codecov Helm chart

Name: codecov Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.2.4 6 months agoapp version 24.4.1 0Artifact Hub

codecov 0.2.4 deploys 8 container images: codecov/self-hosted-api, codecov/self-hosted-worker, codecov/self-hosted-gateway, codecov/self-hosted-frontend and 4 more. Across the 6 measured, 1,958 findings — 13 critical, 40 high — 6 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.7, fixed in 7.81.0-1ubuntu1.14.

Radar Score

24,91713403911,513

1,958 findings over 6 of 8 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
codecov/self-hosted-api	24.4.1	11062108	2,899
codecov/self-hosted-worker	24.4.1	174899	2,360
codecov/self-hosted-gateway	24.4.1	03594	998
codecov/self-hosted-frontend	24.4.1	04916	574
bitnami/postgresql	15.4.0-debian-11-r10	—	unmeasured
bitnami/redis	7.2.0-debian-11-r3	—	unmeasured
timescale/timescaledb-ha×2	pg14.6-ts2.9.1-p1	7152611,201	17,662
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,682 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-g47c-3xmw-q6m2	djangorestframework@3.14.0	3.17.2
Low	GHSA-wfp6-f47h-hxc3	awscli@1.22.34	1.44.78
Low	UBUNTU-CVE-2023-5870	postgresql-14@14.6-1.pgdg22.04+1	14.10-0ubuntu0.22.04.1
Low	GHSA-q95w-c7qg-hrff	django@4.2.7	4.2.25
Low	ALPINE-CVE-2025-0167	curl@8.5.0-r0	8.12.0-r0
Low	UBUNTU-CVE-2025-0167	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.23
Low	UBUNTU-CVE-2025-8851	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.11
Low	UBUNTU-CVE-2026-40612	jq@1.6-2.1ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-44777	jq@1.6-2.1ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-50812	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.7
Low	UBUNTU-CVE-2026-18495	tiff@4.3.0-6ubuntu0.3	no fix listed
Low	GO-2025-4014	stdlib@go1.22.0	1.24.8
Low	UBUNTU-CVE-2023-4641	shadow@1:4.8.1-2ubuntu2.1	1:4.8.1-2ubuntu2.2
Low	UBUNTU-CVE-2026-14663	postgresql-14@14.6-1.pgdg22.04+1	14.24-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-41256	jq@1.6-2.1ubuntu3	no fix listed
Low	UBUNTU-CVE-2024-21231	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.40-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-49337	libde265@1.0.8-1	1.0.8-1ubuntu0.3+esm2
Low	UBUNTU-CVE-2026-34757	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.5
Low	GHSA-g7vv-2v7x-gj9p	tqdm@4.66.1	4.66.3
Low	GO-2025-3503	stdlib@go1.22.0	1.23.7
Low	UBUNTU-CVE-2026-18938	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1
Low	UBUNTU-CVE-2026-0989	libxml2@2.9.13+dfsg-1ubuntu0.2	2.9.13+dfsg-1ubuntu0.11
Low	UBUNTU-CVE-2026-6472	postgresql-14@14.6-1.pgdg22.04+1	14.23-0ubuntu0.22.04.1
Low	GO-2026-4976	stdlib@go1.22.0	1.25.10
Low	UBUNTU-CVE-2025-5278	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4
Low	UBUNTU-CVE-2026-47770	jq@1.6-2.1ubuntu3	no fix listed
Low	GO-2026-5856	stdlib@go1.22.0	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.0.12-r4	3.0.19-r0
Low	UBUNTU-CVE-2026-22795	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
Low	GO-2025-4007	stdlib@go1.22.0	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.56.0
Low	UBUNTU-CVE-2026-62289	libheif@1.12.0-2build1	1.12.0-2ubuntu0.1~esm4
Low	GO-2026-4980	stdlib@go1.22.0	1.25.10
Low	UBUNTU-CVE-2024-7883	llvm-toolchain-14@1:14.0.0-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-42770	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25
Low	GO-2026-5039	stdlib@go1.22.0	1.25.11
Low	UBUNTU-CVE-2025-3360	glib2.0@2.72.4-0ubuntu1	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2026-41257	jq@1.6-2.1ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-63381	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.1
Low	UBUNTU-CVE-2024-21213	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.40-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-41254	lcms2@2.12~rc1-2build2	2.12~rc1-2ubuntu0.1
Low	UBUNTU-CVE-2026-2003	postgresql-14@14.6-1.pgdg22.04+1	14.22-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-6075	python3.10@3.10.6-1~22.04.2	3.10.12-1~22.04.12
Low	UBUNTU-CVE-2025-8114	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5
Low	GHSA-m959-cc7f-wv43	cryptography@42.0.0	46.0.6
Low	UBUNTU-CVE-2026-1484	glib2.0@2.72.4-0ubuntu1	2.72.4-0ubuntu2.9
Low	UBUNTU-CVE-2026-6667	pgbouncer@1.17.0-4.pgdg22.04+1	no fix listed
Low	UBUNTU-CVE-2026-42371	uriparser@0.9.6+dfsg-1	no fix listed
Low	GO-2025-4013	stdlib@go1.22.0	1.24.8
Low	GO-2025-3849	stdlib@go1.22.0	1.23.12

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.4latest	6 months ago	24.4.1	13403911,513	24,917

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/codecov.svg)](https://charts.stackradar.io/charts/douban/codecov)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.