pyroscope 2.3.2 Helm chart

Name: pyroscope Helm chart 2.3.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 9 Oct 2026

A horizontally scalable, highly available, multi-tenant continuous profiling database.

Version 2.3.2 todayapp version 2.3.2 13Artifact Hub

pyroscope 2.3.2 deploys 3 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader and grafana/pyroscope. Across them, 211 findings — 0 critical, 0 high. The highest contribution is UBUNTU-CVE-2016-20013 in glibc 2.39-0ubuntu8.8, with no fix listed.

Radar Score

1,7300019192

211 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
grafana/alloy	v1.19.2	009118	1,009
quay.io/prometheus-operator/prometheus-config-reloader	v0.91.0	001055	645
grafana/pyroscope	2.3.2	00019	76

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

171 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	UBUNTU-CVE-2026-6791	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-19499	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.53.0	0.55.0
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.2	no fix listed
Low	GO-2026-4887	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-4970	stdlib@go1.25.9	1.25.12
Low	USN-8691-1	attr@1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-hjf4-fphr-2h65	go.opentelemetry.io/otel/sdk/log@v0.20.0	0.21.0
Low	UBUNTU-CVE-2026-103111	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GO-2026-4980	stdlib@go1.25.9	1.25.10
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-77117	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-80489	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.83.0	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.50.0	0.52.0
Low	GO-2026-4982	stdlib@go1.25.9	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.53.0	0.55.0
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GO-2026-6091	stdlib@go1.25.9	1.25.13
Low	UBUNTU-CVE-2026-89158	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-4976	stdlib@go1.25.9	1.25.10
Low	GO-2026-5039	stdlib@go1.25.9	1.25.11
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	UBUNTU-CVE-2026-75806	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-5856	stdlib@go1.25.9	1.25.12
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	UBUNTU-CVE-2026-89157	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-89161	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-8674	glibc@2.39-0ubuntu8.8	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.53.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.53.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.53.0	0.55.0
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	USN-8692-1	diffutils@1:3.10-1build1	1:3.10-1ubuntu0.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.2latest	today	2.3.2	0019192	1,730
2.3.1	30 days ago	2.3.1	1063367	4,295
2.2.1	2 months ago	2.2.1	1062364	4,317

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/pyroscope.svg)](https://charts.stackradar.io/charts/grafana/pyroscope)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.