kommander Helm chart
mesosphere-stableScored 14 Sept 2026
Kommander
Latest 0.39.2 3 years agodeploys tag 1.3.0 0Artifact Hub
kommander 0.39.2 deploys 29 container images: kiwigrid/k8s-sidecar, mesosphere/grafana-plugins, grafana/grafana, quay.io/kubernetes-multicluster/kubefed and 22 more. Across the 24 measured, 5,212 findings — 22 critical, 148 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2, fixed in 1.1.1f-1ubuntu2.15.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-hfxv-24rg-xrqf | axios | 0.32.0 |
| Low | ALPINE-CVE-2021-22923 | curl | 7.78.0-r0 |
| Low | UBUNTU-CVE-2026-12087 | perl | 5.30.0-9ubuntu0.5+esm3 |
| Low | GHSA-vv39-3w5q-974q | k8s.io/ | 1.29.13 |
| Low | UBUNTU-CVE-2023-47038 | perl | 5.30.0-9ubuntu0.5 |
| Low | GHSA-j5f8-grm9-p9fc | axios | 0.32.0 |
| Low | GHSA-jqcq-xjh3-6g23 | github.com/ | no fix listed |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-h7wq-jj8r-qm7p | k8s.io/ | 1.27.0-alpha.1 |
| Low | GHSA-mp6q-xf9x-fwf7 | apollo-server | no fix listed |
| Low | UBUNTU-CVE-2020-11080 | nghttp2 | 1.40.0-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-0915 | glibc | 2.31-0ubuntu9.18+esm1 |
| Low | UBUNTU-CVE-2025-4802 | glibc | 2.31-0ubuntu9.18 |
| Low | UBUNTU-CVE-2023-50495 | ncurses | no fix listed |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |
| Low | GO-2022-0435 | stdlib | 1.17.9 |
| Low | UBUNTU-CVE-2026-5773 | curl | 7.68.0-1ubuntu2.25+esm5 |
| Low | UBUNTU-CVE-2023-5981 | gnutls28 | 3.6.13-2ubuntu1.9 |
| Low | GHSA-6hwg-w5jg-9c6x | github.com/ | 19.03.9 |
| Low | GHSA-6hwg-w5jg-9c6x | github.com/ | 19.03.9 |
| Low | UBUNTU-CVE-2021-3997 | systemd | 245.4-4ubuntu3.15 |
| Low | GHSA-pw2r-vq6v-hr8c | follow-redirects | 1.14.8 |
| Low | UBUNTU-CVE-2026-63072 | openssl | 1.1.1f-1ubuntu2.24+esm5 |
| Low | GHSA-f5x3-32g6-xq36 | tar | 6.2.1 |
| Low | GO-2022-0288 | stdlib | 1.16.12 |
| Low | GO-2022-0288 | golang.org/ | 0.0.0-20211209124913-491a49abca63 |
| Low | UBUNTU-CVE-2024-33600 | glibc | 2.31-0ubuntu9.16 |
| Low | UBUNTU-CVE-2026-66046 | expat | no fix listed |
| Low | GO-2021-0069 | stdlib | 1.14.12 |
| Low | GHSA-pmwg-cvhr-8vh7 | axios | 0.31.1 |
| Low | UBUNTU-CVE-2022-48303 | tar | 1.30+dfsg-7ubuntu0.20.04.3 |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | UBUNTU-CVE-2025-5318 | libssh | 0.9.3-2ubuntu2.5+esm1 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | UBUNTU-CVE-2023-0466 | openssl | 1.1.1f-1ubuntu2.18 |
| Low | GHSA-j759-j44w-7fr8 | xmldom | no fix listed |
| Low | GHSA-58f5-hfqc-jgch | jose | 2.0.5 |
| Low | GHSA-xqr8-7jwr-rhp7 | certifi | 2023.7.22 |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-35385 | openssh | no fix listed |
| Low | GO-2022-0236 | stdlib | 1.15.12 |
| Low | ALPINE-CVE-2023-0465 | openssl | 1.1.1t-r2 |
| Low | UBUNTU-CVE-2023-0465 | openssl | 1.1.1f-1ubuntu2.18 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GO-2021-0226 | stdlib | 1.14.8 |
| Low | UBUNTU-CVE-2026-42013 | gnutls28 | 3.6.13-2ubuntu1.12+esm3 |
| Low | UBUNTU-CVE-2026-0861 | glibc | 2.31-0ubuntu9.18+esm1 |
| Low | GHSA-jphm-g89m-v42p | github.com/ | no fix listed |
| Low | GHSA-93r5-fhx6-vmg9 | xmldom | no fix listed |
| Low | GHSA-965w-775f-mr7g | xmldom | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.39.2latest | 3 years ago | 1.3.0 | 221481,0703,962 | 68,284 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.