codecov Helm chart

Name: codecov Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.2.4 6 months agoapp version 24.4.1 0Artifact Hub

codecov 0.2.4 deploys 8 container images: codecov/self-hosted-api, codecov/self-hosted-worker, codecov/self-hosted-gateway, codecov/self-hosted-frontend and 4 more. Across the 6 measured, 1,958 findings — 13 critical, 40 high — 6 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.7, fixed in 7.81.0-1ubuntu1.14.

Radar Score

24,91713403911,513

1,958 findings over 6 of 8 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
codecov/self-hosted-api	24.4.1	2962108	2,900
codecov/self-hosted-worker	24.4.1	264899	2,361
codecov/self-hosted-gateway	24.4.1	03594	998
codecov/self-hosted-frontend	24.4.1	04916	574
bitnami/postgresql	15.4.0-debian-11-r10	—	unmeasured
bitnami/redis	7.2.0-debian-11-r3	—	unmeasured
timescale/timescaledb-ha×2	pg14.6-ts2.9.1-p1	8142611,192	17,602
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,673 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-8286	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.25
Low	ALPINE-CVE-2024-0853	curl@8.5.0-r0	8.6.0-r0
Low	GHSA-wf93-45jw-7689	pip@22.0.4	26.1.2
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.29
Low	UBUNTU-CVE-2024-33602	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.8
Low	UBUNTU-CVE-2023-21933	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.33-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-21935	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.33-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-21945	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.33-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-21955	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.33-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-21962	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.33-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-30693	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.42-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-14679	postgresql-14@14.6-1.pgdg22.04+1	14.24-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-21911	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.33-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-22054	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.34-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-22057	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.34-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-4046	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14
Low	UBUNTU-CVE-2026-58014	glib2.0@2.72.4-0ubuntu1	no fix listed
Low	UBUNTU-CVE-2019-14855	gnupg1@1.4.23-1.1build1	no fix listed
Low	GHSA-xgmm-8j9v-c9wx	pyjwt@2.8.0	2.13.0
Low	UBUNTU-CVE-2026-48526	pyjwt@2.3.0-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-0966	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.6
Low	UBUNTU-CVE-2025-14512	glib2.0@2.72.4-0ubuntu1	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2023-25221	libde265@1.0.8-1	1.0.8-1ubuntu0.2
Low	UBUNTU-CVE-2026-48959	perl@5.34.0-3ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2026-59843	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.8
Low	UBUNTU-CVE-2026-5928	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14
Low	GHSA-wqp7-x3pw-xc5r	starlette@0.36.2	1.1.0
Low	UBUNTU-CVE-2026-3833	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2025-50078	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-40164	jq@1.6-2.1ubuntu3	1.6-2.1ubuntu3.2
Low	UBUNTU-CVE-2022-47665	libde265@1.0.8-1	1.0.8-1ubuntu0.2
Low	GHSA-h75v-3vvj-5mfj	jinja2@3.1.3	3.1.4
Low	UBUNTU-CVE-2026-60163	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2023-22008	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.34-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-22046	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.34-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-12819	pgbouncer@1.17.0-4.pgdg22.04+1	no fix listed
Low	UBUNTU-CVE-2023-39329	openjpeg2@2.4.0-6	no fix listed
Low	UBUNTU-CVE-2026-6478	postgresql-14@14.6-1.pgdg22.04+1	14.23-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-32570	dav1d@0.9.2-1	no fix listed
Low	UBUNTU-CVE-2024-20964	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.36-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-6791	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2026-60315	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2025-21490	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.41-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-27943	gdb@12.1-0ubuntu1~22.04	no fix listed
Low	UBUNTU-CVE-2022-27943	gcc-12@12.1.0-2ubuntu1~22.04	no fix listed
Low	UBUNTU-CVE-2023-34872	poppler@22.02.0-2ubuntu0.1	22.02.0-2ubuntu0.2
Low	UBUNTU-CVE-2025-21504	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.40-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2024-21166	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.37-0ubuntu0.22.04.3
Low	UBUNTU-CVE-2025-64720	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.1
Low	UBUNTU-CVE-2026-8458	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.25

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.4latest	6 months ago	24.4.1	13403911,513	24,917

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/codecov.svg)](https://charts.stackradar.io/charts/douban/codecov)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.