pyroscope 2.4.0 Helm chart

Name: pyroscope Helm chart 2.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

grafana

Scored 22 Oct 2026

A horizontally scalable, highly available, multi-tenant continuous profiling database.

Version 2.4.0 12 days agoapp version 2.4.0 13Artifact Hub

pyroscope 2.4.0 deploys 3 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader and grafana/pyroscope. Across them, 204 findings — 0 critical, 0 high. The highest contribution is UBUNTU-CVE-2016-20013 in glibc 2.39-0ubuntu8.8, with no fix listed.

Radar Score

2,0440025179

204 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
grafana/alloy	v1.19.2	0012123	1,224
quay.io/prometheus-operator/prometheus-config-reloader	v0.91.0	001354	811
grafana/pyroscope	2.4.0	0002	9

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

22 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2016-20013	glibc@2.39-0ubuntu8.8	no fix listed
Medium	GO-2026-5026	stdlib@go1.25.9	1.25.13
Medium	GO-2026-5026	golang.org/x/net@v0.53.0	0.55.0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.50.0	0.52.0
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.50.0	0.52.0
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.50.0	0.52.0
Medium	GO-2026-6612	stdlib@go1.25.9	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.53.0	0.60.0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.50.0	0.52.0
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.50.0	0.52.0
Medium	GO-2026-6604	stdlib@go1.25.9	1.26.9
Medium	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.12	3.5.33
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.83.0	1.83.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.83.0	1.83.1
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.50.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.50.0	0.52.0
Medium	GO-2026-4981	stdlib@go1.25.9	1.25.10
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.4.1latest	today	2.4.1	0025178	2,039
2.4.0	12 days ago	2.4.0	0025179	2,044
2.3.2	13 days ago	2.3.2	0025196	2,111
2.3.1	1 month ago	2.3.1	1071370	4,818
2.2.1	2 months ago	2.2.1	1067370	4,689

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/grafana/pyroscope.svg)](https://charts.stackradar.io/charts/grafana/pyroscope)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.