deepflow Helm chart

Name: deepflow Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere-stable

Scored 14 Sept 2026

An automated observability platform for cloud-native developers.

Latest 6.2.606 3 years agodeploys tag v6.2.6.5 0Artifact Hub

deepflow 6.2.606 deploys 8 container images: deepflowce/deepflow-agent, deepflowce/deepflowio-init-grafana, deepflowce/deepflowio-init-grafana-ds-dh, grafana/grafana and 4 more. Across them, 1,464 findings — 9 critical, 38 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.16, fixed in 1.1.1f-1ubuntu2.fips.16. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

18,3169382701,147

1,464 findings over 8 of 8 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
deepflowce/deepflow-agent×2	v6.2.6.5	2555164	2,987
deepflowce/deepflowio-init-grafana	v6.2.6.5	0319133	1,634
deepflowce/deepflowio-init-grafana-ds-dh	latest	0000	0
grafana/grafana	9.5.2	2946208	3,396
deepflowce/mysql	8.0.31	0311140	1,556
deepflowce/deepflow-app	v6.2.6.5	023597	1,826
deepflowce/deepflow-server	v6.2.6.5	0628142	2,068
deepflowce/clickhouse-server×2	22.8.6.71	51076263	4,849

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

567 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5332	github.com/grafana/grafana@v9.5.2	no fix listed
Low	GO-2026-4403	stdlib@go1.19.1	1.23.9
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-2ubuntu2.1	no fix listed
Low	GHSA-29wx-vh33-7x7r	github.com/golang-jwt/jwt/v4@v4.4.3	4.5.1
Low	GO-2026-5025	golang.org/x/net@v0.8.0	0.55.0
Low	GO-2026-4970	stdlib@go1.19.1	1.25.12
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v1.0.1	1.1.14
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.44.171	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.8.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.8.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.8.0	0.55.0
Low	GHSA-58qw-9mgm-455v	pip@22.0.4	26.1
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-5build1	1.0.8-5ubuntu0.1
Low	UBUNTU-CVE-2026-39113	sqlite3@3.31.1-4ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2025-9820	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.8
Low	GO-2026-4602	stdlib@go1.19.1	1.25.8
Low	UBUNTU-CVE-2023-2602	libcap2@1:2.44-1build3	1:2.44-1ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-27456	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-18508	tar@1.34+dfsg-1ubuntu0.1.22.04.1	no fix listed
Low	GHSA-37cx-329c-33x3	github.com/go-git/go-git/v5@v5.4.2	5.16.5
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.27-3ubuntu2.1	no fix listed
Low	GHSA-px8h-6qxv-m22q	werkzeug@1.0.1	2.2.3
Low	GHSA-crvv-6w6h-cv34	github.com/grafana/grafana@v9.5.2	11.6.2
Low	UBUNTU-CVE-2024-22412	clickhouse@22.8.6.71	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.0.8-r3	3.0.19-r0
Low	UBUNTU-CVE-2025-69418	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.21
Low	GO-2026-5024	golang.org/x/sys@v0.6.0	0.44.0
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.1	no fix listed
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.0.1	1.3.6
Low	UBUNTU-CVE-2025-6141	ncurses@6.3-2	6.3-2ubuntu0.3
Low	DLA-3482-1	debian-archive-keyring@2019.1+deb10u1	2019.1+deb10u2
Low	DLA-3684-1	tzdata@2021a-0+deb10u11	2021a-0+deb10u12
Low	DLA-3788-1	tzdata@2021a-0+deb10u11	2024a-0+deb10u1
Low	GO-2023-2153	google.golang.org/grpc@v1.54.0	1.56.3
Low	GO-2023-2334	github.com/go-jose/go-jose/v3@v3.0.0	3.0.1
Low	GO-2024-3344	filippo.io/age@v1.1.1	1.2.1
Low	GO-2026-5693	github.com/go-git/go-git/v5@v5.4.2	5.19.1
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.54.0	1.82.1
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	USN-6105-1	ca-certificates@20211016~20.04.1	20230311ubuntu0.20.04.1
Low	USN-6663-1	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.15
Low	USN-7034-1	ca-certificates@20211016~20.04.1	20240203~20.04.1
Low	USN-7412-2	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.4
Low	USN-8091-1	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.5
Low	USN-8543-2	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm4
Low	USN-8625-1	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.26
Low	USN-8688-1	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8
Low	UBUNTU-CVE-2025-46394	busybox@1:1.30.1-7ubuntu3	no fix listed
Low	GHSA-66c4-2g2v-54qw	github.com/grafana/grafana@v9.5.2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.2.606latest	3 years ago	v6.2.6.5	9382701,147	18,316

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere-stable/deepflow.svg)](https://charts.stackradar.io/charts/kubesphere-stable/deepflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.