oncall Helm chart

Name: oncall Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 14 Sept 2026

Developer-friendly incident response with brilliant Slack integration

Latest 1.16.5 1 year agoapp version v1.16.5 11Artifact Hub

oncall 1.16.5 deploys 12 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, library/busybox and 8 more. Across the 9 measured, 1,490 findings — 0 critical, 30 high — 6 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.4-r0, fixed in 3.3.6-r0.

Radar Score

16,2510302011,259

1,490 findings over 9 of 12 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.8.0	0324149	1,917
quay.io/jetstack/cert-manager-controller	v1.8.0	0327161	2,067
quay.io/jetstack/cert-manager-webhook	v1.8.0	0217138	1,598
library/busybox	1.31.1	0000	0
grafana/grafana	11.1.4	0221151	1,738
registry.k8s.io/ingress-nginx/controller	v1.2.1	01029140	2,311
grafana/oncall×5	v1.16.5	0437182	2,550
bitnami/mariadb	10.11.4-debian-11-r0	—	unmeasured
bitnami/rabbitmq	3.12.0-debian-11-r0	—	unmeasured
bitnami/redis×2	6.2.7-debian-11-r11	—	unmeasured
quay.io/jetstack/cert-manager-ctl	v1.8.0	0432200	2,525
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v1.1.1	0214138	1,545

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

570 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-cx3h-4qpv-8hc9	tornado@6.5.1	6.5.6
Low	ALPINE-CVE-2026-6474	postgresql17@17.6-r0	17.10-r0
Low	GHSA-32gq-x56h-299c	filippo.io/age@v1.1.1	1.2.1
Low	GHSA-4gg8-gxpx-9rph	uv@0.8.13	0.11.15
Low	GHSA-6xv5-86q9-7xr8	github.com/cyphar/filepath-securejoin@v0.2.3	0.2.4
Low	GHSA-7ww5-4wqc-m92c	github.com/containerd/containerd@v1.5.10	1.6.26
Low	GHSA-jq35-85cj-fj4p	github.com/docker/docker@v20.10.12+incompatible	20.10.27
Low	GHSA-cfqr-cjx5-5jcm	sqlparse@0.5.3	0.6.0
Low	GHSA-993g-76c3-p5m4	pyjwt@2.10.1	2.13.0
Low	ALPINE-CVE-2025-68160	openssl@3.3.4-r0	3.3.6-r0
Low	ALPINE-CVE-2026-14678	postgresql17@17.6-r0	17.11-r0
Low	ALPINE-CVE-2026-18024	postgresql17@17.6-r0	17.11-r0
Low	ALPINE-CVE-2026-6470	postgresql17@17.6-r0	17.11-r0
Low	GO-2026-4403	stdlib@go1.22.4	1.23.9
Low	GHSA-29wx-vh33-7x7r	github.com/golang-jwt/jwt/v4@v4.5.0	4.5.1
Low	GO-2026-5025	golang.org/x/net@v0.26.0	0.55.0
Low	GO-2026-4970	stdlib@go1.22.4	1.25.12
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v1.1.2	1.1.14
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.51.31	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.26.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.26.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.26.0	0.55.0
Low	GHSA-58qw-9mgm-455v	pip@25.0.1	26.1
Low	ALPINE-CVE-2026-14666	postgresql17@17.6-r0	17.11-r0
Low	GO-2026-4602	stdlib@go1.22.4	1.25.8
Low	GHSA-3h9f-r86x-qvjx	django@4.2.22	5.2.16
Low	GO-2026-5622	github.com/containerd/containerd@v1.5.10	no fix listed
Low	ALPINE-CVE-2026-4519	python3@3.12.11-r0	3.12.14-r0
Low	GHSA-923m-gv2p-w5qp	django@4.2.22	5.2.15
Low	ALPINE-CVE-2026-16241	postgresql17@17.6-r0	17.11-r0
Low	ALPINE-CVE-2026-6469	postgresql17@17.6-r0	17.11-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.0-r0	2.8.1-r0
Low	ALPINE-CVE-2026-14673	postgresql17@17.6-r0	17.11-r0
Low	GHSA-8cjm-8mp7-r2xf	django@4.2.22	5.2.15
Low	ALPINE-CVE-2025-69418	openssl@3.3.4-r0	3.3.6-r0
Low	GHSA-h7pc-vwp9-298g	django@4.2.22	5.2.15
Low	GO-2026-5024	golang.org/x/sys@v0.21.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.18.0	0.40.0
Low	ALPINE-CVE-2025-12817	postgresql17@17.6-r0	17.7-r0
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.2	1.3.6
Low	DLA-3972-1	tzdata@2021a-1+deb11u2	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u2	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u1
Low	DLA-4403-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u2
Low	GO-2022-1107	github.com/docker/docker@v20.10.12+incompatible	20.10.20+incompatible
Low	GO-2023-2048	github.com/cyphar/filepath-securejoin@v0.2.3	0.2.4
Low	GO-2023-2153	google.golang.org/grpc@v1.43.0	1.56.3
Low	GO-2023-2412	github.com/containerd/containerd@v1.5.10	1.6.26
Low	GO-2024-2846	github.com/containerd/containerd@v1.5.10	1.5.11
Low	GO-2024-2978	google.golang.org/grpc@v1.64.0	1.64.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.16.5latest	1 year ago	v1.16.5	0302011,259	16,251

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/oncall.svg)](https://charts.stackradar.io/charts/grafana/oncall)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.