upgrade-responder 0.2.0 Helm chart

Name: upgrade-responder Helm chart 0.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

epinio

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.2.0 2 years agoApp version not verified against the render 0Artifact Hub

upgrade-responder 0.2.0 deploys 5 container images: curlimages/curl, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, longhornio/upgrade-responder and 1 more. Across them, 580 findings — 6 critical, 14 high — 3 on CISA KEV. The highest contribution is GHSA-rgjg-66cx-5x9m in github.com/grafana/grafana v0.0.0-20231011162216-849c612fcb73, fixed in 4.6.4.

Radar Score

7,329614112448

580 findings over 5 of 5 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	7.85.0	1362	405
quay.io/kiwigrid/k8s-sidecar	1.25.2	122630	984
grafana/grafana	10.1.5	3844205	3,297
longhornio/upgrade-responder	v0.2.0	1032203	2,436
library/influxdb	1.8.10-alpine	0148	207

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

101 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-rcjv-mgp8-qvmr	go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0	0.44.0
Medium	GHSA-rcjv-mgp8-qvmr	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0	0.44.0
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2
Medium	ALPINE-CVE-2024-8176	expat@2.5.0-r1	2.7.0-r0
Medium	ALPINE-CVE-2024-9681	curl@8.4.0-r0	8.11.0-r0
Medium	ALPINE-CVE-2023-35945	nghttp2@1.46.0-r0	1.46.0-r1
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.30.0	1.33.0
Medium	ALPINE-CVE-2024-0727	openssl@3.1.3-r0	3.1.4-r5
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.11.0	0.52.0
Medium	UBUNTU-CVE-2023-26604	systemd@245.4-4ubuntu3.22	no fix listed
Medium	ALPINE-CVE-2025-0725	curl@8.4.0-r0	8.12.0-r0
Medium	ALPINE-CVE-2023-7104	sqlite@3.41.2-r2	3.41.2-r3
Medium	UBUNTU-CVE-2025-13151	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1
Medium	GHSA-2xpw-w6gg-jr37	urllib3@2.0.6	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@2.0.6	2.6.0
Medium	UBUNTU-CVE-2019-1010024	glibc@2.31-0ubuntu9.9	no fix listed
Medium	ALPINE-CVE-2023-6237	openssl@3.1.3-r0	3.1.4-r4
Medium	UBUNTU-CVE-2022-41409	pcre2@10.34-7ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-5450	glibc@2.31-0ubuntu9.9	no fix listed
Medium	GHSA-v5gq-qvjq-8p53	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	5.2.0-beta1
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.11.0	0.52.0
Medium	ALPINE-CVE-2024-9143	openssl@3.1.3-r0	3.1.7-r1
Medium	ALPINE-CVE-2023-46218	curl@8.4.0-r0	8.5.0-r0
Medium	GHSA-mvpr-q6rh-8vrp	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	7.1.0-beta1
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.11.0	0.52.0
Medium	ALPINE-CVE-2025-0665	curl@8.4.0-r0	8.12.0-r0
Medium	GHSA-ccmg-w4xm-p28v	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	6.7.3
Medium	PYSEC-2024-230	certifi@2023.7.22	2024.7.4
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20200107162124-548cf772de50	0.0.0-20220412211240-33da011f77ad
Medium	ALPINE-CVE-2025-31115	xz@5.4.3-r0	5.4.3-r1
Medium	ALPINE-CVE-2024-2379	curl@8.4.0-r0	8.7.1-r0
Medium	UBUNTU-CVE-2025-69720	ncurses@6.2-0ubuntu2.1	6.2-0ubuntu2.1+esm1
Medium	UBUNTU-CVE-2024-33601	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.16
Medium	UBUNTU-CVE-2026-8376	perl@5.30.0-9ubuntu0.4	5.30.0-9ubuntu0.5+esm2
Medium	GHSA-7m2x-qhrq-rp8h	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	7.0.0
Medium	ALPINE-CVE-2025-9232	openssl@3.0.15-r0	3.0.19-r0
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2
Medium	GHSA-cmq2-j8v8-2q44	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	6.0.0-beta1
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.11.0	0.52.0
Medium	UBUNTU-CVE-2023-4813	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.14
Medium	GHSA-ff5c-938w-8c9q	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	8.5.13
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.11.0	0.35.0
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2
Medium	ALPINE-CVE-2025-69421	openssl@3.0.15-r0	3.0.19-r0
Medium	GO-2022-1144	stdlib@go1.17.13	1.18.9
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.8.0	0.27.0
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm1
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.43.0	0.305.2
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	2 years ago	—	614112448	7,329

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/epinio/upgrade-responder.svg)](https://charts.stackradar.io/charts/epinio/upgrade-responder)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.