codecov Helm chart

Name: codecov Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.2.4 6 months agoapp version 24.4.1 0Artifact Hub

codecov 0.2.4 deploys 8 container images: codecov/self-hosted-api, codecov/self-hosted-worker, codecov/self-hosted-gateway, codecov/self-hosted-frontend and 4 more. Across the 6 measured, 1,958 findings — 13 critical, 40 high — 6 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.7, fixed in 7.81.0-1ubuntu1.14.

Radar Score

24,91713403911,513

1,958 findings over 6 of 8 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
codecov/self-hosted-api	24.4.1	2962108	2,900
codecov/self-hosted-worker	24.4.1	264899	2,361
codecov/self-hosted-gateway	24.4.1	03594	998
codecov/self-hosted-frontend	24.4.1	04916	574
bitnami/postgresql	15.4.0-debian-11-r10	—	unmeasured
bitnami/redis	7.2.0-debian-11-r3	—	unmeasured
timescale/timescaledb-ha×2	pg14.6-ts2.9.1-p1	8142611,192	17,602
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,673 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-4317	postgresql-14@14.6-1.pgdg22.04+1	14.12-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-25435	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.4
Low	UBUNTU-CVE-2025-50094	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-53023	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2024-10976	postgresql-14@14.6-1.pgdg22.04+1	14.15-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-6135	nss@2:3.68.2-0ubuntu1.1	2:3.98-0ubuntu0.22.04.1
Low	GHSA-jfmj-5v4g-7637	zipp@3.17.0	3.19.1
Low	GO-2024-3333	golang.org/x/net@v0.21.0	0.33.0
Low	UBUNTU-CVE-2026-33947	jq@1.6-2.1ubuntu3	1.6-2.1ubuntu3.2
Low	UBUNTU-CVE-2026-78408	util-linux@2.37.2-4ubuntu3	no fix listed
Low	UBUNTU-CVE-2025-50099	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-50102	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2024-56826	openjpeg2@2.4.0-6	2.4.0-6ubuntu0.3
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.123.0	0.144.0
Low	GHSA-w7vc-732c-9m39	pyjwt@2.8.0	2.13.0
Low	UBUNTU-CVE-2026-48525	pyjwt@2.3.0-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-50097	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-50101	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-54369	acl@2.3.1-1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.2
Low	UBUNTU-CVE-2026-75466	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed
Low	UBUNTU-CVE-2025-1377	elfutils@0.186-1build1	0.186-1ubuntu0.1
Low	ALPINE-CVE-2024-11053	curl@8.5.0-r0	8.11.1-r0
Low	UBUNTU-CVE-2024-11053	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.20
Low	UBUNTU-CVE-2025-5372	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.4
Low	GO-2024-3105	stdlib@go1.22.0	1.22.7
Low	GO-2022-1095	stdlib@go1.19.1	1.18.8
Low	UBUNTU-CVE-2023-3164	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.9
Low	UBUNTU-CVE-2026-49839	jq@1.6-2.1ubuntu3	no fix listed
Low	UBUNTU-CVE-2025-2309	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	GO-2023-1621	stdlib@go1.19.1	1.19.7
Low	UBUNTU-CVE-2026-54371	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
Low	UBUNTU-CVE-2023-39128	gdb@12.1-0ubuntu1~22.04	12.1-0ubuntu1~22.04.2
Low	UBUNTU-CVE-2026-1489	glib2.0@2.72.4-0ubuntu1	2.72.4-0ubuntu2.9
Low	UBUNTU-CVE-2026-47052	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2025-6516	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	GO-2026-4981	stdlib@go1.22.0	1.25.10
Low	UBUNTU-CVE-2026-6019	python3.10@3.10.6-1~22.04.2	3.10.12-1~22.04.16
Low	GO-2025-3563	stdlib@go1.22.0	1.23.8
Low	UBUNTU-CVE-2026-60183	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2026-60331	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2026-60332	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2026-34318	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.2
Low	ALPINE-CVE-2024-10978	postgresql15@15.6-r0	15.9-r0
Low	UBUNTU-CVE-2024-10978	postgresql-14@14.6-1.pgdg22.04+1	14.15-0ubuntu0.22.04.1
Low	GO-2026-4977	stdlib@go1.22.0	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.6
Low	GO-2024-2610	stdlib@go1.22.0	1.21.8
Low	UBUNTU-CVE-2026-59848	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.4latest	6 months ago	24.4.1	13403911,513	24,917

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/codecov.svg)](https://charts.stackradar.io/charts/douban/codecov)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.