pyroscope Helm chart
grafanaScored 14 Sept 2026
A horizontally scalable, highly available, multi-tenant continuous profiling database.
Latest 2.3.1 5 days agoapp version 2.3.1 13Artifact Hub
pyroscope 2.3.1 deploys 3 container images: grafana/alloy, quay.io/prometheus-operator/prometheus-config-reloader and grafana/pyroscope. Across them, 343 findings — 0 critical, 1 high. The highest contribution is UBUNTU-CVE-2025-15467 in openssl 3.0.13-0ubuntu3.6, fixed in 3.0.13-0ubuntu3.7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| grafana/ | v1.12.2 | 0130219 | 2,398 |
| quay.io/ | v0.81.0 | 00784 | 747 |
| grafana/ | 2.3.1 | 0002 | 12 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-w8rr-5gcm-pp58 | go.opentelemetry.io/ | 0.19.0 |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2024-10041 | pam | no fix listed |
| Low | GHSA-w5pp-99ch-qj29 | github.com/ | 5.19.1 |
| Low | GHSA-3xc5-wrhm-f963 | github.com/ | 5.18.0 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | 0.25.3-4ubuntu2.2 |
| Low | GO-2026-6107 | go.etcd.io/ | 3.5.33 |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2025-5278 | coreutils | 9.4-3ubuntu6.3 |
| Low | GHSA-vp62-88p7-qqf5 | github.com/ | no fix listed |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | UBUNTU-CVE-2026-22795 | openssl | 3.0.13-0ubuntu3.7 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-42770 | openssl | 3.0.13-0ubuntu3.11 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | GO-2025-3849 | stdlib | 1.23.12 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | GO-2022-0646 | github.com/ | no fix listed |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | GO-2026-6303 | golang.org/ | 0.55.0 |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | UBUNTU-CVE-2026-29111 | systemd | 255.4-1ubuntu8.14 |
| Low | GO-2026-4982 | stdlib | 1.25.10 |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2026-15059 | systemd | 255.4-1ubuntu8.17 |
| Low | UBUNTU-CVE-2024-56433 | shadow | no fix listed |
| Low | UBUNTU-CVE-2026-41991 | gzip | 1.12-1ubuntu3.2 |
| Low | UBUNTU-CVE-2026-5419 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | GO-2026-6180 | golang.org/ | 0.40.0 |
| Low | UBUNTU-CVE-2026-40226 | systemd | 255.4-1ubuntu8.16 |
| Low | GO-2025-3750 | stdlib | 1.23.10 |
| Low | GO-2026-4864 | stdlib | 1.25.9 |
| Low | GO-2026-4865 | stdlib | 1.25.9 |
| Low | GO-2026-4869 | stdlib | 1.25.9 |
| Low | GHSA-jhf3-xxhw-2wpp | github.com/ | 5.17.1 |
| Low | GO-2026-4340 | stdlib | 1.24.12 |
| Low | GO-2025-4175 | stdlib | 1.24.11 |
| Low | UBUNTU-CVE-2026-18374 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-16742 | systemd | 255.4-1ubuntu8.17 |
| Low | UBUNTU-CVE-2026-19499 | glibc | 2.39-0ubuntu8.9 |
| Low | UBUNTU-CVE-2026-19542 | glibc | 2.39-0ubuntu8.9 |
| Low | UBUNTU-CVE-2026-53612 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-53613 | util-linux | 2.39.3-9ubuntu6.6 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.3.1latest | 5 days ago | 2.3.1 | 0137305 | 3,157 |
| 2.2.1 | 1 month ago | 2.2.1 | 0137320 | 3,263 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.