StackRadar

karpor 0.7.7 Helm chart

kusionstackVerified publisher

Scored 16 Oct 2026

A modern kubernetes visualization tool (Karpor).

Version 0.7.7 yesterdayapp version 0.6.4 2Artifact Hub

karpor 0.7.7 deploys 3 container images: docker.elastic.co/elasticsearch/elasticsearch, kusionstack/karpor and quay.io/coreos/etcd. Across the 2 measured, 339 findings — 4 critical, 6 high. The highest contribution is GO-2024-2687 in golang.org/x/net v0.19.0, fixed in 0.23.0.

Radar Score

4,6444682247

339 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
docker.elastic.co/elasticsearch/elasticsearch8.6.2—unmeasured
kusionstack/karpor×3v0.6.425521362,786
quay.io/coreos/etcdv3.5.1121301111,858

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

219 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2026-4441golang.org/x/net@v0.19.00.45.0
LowGHSA-hfvc-g4fc-pqhxgo.opentelemetry.io/otel/sdk@v1.20.01.43.0
LowGO-2026-5775github.com/go-chi/chi/v5@v5.0.105.3.0
LowGO-2026-4603stdlib@go1.22.121.25.8
LowGO-2025-4175stdlib@go1.22.121.24.11
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.51.01.83.1
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.16.00.52.0
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.16.00.52.0
LowGO-2026-4864stdlib@go1.22.121.25.9
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.16.00.45.0
LowGHSA-r6j8-c6r2-37rrk8s.io/kubernetes@v1.26.11.32.10
LowGO-2026-4982stdlib@go1.22.121.25.10
LowGO-2026-5025golang.org/x/net@v0.19.00.55.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.16.00.52.0
LowALPINE-CVE-2023-42364busybox@1.35.0-r291.35.0-r31
LowGHSA-82m2-cv7p-4m75k8s.io/kubernetes@v1.26.11.27.16
LowGHSA-pq67-6m6q-mj2vurllib3@1.26.182.5.0
LowALPINE-CVE-2023-42363busybox@1.35.0-r291.35.0-r31
LowGO-2026-6091stdlib@go1.22.121.25.13
LowGO-2025-4008stdlib@go1.22.121.24.8
LowGO-2025-4010stdlib@go1.22.121.24.8
LowALPINE-CVE-2023-42366busybox@1.35.0-r291.35.0-r30
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.51.01.82.1
LowGO-2024-2888stdlib@go1.20.121.21.11
LowGO-2026-4865stdlib@go1.22.121.25.9
LowGHSA-685w-q87j-wqw3github.com/docker/distribution@v2.8.1+incompatibleno fix listed
LowALPINE-CVE-2023-42365busybox@1.35.0-r291.35.0-r31
LowGO-2026-4976stdlib@go1.22.121.25.10
LowGO-2026-5039stdlib@go1.22.121.25.11
LowGO-2026-5856stdlib@go1.22.121.25.12
LowGO-2025-3750stdlib@go1.22.121.23.10
LowGHSA-vrw8-fxc6-2r93github.com/go-chi/chi/v5@v5.0.105.2.2
LowGO-2026-5027golang.org/x/net@v0.19.00.55.0
LowGO-2026-5029golang.org/x/net@v0.19.00.55.0
LowGO-2026-5030golang.org/x/net@v0.19.00.55.0
LowGHSA-qccp-gfcp-xxvcurllib3@1.26.182.7.0
LowGO-2026-4340stdlib@go1.22.121.24.12
LowGHSA-pxhw-596r-rwq5k8s.io/kubernetes@v1.26.11.27.13
LowALPINE-CVE-2024-13176openssl@3.0.8-r33.0.19-r0
LowGHSA-m425-mq94-257ggoogle.golang.org/grpc@v1.51.01.56.3
LowGHSA-qxp5-gwg8-xv66golang.org/x/net@v0.19.00.36.0
LowGO-2025-3503stdlib@go1.22.121.23.7
LowGHSA-w67g-5rqw-f597github.com/gorilla/websocket@v1.4.21.5.3
LowGO-2026-4869stdlib@go1.22.121.25.9
LowGO-2026-6599stdlib@go1.22.121.26.9
LowGO-2026-6600stdlib@go1.22.121.26.9
LowGO-2026-6617stdlib@go1.22.121.26.9
LowGO-2026-6617golang.org/x/net@v0.19.00.60.0
LowALPINE-CVE-2026-22795openssl@3.0.8-r33.0.19-r0
LowGHSA-wfp6-f47h-hxc3awscli@1.25.971.44.78

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.7.7latestyesterday0.6.446822474,644
0.7.61 year ago0.6.446822474,644

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kusionstack/karpor.svg)](https://charts.stackradar.io/charts/kusionstack/karpor)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 16 Oct 2026 · scanned 16 Oct 2026 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.