kommander 0.39.2 Helm chart

Name: kommander Helm chart 0.39.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 15 Sept 2026

Kommander

Version 0.39.2 3 years agodeploys tag 1.3.0 0Artifact Hub

kommander 0.39.2 deploys 29 container images: kiwigrid/k8s-sidecar, mesosphere/grafana-plugins, grafana/grafana, quay.io/kubernetes-multicluster/kubefed and 22 more. Across the 24 measured, 5,219 findings — 21 critical, 149 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

68,330211491,0703,969

5,219 findings over 24 of 29 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

29 images

Image	Tag	Vulnerabilities	Radar Score
kiwigrid/k8s-sidecar×2	1.3.0	174828	1,965
mesosphere/grafana-plugins	v0.0.1	0342	297
grafana/grafana	6.6.0	0839184	2,910
quay.io/kubernetes-multicluster/kubefed×2	v0.7.0	1947174	3,115
mesosphere/kommander-federation-authorizedlister	v0.21.2	0438205	2,831
mesosphere/kommander-federation-controller-manager	v0.21.2	0439205	2,834
gcr.io/kubebuilder/kube-rbac-proxy×2	v0.8.0	—	unmeasured
mesosphere/kommander-federation-utility-apiserver	v0.21.2	0543243	3,189
mesosphere/kommander-federation-webhook	v0.21.2	0439205	2,834
mesosphere/karma	v0.55-d2iq-proxy	0222155	1,978
mesosphere/kommander-licensing-controller-manager	v0.21.2	0330170	2,269
mesosphere/kommander-licensing-webhook	v0.21.2	0330170	2,269
quay.io/thanos/thanos	v0.17.1	0332173	2,367
mesosphere/kommander	6.100.1	0115399	2,797
mesosphere/kubeaddons-catalog	v0.11.4	1329228475	12,049
quay.io/coreos/kube-state-metrics	v1.9.8	—	unmeasured
prom/alertmanager	v0.21.0	0429165	2,305
jimmidyson/configmap-reload×2	v0.5.0	008125	1,260
prom/prometheus	v2.19.2	0333177	2,442
thanosio/thanos	v0.15.0	0446227	3,075
thanosio/thanos×2	v0.19.0	0331169	2,289
gcr.io/kubecost1/cost-model	prod-1.81.0	1747176	3,029
gcr.io/kubecost1/frontend	prod-1.81.0	1104110	1,711
gcr.io/kubecost1/server	prod-1.81.0	31065197	3,920
apteno/alpine-jq	2021-01-19	19299	1,345
bitnami/kubectl	1.17.16	—	unmeasured
bitnami/kubectl×3	1.20.6	—	unmeasured
bitnami/kubectl×12	1.19.7	—	unmeasured
mesosphere/kubeaddons-addon-initializer×2	v0.2.8	0449226	3,250

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,260 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DLA-3070-1	gnutls28@3.6.7-4+deb10u2	3.6.7-4+deb10u9
Low	GO-2022-0289	stdlib@go1.14.5	1.16.12
Low	UBUNTU-CVE-2023-22490	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.10
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	UBUNTU-CVE-2016-2781	coreutils@8.30-3ubuntu2	no fix listed
Low	UBUNTU-CVE-2021-45261	patch@2.7.6-6	no fix listed
Low	GHSA-6h8r-xr42-gp59	xmldom@0.3.0	no fix listed
Low	UBUNTU-CVE-2026-5545	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9build1	no fix listed
Low	GO-2020-0046	github.com/russellhaering/gosaml2@v0.6.0	0.7.0
Low	GO-2020-0046	github.com/russellhaering/goxmldsig@v1.1.0	1.1.1
Low	UBUNTU-CVE-2026-3784	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.25+esm3
Low	GO-2021-0223	stdlib@go1.14.4	1.13.13
Low	UBUNTU-CVE-2023-28322	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.19
Low	GO-2022-0526	stdlib@go1.14.5	1.17.12
Low	ALPINE-CVE-2020-28928	musl@1.1.24-r9	1.1.24-r10
Low	UBUNTU-CVE-2026-42015	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2024-28834	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.11
Low	GO-2023-1568	stdlib@go1.14.5	1.19.6
Low	UBUNTU-CVE-2020-25697	libx11@2:1.6.9-2ubuntu1.1	no fix listed
Low	GHSA-m3xc-h892-ggx6	github.com/go-git/go-billy/v5@v5.0.0	5.9.0
Low	GHSA-xxxw-3j6h-q7h6	github.com/grafana/grafana-plugin-sdk-go@v0.11.0	0.250.0
Low	GHSA-h6q6-9hqw-rwfv	xmldom@0.3.0	0.5.0
Low	GHSA-c2h3-6mxw-7mvq	github.com/containerd/containerd@v1.3.4	1.4.11
Low	GO-2022-1037	stdlib@go1.14.5	1.18.7
Low	ALPINE-CVE-2021-3996	util-linux@2.35.2-r0	2.37.3-r0
Low	UBUNTU-CVE-2021-3996	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	UBUNTU-CVE-2023-43785	libx11@2:1.6.9-2ubuntu1.1	2:1.6.9-2ubuntu1.6
Low	ALPINE-CVE-2021-3995	util-linux@2.35.2-r0	2.37.3-r0
Low	UBUNTU-CVE-2021-3995	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	UBUNTU-CVE-2025-40909	perl@5.30.0-9build1	no fix listed
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.1.0	5.19.2
Low	GHSA-83g3-92jg-28cx	tar@6.0.2	7.5.8
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9build1	no fix listed
Low	GO-2023-1987	stdlib@go1.14.5	1.19.12
Low	GHSA-2mm7-x5h6-5pvq	github.com/moby/moby@v1.13.1	20.10.14
Low	GHSA-2mm7-x5h6-5pvq	github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible	20.10.14
Low	GO-2023-1752	stdlib@go1.14.5	1.19.9
Low	GHSA-v86x-5fm3-5p7j	github.com/prometheus/alertmanager@v0.20.0	0.25.1
Low	UBUNTU-CVE-2025-14524	curl@7.68.0-1ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm2
Low	ALPINE-CVE-2022-35252	curl@7.74.0-r0	7.79.1-r3
Low	UBUNTU-CVE-2022-35252	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.13
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.1	no fix listed
Low	UBUNTU-CVE-2025-48386	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.14+esm1
Low	GHSA-34jh-p97f-mpxf	urllib3@1.26.0	1.26.19
Low	GHSA-4xh5-x5gv-qwph	pip@20.2.4	25.3
Low	GHSA-w8wr-v893-vjvp	tar@6.0.2	7.5.18
Low	GO-2023-1705	stdlib@go1.14.5	1.19.8
Low	GHSA-m7pr-hjqh-92cm	axios@0.21.1	0.31.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.2latest	3 years ago	1.3.0	211491,0703,969	68,330

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kommander.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kommander)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.