codecov Helm chart

Name: codecov Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 15 Sept 2026

A Helm chart for Kubernetes

Latest 0.2.4 6 months agoapp version 24.4.1 0Artifact Hub

codecov 0.2.4 deploys 8 container images: codecov/self-hosted-api, codecov/self-hosted-worker, codecov/self-hosted-gateway, codecov/self-hosted-frontend and 4 more. Across the 6 measured, 1,967 findings — 10 critical, 43 high — 6 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.7, fixed in 7.81.0-1ubuntu1.14.

Radar Score

24,97510433911,522

1,967 findings over 6 of 8 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
codecov/self-hosted-api	24.4.1	11062108	2,899
codecov/self-hosted-worker	24.4.1	174899	2,360
codecov/self-hosted-gateway	24.4.1	03594	998
codecov/self-hosted-frontend	24.4.1	04916	574
bitnami/postgresql	15.4.0-debian-11-r10	—	unmeasured
bitnami/redis	7.2.0-debian-11-r3	—	unmeasured
timescale/timescaledb-ha×2	pg14.6-ts2.9.1-p1	7152611,201	17,662
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,682 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-18374	glibc@2.35-0ubuntu3.1	no fix listed
Low	GHSA-mjgh-79qc-68w3	django@4.2.7	4.2.29
Low	UBUNTU-CVE-2026-16742	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.22
Low	UBUNTU-CVE-2026-17574	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-54679	jq@1.6-2.1ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-6474	postgresql-14@14.6-1.pgdg22.04+1	14.23-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-32364	poppler@22.02.0-2ubuntu0.1	22.02.0-2ubuntu0.7
Low	UBUNTU-CVE-2026-86469	glib2.0@2.72.4-0ubuntu1	no fix listed
Low	GHSA-h4gh-qq45-vh27	cryptography@42.0.0	43.0.1
Low	UBUNTU-CVE-2023-38288	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.5
Low	UBUNTU-CVE-2023-38289	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.5
Low	UBUNTU-CVE-2026-17572	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-19542	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2026-36849	tiff@4.3.0-6ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-53613	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-53615	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-69184	c-ares@1.18.1-1build1	no fix listed
Low	UBUNTU-CVE-2026-69186	c-ares@1.18.1-1build1	no fix listed
Low	UBUNTU-CVE-2026-77117	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2026-80489	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2026-84383	libheif@1.12.0-2build1	no fix listed
Low	UBUNTU-CVE-2026-84450	libheif@1.12.0-2build1	no fix listed
Low	UBUNTU-CVE-2026-84451	libheif@1.12.0-2build1	no fix listed
Low	GHSA-cfqr-cjx5-5jcm	sqlparse@0.4.4	0.6.0
Low	UBUNTU-CVE-2026-6575	postgresql-14@14.6-1.pgdg22.04+1	14.23-0ubuntu0.22.04.1
Low	GHSA-993g-76c3-p5m4	pyjwt@2.8.0	2.13.0
Low	UBUNTU-CVE-2026-48522	pyjwt@2.3.0-1ubuntu0.2	no fix listed
Low	ALPINE-CVE-2025-68160	openssl@3.0.12-r4	3.0.19-r0
Low	UBUNTU-CVE-2025-68160	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
Low	UBUNTU-CVE-2025-61145	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.12
Low	UBUNTU-CVE-2023-22113	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.34-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-50096	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-32365	poppler@22.02.0-2ubuntu0.1	22.02.0-2ubuntu0.7
Low	UBUNTU-CVE-2026-14678	postgresql-14@14.6-1.pgdg22.04+1	14.24-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-18024	postgresql-14@14.6-1.pgdg22.04+1	14.24-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-6470	postgresql-14@14.6-1.pgdg22.04+1	14.24-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-25645	requests@2.25.1+dfsg-2	no fix listed
Low	GO-2026-4403	stdlib@go1.22.0	1.23.9
Low	UBUNTU-CVE-2026-59845	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.8
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-2ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2025-32415	libxml2@2.9.13+dfsg-1ubuntu0.2	2.9.13+dfsg-1ubuntu0.7
Low	GO-2026-5025	golang.org/x/net@v0.21.0	0.55.0
Low	GO-2026-4970	stdlib@go1.22.0	1.25.12
Low	UBUNTU-CVE-2025-30681	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.42-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-15224	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.22
Low	UBUNTU-CVE-2025-30721	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.42-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-6228	tiff@4.3.0-6ubuntu0.3	4.3.0-6ubuntu0.8
Low	UBUNTU-CVE-2023-6228	libgeotiff@1.7.0-2build1	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.21.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.21.0	0.55.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.4latest	6 months ago	24.4.1	10433911,522	24,975

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/codecov.svg)](https://charts.stackradar.io/charts/douban/codecov)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.