StackRadar

kubiks-agent 0.4.0 Helm chart

kubiksVerified publisher

Scored 20 Sept 2026

A Helm chart for Kubiks Agent with eBPF observability and log collection

Version 0.4.0 1 year agodeploys tag 2.2.2 1Artifact Hub

kubiks-agent 0.4.0 deploys 3 container images: grafana/beyla, otel/opentelemetry-collector-contrib and ghcr.io/kubiks-inc/kubiks-k8s-agent. Across them, 359 findings0 critical, 1 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.0-r0, fixed in 3.5.5-r0.

Radar Score

3,1630137321

359 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
grafana/beyla2.2.200286607
otel/opentelemetry-collector-contrib×20.128.000121371,306
ghcr.io/kubiks-inc/kubiks-k8s-agentlatest0123981,250

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

211 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-8wv5-x4w7-5gwwgithub.com/apache/thrift@v0.22.00.24.0
LowALPINE-CVE-2025-69419openssl@3.5.0-r03.5.5-r0
LowALPINE-CVE-2026-31789openssl@3.5.0-r03.5.6-r0
LowGHSA-rm6m-hrcw-jw33github.com/rabbitmq/amqp091-go@v1.10.01.13.0
LowGHSA-6c5v-hqjr-5xxpgithub.com/rabbitmq/amqp091-go@v1.10.01.13.0
LowALPINE-CVE-2026-54874openssl@3.5.0-r03.5.8-r0
LowGHSA-w5cv-pw74-4rxcgithub.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver@v0.128.00.151.0
LowGHSA-65xw-vw82-r86xgithub.com/antchfx/xpath@v1.3.41.3.6
LowALPINE-CVE-2026-42766openssl@3.5.0-r03.5.7-r0
LowALPINE-CVE-2026-63075openssl@3.5.0-r03.5.8-r0
LowALPINE-CVE-2026-22184zlib@1.3.1-r21.3.2-r0
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.38.00.52.0
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.38.00.52.0
LowGHSA-33mj-cw25-m34hgithub.com/rabbitmq/amqp091-go@v1.10.01.13.0
LowGHSA-cfpf-hrx2-8rv6github.com/expr-lang/expr@v1.17.51.17.7
LowALPINE-CVE-2026-75803openssl@3.5.0-r03.5.8-r0
LowALPINE-CVE-2025-15468openssl@3.5.0-r03.5.5-r0
LowGHSA-wg65-39gg-5wfjgithub.com/prometheus/prometheus@v0.304.10.311.3
LowGO-2026-4341stdlib@go1.23.101.24.12
LowGHSA-pxq6-2prw-chj9github.com/docker/docker@v28.2.2+incompatibleno fix listed
LowALPINE-CVE-2026-2673openssl@3.5.0-r03.5.6-r0
LowGHSA-pjv4-3c63-699fgithub.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension@v0.128.0no fix listed
LowALPINE-CVE-2026-42767openssl@3.5.0-r03.5.7-r0
LowGHSA-9mj6-hxhv-w67jgithub.com/dvsekhvalnov/jose2go@v1.6.01.7.0
LowALPINE-CVE-2026-63074openssl@3.5.0-r03.5.8-r0
LowGHSA-hfvc-g4fc-pqhxgo.opentelemetry.io/otel/sdk@v1.35.01.43.0
LowALPINE-CVE-2025-4575openssl@3.5.0-r03.5.1-r0
LowALPINE-CVE-2026-34181openssl@3.5.0-r03.5.7-r0
LowGHSA-fw7p-63qq-7hprfilippo.io/edwards25519@v1.1.01.1.1
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.38.00.52.0
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.34.00.55.0
LowALPINE-CVE-2026-40200musl@1.2.5-r101.2.5-r12
LowALPINE-CVE-2025-66199openssl@3.5.0-r03.5.5-r0
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.38.00.45.0
LowGHSA-vvgc-356p-c3xwgolang.org/x/net@v0.34.00.38.0
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.70.01.83.1
LowALPINE-CVE-2026-22796openssl@3.5.0-r03.5.5-r0
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.38.00.52.0
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.38.00.45.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.38.00.52.0
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.70.01.82.1
LowGHSA-465g-fh3v-9jw4github.com/rabbitmq/amqp091-go@v1.10.01.13.0
LowGHSA-cp6g-7hqx-qxhpgo.mongodb.org/mongo-driver@v1.14.01.17.7
LowGHSA-cp6g-7hqx-qxhpgo.mongodb.org/mongo-driver/v2@v2.2.12.4.2
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/service/kinesis@v1.35.01.43.5
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.50.01.65.0
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.101.7.8
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/service/s3@v1.80.01.97.3
LowGHSA-4jvg-4jfx-fmhcgithub.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter@v0.128.00.154.0
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.38.00.52.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.4.0latest1 year ago2.2.201373213,163

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kubiks/kubiks-agent.svg)](https://charts.stackradar.io/charts/kubiks/kubiks-agent)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 20 Sept 2026 · scanned 20 Sept 2026 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.