kommander 0.39.2 Helm chart

Name: kommander Helm chart 0.39.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 14 Sept 2026

Kommander

Version 0.39.2 3 years agodeploys tag 1.3.0 0Artifact Hub

kommander 0.39.2 deploys 29 container images: kiwigrid/k8s-sidecar, mesosphere/grafana-plugins, grafana/grafana, quay.io/kubernetes-multicluster/kubefed and 22 more. Across the 24 measured, 5,212 findings — 22 critical, 148 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

68,284221481,0703,962

5,212 findings over 24 of 29 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

29 images

Image	Tag	Vulnerabilities	Radar Score
kiwigrid/k8s-sidecar×2	1.3.0	174828	1,965
mesosphere/grafana-plugins	v0.0.1	0342	297
grafana/grafana	6.6.0	0839184	2,910
quay.io/kubernetes-multicluster/kubefed×2	v0.7.0	1947174	3,115
mesosphere/kommander-federation-authorizedlister	v0.21.2	0438205	2,829
mesosphere/kommander-federation-controller-manager	v0.21.2	0439205	2,832
gcr.io/kubebuilder/kube-rbac-proxy×2	v0.8.0	—	unmeasured
mesosphere/kommander-federation-utility-apiserver	v0.21.2	0543243	3,189
mesosphere/kommander-federation-webhook	v0.21.2	0439205	2,832
mesosphere/karma	v0.55-d2iq-proxy	0222155	1,978
mesosphere/kommander-licensing-controller-manager	v0.21.2	0330170	2,269
mesosphere/kommander-licensing-webhook	v0.21.2	0330170	2,269
quay.io/thanos/thanos	v0.17.1	0332173	2,367
mesosphere/kommander	6.100.1	0115399	2,797
mesosphere/kubeaddons-catalog	v0.11.4	1428228468	12,010
quay.io/coreos/kube-state-metrics	v1.9.8	—	unmeasured
prom/alertmanager	v0.21.0	0429165	2,305
jimmidyson/configmap-reload×2	v0.5.0	008125	1,260
prom/prometheus	v2.19.2	0333177	2,442
thanosio/thanos	v0.15.0	0446227	3,075
thanosio/thanos×2	v0.19.0	0331169	2,289
gcr.io/kubecost1/cost-model	prod-1.81.0	1747176	3,029
gcr.io/kubecost1/frontend	prod-1.81.0	1104110	1,711
gcr.io/kubecost1/server	prod-1.81.0	31065197	3,919
apteno/alpine-jq	2021-01-19	19299	1,345
bitnami/kubectl	1.17.16	—	unmeasured
bitnami/kubectl×3	1.20.6	—	unmeasured
bitnami/kubectl×12	1.19.7	—	unmeasured
mesosphere/kubeaddons-addon-initializer×2	v0.2.8	0449226	3,250

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,253 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
Medium	GHSA-qrqr-3x5j-2xw9	github.com/docker/docker@v1.13.1	17.06.0-ce
Medium	UBUNTU-CVE-2020-16156	perl@5.30.0-9build1	5.30.0-9ubuntu0.3
Medium	UBUNTU-CVE-2026-8927	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.25+esm4
Medium	UBUNTU-CVE-2022-3116	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm2
Medium	GHSA-vfjc-2qcw-j95j	github.com/moby/moby@v1.13.1	17.12.0-ce
Medium	UBUNTU-CVE-2026-28388	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm3
Medium	GHSA-5fg8-2547-mr8q	xmldom@0.3.0	no fix listed
Medium	UBUNTU-CVE-2023-28321	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.19
Medium	UBUNTU-CVE-2025-69421	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm2
Medium	GHSA-3xgq-45jj-v275	cross-spawn@6.0.5	6.0.6
Medium	GHSA-p92q-9vqr-4j8v	axios@0.21.1	0.32.0
Medium	GHSA-82hx-w2r5-c2wq	k8s.io/apiserver@v0.0.0-20190418213308-0a718f081a3a	0.15.10
Medium	UBUNTU-CVE-2023-1667	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.3
Medium	GHSA-v95c-p5hm-xq8f	github.com/opencontainers/runc@v1.0.0-rc92	1.0.3
Medium	GO-2022-1144	stdlib@go1.14.5	1.18.9
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
Medium	GHSA-pfrx-2q88-qq97	got@11.8.1	11.8.5
Medium	UBUNTU-CVE-2026-28387	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm3
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm1
Medium	UBUNTU-CVE-2021-3999	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.7
Medium	UBUNTU-CVE-2024-52005	git@1:2.25.1-1ubuntu3	no fix listed
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.19.0	1.20.3
Medium	GHSA-f6ww-3ggp-fr8h	xmldom@0.3.0	no fix listed
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v1.8.2-0.20201029103703-63be30dceed9	0.305.2
Medium	DLA-3152-1	glibc@2.28-10	2.28-10+deb10u2
Medium	GHSA-96hv-2xvq-fx4p	ws@7.3.1	7.5.11
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.0.4	3.1.3
Medium	GHSA-gh5c-3h97-2f3q	github.com/moby/moby@v1.13.1	25.0.4
Medium	UBUNTU-CVE-2026-28389	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm3
Medium	UBUNTU-CVE-2026-28390	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm3
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm2
Medium	GHSA-pf86-5x62-jrwf	axios@0.21.1	0.31.1
Medium	GHSA-xrx6-fmxq-rjj2	rsa@4.6	4.7
Medium	GHSA-jr27-m4p2-rc6r	pyasn1@0.4.8	0.6.3
Medium	GHSA-5xp3-jfq3-5q8x	pip@20.2.4	21.1
Medium	UBUNTU-CVE-2020-29362	p11-kit@0.23.20-1build1	0.23.20-1ubuntu0.1
Low	UBUNTU-CVE-2025-69420	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2026-57433	perl@5.30.0-9build1	5.30.0-9ubuntu0.5+esm3
Low	GHSA-7452-xqpj-6rpc	github.com/moby/moby@v1.13.1	19.3.15
Low	GHSA-v39p-96qg-c8rf	object-path@0.11.5	0.11.6
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	UBUNTU-CVE-2023-27535	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.18
Low	UBUNTU-CVE-2023-4806	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.14
Low	UBUNTU-CVE-2025-46835	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.14+esm3
Low	ALPINE-CVE-2021-20205	libjpeg-turbo@2.0.6-r0	2.1.0-r0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.0.0-rc92	1.2.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.2latest	3 years ago	1.3.0	221481,0703,962	68,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kommander.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kommander)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.