vcluster-platform 4.11.2 Helm chart

Name: vcluster-platform Helm chart 4.11.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loft

Scored 14 Sept 2026

vCluster Platform - Virtual Kubernetes Clusters

Version 4.11.2 6 days agoApp version not verified against the render 2Artifact Hub

vcluster-platform 4.11.2 deploys 1 container image: ghcr.io/loft-sh/vcluster-platform. Across them, 181 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.47.0, fixed in 0.52.0.

Radar Score

1,6570015166

181 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/loft-sh/vcluster-platform	4.11.2	0015166	1,657

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

181 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-14666	postgresql17@17.10-r0	17.11-r0
Low	ALPINE-CVE-2026-14666	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-76957	expat@2.8.2-r0	2.8.4-r0
Low	GO-2026-5622	github.com/containerd/containerd@v1.7.30	no fix listed
Low	ALPINE-CVE-2026-16241	postgresql17@17.10-r0	17.11-r0
Low	ALPINE-CVE-2026-16241	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-6469	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-6469	postgresql17@17.10-r0	17.11-r0
Low	ALPINE-CVE-2026-14673	postgresql17@17.10-r0	17.11-r0
Low	ALPINE-CVE-2026-14673	postgresql18@18.4-r0	18.5-r0
Low	GO-2026-5024	golang.org/x/sys@v0.40.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.36.0	0.40.0
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	GO-2026-5764	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.7	1.7.8
Low	GO-2026-5764	github.com/aws/aws-sdk-go-v2/service/s3@v1.97.1	1.97.3
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.6	1.18.7
Low	GO-2026-5884	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GO-2026-5932	golang.org/x/crypto@v0.47.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	GO-2026-6094	github.com/google/cel-go@v0.26.0	0.30.0
Low	ALPINE-CVE-2026-14681	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-14681	postgresql17@17.10-r0	17.11-r0
Low	GHSA-xf85-363p-868w	oras.land/oras-go/v2@v2.6.0	2.6.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.12.0latest	5 days ago	—	00780	744
4.11.2	6 days ago	—	0015166	1,657

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loft/vcluster-platform.svg)](https://charts.stackradar.io/charts/loft/vcluster-platform)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.