kommander 0.39.2 Helm chart

Name: kommander Helm chart 0.39.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 14 Sept 2026

Kommander

Version 0.39.2 3 years agodeploys tag 1.3.0 0Artifact Hub

kommander 0.39.2 deploys 29 container images: kiwigrid/k8s-sidecar, mesosphere/grafana-plugins, grafana/grafana, quay.io/kubernetes-multicluster/kubefed and 22 more. Across the 24 measured, 5,212 findings — 22 critical, 148 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

68,284221481,0703,962

5,212 findings over 24 of 29 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

29 images

Image	Tag	Vulnerabilities	Radar Score
kiwigrid/k8s-sidecar×2	1.3.0	174828	1,965
mesosphere/grafana-plugins	v0.0.1	0342	297
grafana/grafana	6.6.0	0839184	2,910
quay.io/kubernetes-multicluster/kubefed×2	v0.7.0	1947174	3,115
mesosphere/kommander-federation-authorizedlister	v0.21.2	0438205	2,829
mesosphere/kommander-federation-controller-manager	v0.21.2	0439205	2,832
gcr.io/kubebuilder/kube-rbac-proxy×2	v0.8.0	—	unmeasured
mesosphere/kommander-federation-utility-apiserver	v0.21.2	0543243	3,189
mesosphere/kommander-federation-webhook	v0.21.2	0439205	2,832
mesosphere/karma	v0.55-d2iq-proxy	0222155	1,978
mesosphere/kommander-licensing-controller-manager	v0.21.2	0330170	2,269
mesosphere/kommander-licensing-webhook	v0.21.2	0330170	2,269
quay.io/thanos/thanos	v0.17.1	0332173	2,367
mesosphere/kommander	6.100.1	0115399	2,797
mesosphere/kubeaddons-catalog	v0.11.4	1428228468	12,010
quay.io/coreos/kube-state-metrics	v1.9.8	—	unmeasured
prom/alertmanager	v0.21.0	0429165	2,305
jimmidyson/configmap-reload×2	v0.5.0	008125	1,260
prom/prometheus	v2.19.2	0333177	2,442
thanosio/thanos	v0.15.0	0446227	3,075
thanosio/thanos×2	v0.19.0	0331169	2,289
gcr.io/kubecost1/cost-model	prod-1.81.0	1747176	3,029
gcr.io/kubecost1/frontend	prod-1.81.0	1104110	1,711
gcr.io/kubecost1/server	prod-1.81.0	31065197	3,919
apteno/alpine-jq	2021-01-19	19299	1,345
bitnami/kubectl	1.17.16	—	unmeasured
bitnami/kubectl×3	1.20.6	—	unmeasured
bitnami/kubectl×12	1.19.7	—	unmeasured
mesosphere/kubeaddons-addon-initializer×2	v0.2.8	0449226	3,250

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,253 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.15
Critical	ALPINE-CVE-2021-3711	openssl@1.1.1k-r0	1.1.1l-r0
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.8
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.13
Critical	UBUNTU-CVE-2023-38408	openssh@1:8.2p1-4ubuntu0.1	1:8.2p1-4ubuntu0.8
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.9
Critical	UBUNTU-CVE-2022-23521	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.8
Critical	UBUNTU-CVE-2025-48384KEV	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.14+esm1
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2
Critical	UBUNTU-CVE-2022-41903	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.8
Critical	UBUNTU-CVE-2021-21300	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.1
Critical	UBUNTU-CVE-2020-36221	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.6
Critical	UBUNTU-CVE-2020-36228	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.6
Critical	GHSA-39qc-96h7-956f	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.0.0-20190813141303-74dc4d7220e7
Critical	GHSA-hgr8-6h9x-f7q9	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.0.0-20190813141303-74dc4d7220e7
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
Critical	UBUNTU-CVE-2024-2961	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.15
High	ALPINE-CVE-2022-25236	expat@2.2.9-r1	2.2.10-r2
High	UBUNTU-CVE-2022-25236	expat@2.2.9-1build1	2.2.9-1ubuntu0.2
High	UBUNTU-CVE-2020-36222	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.6
High	UBUNTU-CVE-2020-36227	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.6
High	ALPINE-CVE-2022-0778	libretls@3.3.3p1-r2	3.3.3p1-r3
High	ALPINE-CVE-2022-0778	openssl@1.1.1k-r0	1.1.1n-r0
High	UBUNTU-CVE-2022-0778	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.12
High	UBUNTU-CVE-2021-27212	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.7
High	ALPINE-CVE-2023-0286	openssl@1.1.1l-r0	1.1.1t-r0
High	UBUNTU-CVE-2023-0286	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.17
High	UBUNTU-CVE-2024-2398	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.22
High	ALPINE-CVE-2020-1967	openssl@1.1.1d-r4	1.1.1g-r0
High	UBUNTU-CVE-2023-25652	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.11
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-2ubuntu1	1:1.2.11.dfsg-2ubuntu1.3
High	ALPINE-CVE-2021-23840	openssl@1.1.1d-r4	1.1.1j-r0
High	UBUNTU-CVE-2021-23840	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.2
High	UBUNTU-CVE-2024-32002	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.13
High	UBUNTU-CVE-2023-2650	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.19
High	ALPINE-CVE-2021-3712	openssl@1.1.1k-r0	1.1.1l-r0
High	UBUNTU-CVE-2021-3712	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.8
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f
High	UBUNTU-CVE-2023-48795	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4
High	UBUNTU-CVE-2023-48795	openssh@1:8.2p1-4ubuntu0.1	1:8.2p1-4ubuntu0.10
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-2ubuntu1	1:1.2.11.dfsg-2ubuntu1.5
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v20.10.2+incompatible	23.0.15
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.17.0
High	ALPINE-CVE-2021-30560	libxslt@1.1.34-r0	1.1.35-r0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.23.0
High	ALPINE-CVE-2021-3449	openssl@1.1.1j-r0	1.1.1k-r0
High	UBUNTU-CVE-2021-3449	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.3
High	UBUNTU-CVE-2024-28182	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.2latest	3 years ago	1.3.0	221481,0703,962	68,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kommander.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kommander)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.