StackRadar

drogue-cloud-metrics 0.7.11 Helm chart

drogue-iotVerified publisher

Scored 14 Sept 2026

Drogue IoT Cloud metrics stack installation

Version 0.7.11 3 years agodeploys tag v1.1.2 0Artifact Hub

drogue-cloud-metrics 0.7.11 deploys 8 container images: quay.io/prometheus/node-exporter, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, k8s.gcr.io/kube-state-metrics/kube-state-metrics and 4 more. Across the 7 measured, 1,198 findings0 critical, 22 high 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-0286 in openssl 1.1.1o-r0, fixed in 1.1.1t-r0. Chart.yaml declares kubeVersion >= 1.22.0; rendered for Kubernetes 1.22.0.

Radar Score

13,5580221711,005

1,198 findings over 7 of 8 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images
ImageTagVulnerabilitiesRadar Score
quay.io/prometheus/node-exporterv1.1.203261582,106
quay.io/kiwigrid/k8s-sidecar×21.19.20428261,058
grafana/grafana9.2.406371982,839
k8s.gcr.io/kube-state-metrics/kube-state-metricsv2.1.1unmeasured
quay.io/prometheus/alertmanagerv0.21.004291652,305
jimmidyson/configmap-reload×2v0.5.00081251,260
prom/pushgatewayv1.3.10081261,272
quay.io/prometheus/prometheusv2.26.005352072,718

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

306 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-6vgw-5pg2-w6jppip@22.1.226.0
LowGHSA-5j5w-g665-5m35github.com/containerd/containerd@v1.4.31.4.12
LowGHSA-77vh-xpmg-72qhgithub.com/opencontainers/image-spec@v1.0.11.0.2
LowGHSA-qq97-vm5h-rrhggithub.com/docker/distribution@v2.7.1+incompatible2.8.0
LowGHSA-c9cp-9c75-9v8cgithub.com/containerd/containerd@v1.4.31.5.11
LowGHSA-vp35-85q5-9f25github.com/docker/docker@v20.10.5+incompatible20.10.20

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.7.11latest3 years agov1.1.20221711,00513,558

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-metrics.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-metrics)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.