kommander Helm chart

Name: kommander Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 15 Sept 2026

Kommander

Latest 0.39.2 3 years agodeploys tag 1.3.0 0Artifact Hub

kommander 0.39.2 deploys 29 container images: kiwigrid/k8s-sidecar, mesosphere/grafana-plugins, grafana/grafana, quay.io/kubernetes-multicluster/kubefed and 22 more. Across the 24 measured, 5,219 findings — 21 critical, 149 high — 21 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

68,330211491,0703,969

5,219 findings over 24 of 29 images measured

KEV ×21 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

29 images

Image	Tag	Vulnerabilities	Radar Score
kiwigrid/k8s-sidecar×2	1.3.0	174828	1,965
mesosphere/grafana-plugins	v0.0.1	0342	297
grafana/grafana	6.6.0	0839184	2,910
quay.io/kubernetes-multicluster/kubefed×2	v0.7.0	1947174	3,115
mesosphere/kommander-federation-authorizedlister	v0.21.2	0438205	2,831
mesosphere/kommander-federation-controller-manager	v0.21.2	0439205	2,834
gcr.io/kubebuilder/kube-rbac-proxy×2	v0.8.0	—	unmeasured
mesosphere/kommander-federation-utility-apiserver	v0.21.2	0543243	3,189
mesosphere/kommander-federation-webhook	v0.21.2	0439205	2,834
mesosphere/karma	v0.55-d2iq-proxy	0222155	1,978
mesosphere/kommander-licensing-controller-manager	v0.21.2	0330170	2,269
mesosphere/kommander-licensing-webhook	v0.21.2	0330170	2,269
quay.io/thanos/thanos	v0.17.1	0332173	2,367
mesosphere/kommander	6.100.1	0115399	2,797
mesosphere/kubeaddons-catalog	v0.11.4	1329228475	12,049
quay.io/coreos/kube-state-metrics	v1.9.8	—	unmeasured
prom/alertmanager	v0.21.0	0429165	2,305
jimmidyson/configmap-reload×2	v0.5.0	008125	1,260
prom/prometheus	v2.19.2	0333177	2,442
thanosio/thanos	v0.15.0	0446227	3,075
thanosio/thanos×2	v0.19.0	0331169	2,289
gcr.io/kubecost1/cost-model	prod-1.81.0	1747176	3,029
gcr.io/kubecost1/frontend	prod-1.81.0	1104110	1,711
gcr.io/kubecost1/server	prod-1.81.0	31065197	3,920
apteno/alpine-jq	2021-01-19	19299	1,345
bitnami/kubectl	1.17.16	—	unmeasured
bitnami/kubectl×3	1.20.6	—	unmeasured
bitnami/kubectl×12	1.19.7	—	unmeasured
mesosphere/kubeaddons-addon-initializer×2	v0.2.8	0449226	3,250

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,260 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2022-0493	stdlib@go1.14.5	1.17.10
Low	GO-2021-0224	stdlib@go1.14.4	1.13.13
Low	UBUNTU-CVE-2025-6395	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm1
Low	UBUNTU-CVE-2025-24528	krb5@1.17-6ubuntu4	1.17-6ubuntu4.9
Low	GHSA-8x88-c5mf-7j5w	tar@6.0.2	7.5.18
Low	GO-2021-0317	stdlib@go1.14.5	1.16.14
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.13.1	1.15.4
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu1	no fix listed
Low	GHSA-35c7-w35f-xwgh	k8s.io/kubernetes@v1.19.5	1.21.0
Low	GHSA-rv95-896h-c2vc	express@4.17.1	4.19.2
Low	GO-2023-2185	stdlib@go1.14.5	1.20.11
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9build1	no fix listed
Low	UBUNTU-CVE-2026-41992	gzip@1.10-0ubuntu4	no fix listed
Low	UBUNTU-CVE-2023-7008	systemd@245.4-4ubuntu3.2	no fix listed
Low	DSA-4933-1	nettle@3.4.1-1	3.4.1-1+deb10u1
Low	GO-2021-0235	stdlib@go1.14.5	1.14.14
Low	GHSA-2mj3-vfvx-fc43	github.com/moby/moby@v1.13.1	26.0.0
Low	ALPINE-CVE-2020-15358	sqlite@3.32.1-r0	3.32.1-r1
Low	UBUNTU-CVE-2019-20633	patch@2.7.6-6	no fix listed
Low	GHSA-q8m4-xhhv-38mg	go.etcd.io/etcd@v0.5.0-alpha.5.0.20200819165624-17cef6e3e9d5	no fix listed
Low	GO-2022-0229	stdlib@go1.13.4	1.12.16
Low	UBUNTU-CVE-2020-29562	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.7
Low	GHSA-j2g6-362q-6qc6	github.com/vmware-tanzu/velero@v1.3.1	1.18.1
Low	GHSA-43fp-rhv2-5gv8	certifi@2020.11.8	2022.12.07
Low	UBUNTU-CVE-2026-8932	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.25+esm7
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.0.0	5.9.0
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	UBUNTU-CVE-2026-8286	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.25+esm4
Low	GHSA-wf93-45jw-7689	pip@20.2.4	26.1.2
Low	GHSA-4x4m-3c2p-qppc	k8s.io/kubernetes@v1.19.5	1.31.12
Low	GHSA-6chq-wfr3-2hj9	axios@0.21.1	0.31.1
Low	UBUNTU-CVE-2024-33602	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.16
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@6.0.2	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.13.1	3.15.2
Low	UBUNTU-CVE-2026-4046	glibc@2.31-0ubuntu9.1	no fix listed
Low	GHSA-r292-9mhp-454m	tar@6.0.2	7.5.21
Low	UBUNTU-CVE-2026-0966	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm3
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.13.1	1.16.0
Low	ALPINE-CVE-2021-22890	curl@7.74.0-r0	7.76.0-r0
Low	UBUNTU-CVE-2021-22890	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.5
Low	GO-2022-0537	stdlib@go1.14.5	1.17.13
Low	GHSA-3vp4-m3rf-835h	github.com/gin-gonic/gin@v1.5.0	1.9.0
Low	GO-2021-0234	stdlib@go1.14.5	1.15.9
Low	UBUNTU-CVE-2026-48959	perl@5.30.0-9build1	no fix listed
Low	UBUNTU-CVE-2026-59843	libssh@0.9.3-2ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-5928	glibc@2.31-0ubuntu9.1	no fix listed
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/square/go-jose.v2@v2.3.0	no fix listed
Low	GHSA-267v-3v32-g6q5	github.com/crewjam/saml@v0.0.0-20191031171751-c42136edf9b1	0.4.14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.2latest	3 years ago	1.3.0	211491,0703,969	68,330

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kommander.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kommander)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.