upgrade-responder 0.2.0 Helm chart

Name: upgrade-responder Helm chart 0.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

epinio

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.2.0 2 years agoApp version not verified against the render 0Artifact Hub

upgrade-responder 0.2.0 deploys 5 container images: curlimages/curl, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, longhornio/upgrade-responder and 1 more. Across them, 580 findings — 6 critical, 14 high — 3 on CISA KEV. The highest contribution is GHSA-rgjg-66cx-5x9m in github.com/grafana/grafana v0.0.0-20231011162216-849c612fcb73, fixed in 4.6.4.

Radar Score

7,329614112448

580 findings over 5 of 5 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	7.85.0	1362	405
quay.io/kiwigrid/k8s-sidecar	1.25.2	122630	984
grafana/grafana	10.1.5	3844205	3,297
longhornio/upgrade-responder	v0.2.0	1032203	2,436
library/influxdb	1.8.10-alpine	0148	207

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

488 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2021-33560	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1q-r0	1.1.1u-r2
Medium	UBUNTU-CVE-2016-20013	glibc@2.31-0ubuntu9.9	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.30.0-9ubuntu0.4	no fix listed
Medium	ALPINE-CVE-2024-28757	expat@2.5.0-r1	2.6.2-r0
Medium	ALPINE-CVE-2023-36054	krb5@1.20.1-r1	1.20.2-r0
Medium	ALPINE-CVE-2023-52425	expat@2.5.0-r1	2.6.0-r0
Medium	UBUNTU-CVE-2011-10043	perl@5.30.0-9ubuntu0.4	no fix listed
Medium	ALPINE-CVE-2024-45490	expat@2.5.0-r1	2.6.3-r0
Medium	UBUNTU-CVE-2024-33599	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.16
Medium	UBUNTU-CVE-2026-4176	perl@5.30.0-9ubuntu0.4	no fix listed
Medium	UBUNTU-CVE-2024-0553	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.10
Medium	GHSA-8pgv-569h-w5rw	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.42.0	0.46.0
Medium	ALPINE-CVE-2023-5678	openssl@3.1.3-r0	3.1.4-r1
Medium	ALPINE-CVE-2025-9230	openssl@3.0.15-r0	3.0.19-r0
Medium	UBUNTU-CVE-2017-20230	perl@5.30.0-9ubuntu0.4	no fix listed
Medium	ALPINE-CVE-2023-6129	openssl@3.1.3-r0	3.1.4-r3
Medium	PYSEC-2024-60	idna@3.4	3.7
Medium	GHSA-rcjv-mgp8-qvmr	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0	0.44.0
Medium	GHSA-rcjv-mgp8-qvmr	go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0	0.44.0
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2
Medium	ALPINE-CVE-2024-8176	expat@2.5.0-r1	2.7.0-r0
Medium	ALPINE-CVE-2024-9681	curl@8.4.0-r0	8.11.0-r0
Medium	ALPINE-CVE-2023-35945	nghttp2@1.46.0-r0	1.46.0-r1
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.30.0	1.33.0
Medium	ALPINE-CVE-2024-0727	openssl@3.1.3-r0	3.1.4-r5
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.11.0	0.52.0
Medium	UBUNTU-CVE-2023-26604	systemd@245.4-4ubuntu3.22	no fix listed
Medium	ALPINE-CVE-2025-0725	curl@8.4.0-r0	8.12.0-r0
Medium	ALPINE-CVE-2023-7104	sqlite@3.41.2-r2	3.41.2-r3
Medium	UBUNTU-CVE-2025-13151	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1
Medium	GHSA-2xpw-w6gg-jr37	urllib3@2.0.6	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@2.0.6	2.6.0
Medium	UBUNTU-CVE-2019-1010024	glibc@2.31-0ubuntu9.9	no fix listed
Medium	ALPINE-CVE-2023-6237	openssl@3.1.3-r0	3.1.4-r4
Medium	UBUNTU-CVE-2022-41409	pcre2@10.34-7ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-5450	glibc@2.31-0ubuntu9.9	no fix listed
Medium	GHSA-v5gq-qvjq-8p53	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	5.2.0-beta1
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.11.0	0.52.0
Medium	ALPINE-CVE-2024-9143	openssl@3.1.3-r0	3.1.7-r1
Medium	ALPINE-CVE-2023-46218	curl@8.4.0-r0	8.5.0-r0
Medium	GHSA-mvpr-q6rh-8vrp	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	7.1.0-beta1
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.11.0	0.52.0
Medium	ALPINE-CVE-2025-0665	curl@8.4.0-r0	8.12.0-r0
Medium	GHSA-ccmg-w4xm-p28v	github.com/grafana/grafana@v0.0.0-20231011162216-849c612fcb73	6.7.3
Medium	PYSEC-2024-230	certifi@2023.7.22	2024.7.4
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20200107162124-548cf772de50	0.0.0-20220412211240-33da011f77ad
Medium	ALPINE-CVE-2025-31115	xz@5.4.3-r0	5.4.3-r1
Medium	ALPINE-CVE-2024-2379	curl@8.4.0-r0	8.7.1-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	2 years ago	—	614112448	7,329

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/epinio/upgrade-responder.svg)](https://charts.stackradar.io/charts/epinio/upgrade-responder)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.