vcluster-platform Helm chart

Name: vcluster-platform Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loft

Scored 14 Sept 2026

vCluster Platform - Virtual Kubernetes Clusters

Latest 4.12.0 5 days agoApp version not verified against the render 2Artifact Hub

vcluster-platform 4.12.0 deploys 1 container image: ghcr.io/loft-sh/vcluster-platform. Across them, 87 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.50.0, fixed in 0.52.0.

Radar Score

74400780

87 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/loft-sh/vcluster-platform	4.12.0	00780	744

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

87 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-vh4v-2xq2-g5cg	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GHSA-7jxh-36q5-gcqv	github.com/containerd/containerd@v1.7.32	1.7.35
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	GHSA-w8rr-5gcm-pp58	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.18.0	0.19.0
Low	GHSA-w8rr-5gcm-pp58	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0	1.43.0
Low	GHSA-w8rr-5gcm-pp58	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0	1.43.0
Low	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.8	3.5.33
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.26.0	0.29.0
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-5856	stdlib@go1.26.4	1.25.12
Low	GO-2026-6355	golang.org/x/crypto@v0.54.0	0.56.0
Low	GO-2026-5039	stdlib@go1.26.3	1.25.11
Low	GO-2026-6114	go.etcd.io/etcd/server/v3@v3.6.12	3.5.33
Low	GO-2026-5064	github.com/containerd/containerd@v1.7.32	no fix listed
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.41.0	1.42.0
Low	GO-2026-6303	golang.org/x/crypto@v0.54.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.54.0	0.56.0
Low	GO-2025-3547	k8s.io/kubernetes@v1.36.4	no fix listed
Low	GO-2026-6091	stdlib@go1.26.4	1.25.13
Low	GO-2026-5338	github.com/containerd/containerd@v1.7.32	no fix listed
Low	GO-2026-6180	golang.org/x/mod@v0.36.0	0.40.0
Low	GO-2026-5025	golang.org/x/net@v0.52.0	0.55.0
Low	GO-2026-4970	stdlib@go1.26.4	1.25.12
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.52.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.52.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.52.0	0.55.0
Low	GO-2026-5622	github.com/containerd/containerd@v1.7.32	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.42.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.36.0	0.40.0
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.6	1.18.7
Low	GO-2026-5884	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GO-2026-5932	golang.org/x/crypto@v0.54.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.79.3	1.82.1
Low	GO-2026-6094	github.com/google/cel-go@v0.26.0	0.30.0
Low	GHSA-xf85-363p-868w	oras.land/oras-go/v2@v2.6.0	2.6.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.12.0latest	5 days ago	—	00780	744
4.11.2	6 days ago	—	0015166	1,657

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loft/vcluster-platform.svg)](https://charts.stackradar.io/charts/loft/vcluster-platform)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.