kubescape-operator 1.40.5 Helm chart

Name: kubescape-operator Helm chart 1.40.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubescape

Scored 9 Oct 2026

Kubescape is an E2E Kubernetes cluster security platform

Version 1.40.5 3 days agodeploys tag v0.3.219 8Artifact Hub

kubescape-operator 1.40.5 deploys 6 container images: quay.io/kubescape/node-agent, quay.io/kubescape/kubescape, quay.io/kubescape/kubevuln, quay.io/kubescape/operator and 2 more. Across them, 247 findings — 0 critical, 0 high. The highest contribution is GO-2026-6107 in go.etcd.io/etcd/client/pkg/v3 v3.6.5, fixed in 3.5.33. Chart.yaml declares kubeVersion >=1.28.0-0; rendered for Kubernetes 1.28.0.

Radar Score

1,6790010237

247 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/kubescape/node-agent	v0.3.219	00258	446
quay.io/kubescape/kubescape	v4.0.14	00041	245
quay.io/kubescape/kubevuln	v0.3.430	00235	237
quay.io/kubescape/operator	v0.2.172	00351	405
quay.io/kubescape/storage	v0.0.348	00339	294
quay.io/kubescape/http-request×2	v0.2.23	00013	52

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

67 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-f2g3-hh2r-cwgc	github.com/distribution/distribution@v2.8.2+incompatible	no fix listed
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	GO-2025-3460	github.com/distribution/distribution@v2.8.2+incompatible	no fix listed
Low	GO-2026-6355	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-5064	github.com/containerd/containerd@v1.7.33	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-6222	golang.org/x/image@v0.44.0	0.45.0
Low	GHSA-3p65-76g6-3w7r	github.com/distribution/distribution@v2.8.2+incompatible	no fix listed
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GHSA-pxq6-2prw-chj9	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	GHSA-hfg8-hc9c-6c3h	github.com/moby/go-archive@v0.2.0	0.3.0
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.4	1.18.7
Low	GO-2026-6180	golang.org/x/mod@v0.38.0	0.40.0
Low	GHSA-pg57-6jwg-q645	github.com/containerd/containerd/v2@v2.2.5	2.2.9
Low	GHSA-pg57-6jwg-q645	github.com/containerd/containerd@v1.7.33	1.7.36
Low	GHSA-x744-4wpc-v9h2	github.com/moby/moby@v28.5.2+incompatible	29.3.1
Low	GO-2026-4887	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-5622	github.com/containerd/containerd@v1.7.33	no fix listed
Low	GHSA-hjf4-fphr-2h65	go.opentelemetry.io/otel/sdk/log@v0.19.0	0.21.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.82.1	1.83.1
Low	GO-2026-6179	golang.org/x/mod@v0.38.0	0.40.0
Low	GHSA-6pjf-3r9x-m592	github.com/distribution/distribution@v2.8.2+incompatible	no fix listed
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GHSA-x86f-5xw2-fm2r	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-rwvp-r38j-9rgg	github.com/nwaples/rardecode@v1.1.3	no fix listed
Low	GO-2026-5338	github.com/containerd/containerd@v1.7.33	no fix listed
Low	GHSA-7jxh-36q5-gcqv	github.com/containerd/containerd/v2@v2.2.5	2.2.8
Low	GHSA-7jxh-36q5-gcqv	github.com/containerd/containerd@v1.7.33	1.7.35
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	GHSA-w34q-cm8f-9c5x	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0	0.21.0
Low	GHSA-fm8w-2m5w-9j7r	github.com/cilium/cilium@v1.19.4	1.19.5
Low	GHSA-rg2x-37c3-w2rh	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	GHSA-rg2x-37c3-w2rh	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GHSA-w7c2-w76w-5hmj	github.com/cilium/cilium@v1.19.4	1.19.5
Low	GO-2026-6094	github.com/google/cel-go@v0.29.2	0.30.0
Low	GHSA-vp62-88p7-qqf5	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-5939	github.com/quay/claircore@v1.5.54	no fix listed
Low	GHSA-mjcv-p78q-w5fw	github.com/moby/sys/user@v0.4.0	0.4.1
Low	GO-2026-5932	golang.org/x/crypto@v0.56.0	no fix listed
Low	GO-2026-6225	github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589	no fix listed
Low	GO-2026-6599	stdlib@go1.26.7	1.26.9
Low	GO-2026-6600	stdlib@go1.26.7	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6603	stdlib@go1.26.7	1.26.9
Low	GO-2026-6604	stdlib@go1.26.7	1.26.9
Low	GO-2026-6605	stdlib@go1.26.7	1.26.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.40.5latest	3 days ago	v0.3.219	0010237	1,679
1.40.4	1 month ago	v0.3.219	0011185	1,501

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubescape/kubescape-operator.svg)](https://charts.stackradar.io/charts/kubescape/kubescape-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.