	libzstd@1.4.8+dfsg-3build1	no fix listed
Medium	UBUNTU-CVE-2023-32067	c-ares@1.18.1-1build1	1.18.1-1ubuntu0.22.04.2
Medium	ALPINE-CVE-2023-5678	openssl@3.1.0-r4	3.1.4-r1
Medium	UBUNTU-CVE-2023-5678	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.14
Medium	ALPINE-CVE-2024-7348	postgresql15@15.6-r0	15.8-r0
Medium	UBUNTU-CVE-2024-7348	postgresql-14@14.6-1.pgdg22.04+1	14.13-0ubuntu0.22.04.1
Medium	ALPINE-CVE-2025-9230	openssl@3.0.12-r4	3.0.19-r0
Medium	UBUNTU-CVE-2025-9230	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.20
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	UBUNTU-CVE-2021-37501	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2026-11856	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.26
Medium	UBUNTU-CVE-2023-23914	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.8
Medium	PYSEC-2023-192	urllib3@1.26.5	2.0.6
Medium	UBUNTU-CVE-2024-7006	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.10
Medium	ALPINE-CVE-2023-6129	openssl@3.1.0-r4	3.1.4-r3
Medium	UBUNTU-CVE-2023-6129	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.14
Medium	UBUNTU-CVE-2024-32605	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2024-32614	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2023-29483	dnspython@2.1.0-1ubuntu1	no fix listed
Medium	UBUNTU-CVE-2026-8925	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.25
Medium	UBUNTU-CVE-2019-20006	netcdf@1:4.8.1-1	no fix listed
Medium	GHSA-gvg8-93h5-g6qq	django@4.2.7	4.2.28
Medium	UBUNTU-CVE-2024-32608	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2021-26220	netcdf@1:4.8.1-1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.4latest	6 months ago	24.4.1	13403911,513	24,917

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/codecov.svg)](https://charts.stackradar.io/charts/douban/codecov)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.