kommander 0.39.2 Helm chart

Name: kommander Helm chart 0.39.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 14 Sept 2026

Kommander

Version 0.39.2 3 years agodeploys tag 1.3.0 0Artifact Hub

kommander 0.39.2 deploys 29 container images: kiwigrid/k8s-sidecar, mesosphere/grafana-plugins, grafana/grafana, quay.io/kubernetes-multicluster/kubefed and 22 more. Across the 24 measured, 5,212 findings — 22 critical, 148 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

68,284221481,0703,962

5,212 findings over 24 of 29 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

29 images

Image	Tag	Vulnerabilities	Radar Score
kiwigrid/k8s-sidecar×2	1.3.0	174828	1,965
mesosphere/grafana-plugins	v0.0.1	0342	297
grafana/grafana	6.6.0	0839184	2,910
quay.io/kubernetes-multicluster/kubefed×2	v0.7.0	1947174	3,115
mesosphere/kommander-federation-authorizedlister	v0.21.2	0438205	2,829
mesosphere/kommander-federation-controller-manager	v0.21.2	0439205	2,832
gcr.io/kubebuilder/kube-rbac-proxy×2	v0.8.0	—	unmeasured
mesosphere/kommander-federation-utility-apiserver	v0.21.2	0543243	3,189
mesosphere/kommander-federation-webhook	v0.21.2	0439205	2,832
mesosphere/karma	v0.55-d2iq-proxy	0222155	1,978
mesosphere/kommander-licensing-controller-manager	v0.21.2	0330170	2,269
mesosphere/kommander-licensing-webhook	v0.21.2	0330170	2,269
quay.io/thanos/thanos	v0.17.1	0332173	2,367
mesosphere/kommander	6.100.1	0115399	2,797
mesosphere/kubeaddons-catalog	v0.11.4	1428228468	12,010
quay.io/coreos/kube-state-metrics	v1.9.8	—	unmeasured
prom/alertmanager	v0.21.0	0429165	2,305
jimmidyson/configmap-reload×2	v0.5.0	008125	1,260
prom/prometheus	v2.19.2	0333177	2,442
thanosio/thanos	v0.15.0	0446227	3,075
thanosio/thanos×2	v0.19.0	0331169	2,289
gcr.io/kubecost1/cost-model	prod-1.81.0	1747176	3,029
gcr.io/kubecost1/frontend	prod-1.81.0	1104110	1,711
gcr.io/kubecost1/server	prod-1.81.0	31065197	3,919
apteno/alpine-jq	2021-01-19	19299	1,345
bitnami/kubectl	1.17.16	—	unmeasured
bitnami/kubectl×3	1.20.6	—	unmeasured
bitnami/kubectl×12	1.19.7	—	unmeasured
mesosphere/kubeaddons-addon-initializer×2	v0.2.8	0449226	3,250

