StackRadar

vcluster Helm chart

mainVerified publisher

Scored 14 Sept 2026

Virtual Kubernetes Cluster

Latest 0.17.0 3 months agodeploys tag v0.13.4 3Artifact Hub

vcluster 0.17.0 deploys 10 container images: ghcr.io/kvaps/kubernetes-tools, registry.k8s.io/kube-apiserver, registry.k8s.io/kas-network-proxy/proxy-server, registry.k8s.io/kube-controller-manager and 5 more. Across the 9 measured, 1,064 findings0 critical, 29 high 6 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.0.9-r1, fixed in 3.0.19-r0.

Radar Score

11,552029129906

1,064 findings over 9 of 10 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/kvaps/kubernetes-tools×6v0.13.40651502
registry.k8s.io/kube-apiserverv1.25.004241592,019
registry.k8s.io/kas-network-proxy/proxy-serverv0.0.370251071,034
registry.k8s.io/kube-controller-managerv1.25.004251592,036
registry.k8s.io/kube-schedulerv1.25.004241541,977
quay.io/kubermatic/machine-controllerv1.57.006261291,904
ghcr.io/kvaps/kubernetes-toolsv0.13.5001138
quay.io/kubermatic/operating-system-managerv1.3.003131071,269
registry.k8s.io/etcd3.6.4-000689773
registry-group.mgmtbi.ch/sre/gitops/cluster_bootstrap×2dev.clusterbuildunmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

13 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighALPINE-CVE-2025-15467openssl@3.0.9-r13.0.19-r0
HighALPINE-CVE-2022-0778openssl@1.1.1l-r01.1.1n-r0
HighALPINE-CVE-2022-0778libretls@3.3.3p1-r23.3.3p1-r3
HighALPINE-CVE-2024-6119openssl@3.0.9-r13.0.15-r0
HighALPINE-CVE-2023-0286openssl@1.1.1l-r01.1.1t-r0
HighALPINE-CVE-2018-25032zlib@1.2.11-r31.2.12-r0
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd0.0.0-20231218163308-9d2ee975ef9f
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.12-r2
HighGHSA-qppj-fm5r-hxr3KEVgolang.org/x/net@v0.0.0-20220722155237-a158d28d115b0.17.0
HighGHSA-4v7x-pqxf-cx7mgolang.org/x/net@v0.0.0-20220722155237-a158d28d115b0.23.0
HighALPINE-CVE-2024-2511openssl@3.0.9-r13.0.12-r5
HighGHSA-7fxm-f474-hf8wk8s.io/kubernetes@v1.25.01.25.13
HighALPINE-CVE-2022-4450openssl@1.1.1l-r01.1.1t-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.17.0latest3 months agov0.13.402912990611,552

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/main/vcluster.svg)](https://charts.stackradar.io/charts/main/vcluster)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.