kommander 0.39.2 Helm chart

Name: kommander Helm chart 0.39.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 14 Sept 2026

Kommander

Version 0.39.2 3 years agodeploys tag 1.3.0 0Artifact Hub

kommander 0.39.2 deploys 29 container images: kiwigrid/k8s-sidecar, mesosphere/grafana-plugins, grafana/grafana, quay.io/kubernetes-multicluster/kubefed and 22 more. Across the 24 measured, 5,212 findings — 22 critical, 148 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

68,284221481,0703,962

5,212 findings over 24 of 29 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

29 images

Image	Tag	Vulnerabilities	Radar Score
kiwigrid/k8s-sidecar×2	1.3.0	174828	1,965
mesosphere/grafana-plugins	v0.0.1	0342	297
grafana/grafana	6.6.0	0839184	2,910
quay.io/kubernetes-multicluster/kubefed×2	v0.7.0	1947174	3,115
mesosphere/kommander-federation-authorizedlister	v0.21.2	0438205	2,829
mesosphere/kommander-federation-controller-manager	v0.21.2	0439205	2,832
gcr.io/kubebuilder/kube-rbac-proxy×2	v0.8.0	—	unmeasured
mesosphere/kommander-federation-utility-apiserver	v0.21.2	0543243	3,189
mesosphere/kommander-federation-webhook	v0.21.2	0439205	2,832
mesosphere/karma	v0.55-d2iq-proxy	0222155	1,978
mesosphere/kommander-licensing-controller-manager	v0.21.2	0330170	2,269
mesosphere/kommander-licensing-webhook	v0.21.2	0330170	2,269
quay.io/thanos/thanos	v0.17.1	0332173	2,367
mesosphere/kommander	6.100.1	0115399	2,797
mesosphere/kubeaddons-catalog	v0.11.4	1428228468	12,010
quay.io/coreos/kube-state-metrics	v1.9.8	—	unmeasured
prom/alertmanager	v0.21.0	0429165	2,305
jimmidyson/configmap-reload×2	v0.5.0	008125	1,260
prom/prometheus	v2.19.2	0333177	2,442
thanosio/thanos	v0.15.0	0446227	3,075
thanosio/thanos×2	v0.19.0	0331169	2,289
gcr.io/kubecost1/cost-model	prod-1.81.0	1747176	3,029
gcr.io/kubecost1/frontend	prod-1.81.0	1104110	1,711
gcr.io/kubecost1/server	prod-1.81.0	31065197	3,919
apteno/alpine-jq	2021-01-19	19299	1,345
bitnami/kubectl	1.17.16	—	unmeasured
bitnami/kubectl×3	1.20.6	—	unmeasured
bitnami/kubectl×12	1.19.7	—	unmeasured
mesosphere/kubeaddons-addon-initializer×2	v0.2.8	0449226	3,250

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,253 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1l-r0	1.1.1t-r1
Medium	UBUNTU-CVE-2023-0464	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.18
Medium	GHSA-j249-ghv5-7mxv	github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible	18.09.8
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1d-r4	1.1.1j-r0
Medium	UBUNTU-CVE-2021-23841	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.2
Medium	GHSA-g42g-737j-qx6j	k8s.io/kubernetes@v1.19.5	1.19.10
Medium	GHSA-93q8-gq69-wqmw	ansi-regex@4.1.0	4.1.1
Medium	UBUNTU-CVE-2023-27534	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.18
Medium	ALPINE-CVE-2022-32208	curl@7.74.0-r0	7.79.1-r2
Medium	UBUNTU-CVE-2022-32208	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.12
Medium	UBUNTU-CVE-2020-29363	p11-kit@0.23.20-1build1	0.23.20-1ubuntu0.1
Medium	GHSA-x95h-979x-cf3j	github.com/microcosm-cc/bluemonday@v1.0.2	1.0.16
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.3.3	2.5.4
Medium	UBUNTU-CVE-2021-33910	systemd@245.4-4ubuntu3.2	245.4-4ubuntu3.10
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1d-r4	1.1.1i-r0
Medium	UBUNTU-CVE-2020-1971	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.1
Medium	GHSA-wm7h-9275-46v2	dicer@0.3.0	no fix listed
Medium	GHSA-449p-3h89-pw88	github.com/go-git/go-git/v5@v5.1.0	5.11.0
Medium	GHSA-449p-3h89-pw88	gopkg.in/src-d/go-git.v4@v4.13.1	no fix listed
Medium	UBUNTU-CVE-2020-29361	p11-kit@0.23.20-1build1	0.23.20-1ubuntu0.1
Medium	UBUNTU-CVE-2024-37371	krb5@1.17-6ubuntu4	1.17-6ubuntu4.6
Medium	ALPINE-CVE-2022-27406	freetype@2.10.4-r1	2.10.4-r3
Medium	GHSA-q2q7-5pp4-w6pg	urllib3@1.26.0	1.26.5
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20201216223049-8b5274cf687f
Medium	UBUNTU-CVE-2023-27533	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.18
Medium	UBUNTU-CVE-2019-15847	gcc-10@10-20200411-0ubuntu1	10.2.0-5ubuntu1~20.04
Medium	ALPINE-CVE-2022-27775	curl@7.74.0-r0	7.79.1-r1
Medium	UBUNTU-CVE-2022-27775	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.10
Medium	GHSA-cx63-2mw6-8hw5	setuptools@50.3.2	70.0.0
Medium	UBUNTU-CVE-2021-3326	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.7
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-12build1	no fix listed
Medium	UBUNTU-CVE-2021-3634	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.2
Medium	UBUNTU-CVE-2019-9923	tar@1.30+dfsg-7	1.30+dfsg-7ubuntu0.20.04.1
Medium	GHSA-38jv-5279-wg99	urllib3@1.26.0	2.6.3
Medium	UBUNTU-CVE-2019-18276	bash@5.0-6ubuntu1.1	5.0-6ubuntu1.2
Medium	GHSA-74fj-2j2h-c42q	follow-redirects@1.13.1	1.14.7
Medium	ALPINE-CVE-2022-27782	curl@7.74.0-r0	7.79.1-r2
Medium	UBUNTU-CVE-2022-27782	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.11
Medium	UBUNTU-CVE-2024-4741	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.23
Medium	UBUNTU-CVE-2021-28041	openssh@1:8.2p1-4ubuntu0.1	1:8.2p1-4ubuntu0.2
Medium	UBUNTU-CVE-2022-28321	pam@1.3.1-5ubuntu4.1	1.3.1-5ubuntu4.4
Medium	UBUNTU-CVE-2021-40330	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.2
Medium	GHSA-v725-9546-7q7m	gopkg.in/src-d/go-git.v4@v4.13.1	no fix listed
Medium	GHSA-v725-9546-7q7m	github.com/go-git/go-git/v5@v5.1.0	5.13.0
Medium	UBUNTU-CVE-2020-25709	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.5
Medium	GO-2024-2521	github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible	20.10.0-beta1+incompatible
Medium	GO-2024-2521	github.com/moby/moby@v1.13.1	20.10.0-beta1+incompatible
Medium	UBUNTU-CVE-2026-3497	openssh@1:8.2p1-4ubuntu0.1	1:8.2p1-4ubuntu0.13+esm1
Medium	GHSA-crh6-fp67-6883	xmldom@0.3.0	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.2latest	3 years ago	1.3.0	221481,0703,962	68,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kommander.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kommander)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.