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,253 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	GHSA-3xh2-74w9-5vxm	github.com/gorilla/websocket@v1.4.0	1.4.1
Medium	ALPINE-CVE-2022-25313	expat@2.2.9-r1	2.2.10-r2
Medium	UBUNTU-CVE-2022-25313	expat@2.2.9-1build1	2.2.9-1ubuntu0.4
Medium	GHSA-6fj5-m822-rqx8	github.com/moby/moby@v1.13.1	19.3.15
Medium	UBUNTU-CVE-2021-20305	nettle@3.5.1+really3.5.1-2	3.5.1+really3.5.1-2ubuntu0.1
Medium	GHSA-8v63-cqqc-6r2c	object-path@0.11.5	0.11.8
Medium	UBUNTU-CVE-2021-41617	openssh@1:8.2p1-4ubuntu0.1	1:8.2p1-4ubuntu0.11
Medium	UBUNTU-CVE-2018-5709	krb5@1.17-6ubuntu4	no fix listed
Medium	ALPINE-CVE-2021-42383	busybox@1.32.1-r6	1.32.1-r7
Medium	UBUNTU-CVE-2024-28757	expat@2.2.9-1build1	no fix listed
Medium	GHSA-wxc4-f4m6-wwqv	gopkg.in/yaml.v2@v2.2.5	2.2.8
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.4.0
Medium	UBUNTU-CVE-2016-10228	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.7
Medium	UBUNTU-CVE-2023-31484	perl@5.30.0-9build1	5.30.0-9ubuntu0.4
Medium	UBUNTU-CVE-2023-2953	openldap@2.4.49+dfsg-2ubuntu1.3	2.4.49+dfsg-2ubuntu1.10
Medium	UBUNTU-CVE-2016-20012	openssh@1:8.2p1-4ubuntu0.1	no fix listed
Medium	ALPINE-CVE-2021-22876	curl@7.74.0-r0	7.76.0-r0
Medium	UBUNTU-CVE-2021-22876	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.5
Medium	UBUNTU-CVE-2022-2509	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7
Medium	GHSA-5rcv-m4m3-hfh7	golang.org/x/text@v0.3.2	0.3.3
Medium	UBUNTU-CVE-2023-36054	krb5@1.17-6ubuntu4	1.17-6ubuntu4.4
Medium	GHSA-f8q6-p94x-37v3	minimatch@3.0.4	3.0.5
Medium	UBUNTU-CVE-2023-52425	expat@2.2.9-1build1	no fix listed
Medium	UBUNTU-CVE-2022-34903	gnupg2@2.2.19-3ubuntu2	2.2.19-3ubuntu2.2
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781
Medium	GHSA-mqqv-chpx-vq25	github.com/russellhaering/gosaml2@v0.6.0	0.7.0
Medium	GHSA-mqqv-chpx-vq25	github.com/russellhaering/goxmldsig@v1.1.0	1.1.1
Medium	GHSA-prjq-f4q3-fvfr	github.com/russellhaering/goxmldsig@v1.1.0	1.1.1
Medium	GHSA-prjq-f4q3-fvfr	github.com/russellhaering/gosaml2@v0.6.0	0.7.0
Medium	ALPINE-CVE-2021-22925	curl@7.74.0-r0	7.78.0-r0
Medium	UBUNTU-CVE-2021-22925	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.6
Medium	UBUNTU-CVE-2011-10043	perl@5.30.0-9build1	no fix listed
Medium	UBUNTU-CVE-2019-25013	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.7
Medium	ALPINE-CVE-2021-3537	libxml2@2.9.10-r6	2.9.10-r7
Medium	GHSA-px4h-xg32-q955	normalize-url@4.5.0	4.5.1
Medium	UBUNTU-CVE-2024-32004	git@1:2.25.1-1ubuntu3	1:2.25.1-1ubuntu3.12
Medium	GHSA-6q6q-88xp-6f2r	gopkg.in/yaml.v2@v2.2.2	2.2.4
Medium	GHSA-r5c5-pr8j-pfp7	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20190320223903-b7391e95e576
Medium	UBUNTU-CVE-2023-3138	libx11@2:1.6.9-2ubuntu1.1	2:1.6.9-2ubuntu1.5
Medium	GHSA-72xf-g2v4-qvf3	tough-cookie@2.4.3	4.1.3
Medium	ALPINE-CVE-2022-2097	openssl@1.1.1k-r0	1.1.1q-r0
Medium	UBUNTU-CVE-2022-2097	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.16
Medium	GHSA-5955-9wpr-37jh	tar@6.0.2	6.1.9
Medium	UBUNTU-CVE-2024-33599	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.16
Medium	UBUNTU-CVE-2026-4176	perl@5.30.0-9build1	no fix listed
Medium	ALPINE-CVE-2021-30139	apk-tools@2.12.1-r0	2.12.5-r0
Medium	UBUNTU-CVE-2024-0553	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.10
Medium	GHSA-rc47-6667-2j5j	http-cache-semantics@3.8.1	4.1.1
Medium	UBUNTU-CVE-2026-18924	curl@7.68.0-1ubuntu2.2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.2latest	3 years ago	1.3.0	221481,0703,962	68,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kommander.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kommander)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.