vcluster-pro Helm chart

Name: vcluster-pro Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loft

Scored 14 Sept 2026

vcluster-pro - Virtual Kubernetes Clusters

Latest 0.0.0-ci-run.10 3 years agoApp version not verified against the render 0Artifact Hub

vcluster-pro 0.0.0-ci-run.10 deploys 2 container images: rancher/k3s and ghcr.io/loft-sh/vcluster-pro. Across them, 456 findings — 0 critical, 11 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.1-r1, fixed in 3.1.7-r0.

Radar Score

5,08501169376

456 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
rancher/k3s	v1.26.0-k3s1	0534184	2,453
ghcr.io/loft-sh/vcluster-pro	0.0.0-ci-run.10	0635192	2,632

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

224 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.2	1.2.8
Low	GHSA-527x-5wrf-22m2	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.14.0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.5.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.5.0	0.52.0
Low	GHSA-m4hf-6vgr-75r2	github.com/k3s-io/k3s@v1.26.0	1.26.8
Low	GO-2023-1571	stdlib@go1.18.10	1.19.6
Low	GHSA-7hfp-qfw3-5jxh	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.9.4
Low	GHSA-63cw-r7xf-jmwr	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.14.3
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.55.0	1.83.1
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.0.0-20211209124913-491a49abca63
Low	GO-2023-2102	stdlib@go1.18.10	1.20.10
Low	GHSA-557j-xg8c-q2mm	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.17.4
Low	GHSA-56hp-xqp3-w2jf	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.6.1
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.2	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.2	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/selinux@v1.10.1	1.13.0
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v20.10.21+incompatible	20.10.24
Low	GHSA-vp29-5652-4fw9	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.14.3
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.5.0	0.52.0
Low	GHSA-2wpx-qpw2-g5h5	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.14.3
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.5.0	0.52.0
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.5.0	0.13.0
Low	GHSA-2qjp-425j-52j9	github.com/containerd/containerd@v1.6.12-k3s1	1.6.12
Low	GHSA-q3j5-32m5-58c2	github.com/opencontainers/runc@v0.0.0-20220824004513-5fd4c4d14413	0.1.0
Low	GO-2023-2185	stdlib@go1.18.10	1.20.11
Low	GHSA-c9v3-4pv7-87pr	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.14.2
Low	ALPINE-CVE-2024-4603	openssl@3.1.1-r1	3.1.5-r0
Low	GHSA-h8mm-c463-wjq3	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.14.3
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v20.10.21+incompatible	29.2.0
Low	GHSA-qhmp-q7xh-99rh	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.14.3
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/square/go-jose.v2@v2.6.0	no fix listed
Low	GHSA-rc4r-wh2q-q6c4	github.com/docker/docker@v20.10.12+incompatible	20.10.18
Low	GHSA-mq39-4gv4-mvpx	github.com/docker/docker@v20.10.21+incompatible	23.0.11
Low	GHSA-vpvm-3wq2-2wvm	github.com/opencontainers/runc@v1.1.2	1.1.5
Low	GHSA-v53g-5gjp-272r	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.14.1
Low	GO-2023-1703	stdlib@go1.18.10	1.19.8
Low	GHSA-93mf-426m-g6x9	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.12.4
Low	GHSA-8fcj-gf77-47mg	github.com/rancher/wrangler@v1.0.0	1.0.1
Low	GO-2026-4341	stdlib@go1.18.10	1.24.12
Low	GHSA-5xqw-8hwv-wg92	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.17.3
Low	GHSA-hfmw-7g3m-gj6q	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.11.0
Low	GO-2024-2887	stdlib@go1.18.10	1.21.11
Low	GHSA-4hfp-h4cw-hj8p	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.17.3
Low	GHSA-53c4-hhmh-vw5q	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.10.3
Low	GHSA-67fx-wx78-jx33	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.10.3
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v20.10.21+incompatible	no fix listed
Low	GO-2023-1704	stdlib@go1.18.10	1.19.8
Low	ALPINE-CVE-2025-26519	musl@1.2.4-r0	1.2.4-r3
Low	GHSA-6rx9-889q-vv2r	helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01	3.10.3
Low	GHSA-m9w6-wp3h-vq8g	github.com/coredns/coredns@v1.10.2-0.20230607202228-6d3db023fe60	1.11.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.0-ci-run.10latest	3 years ago	—	01169376	5,085

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loft/vcluster-pro.svg)](https://charts.stackradar.io/charts/loft/vcluster-pro)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.