kubecost Helm chart

Name: kubecost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere-stable

Scored 14 Sept 2026

Kubecost

Latest 0.37.5 1 year agodeploys tag 1.28.0 2Artifact Hub

kubecost 0.37.5 deploys 9 container images: kiwigrid/k8s-sidecar, grafana/grafana, quay.io/prometheus/alertmanager, quay.io/prometheus-operator/prometheus-config-reloader and 5 more. Across them, 1,619 findings — 3 critical, 23 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-48384 in git 1:2.39.5-0+deb12u1, fixed in 1:2.39.5-0+deb12u3.

Radar Score

17,6933232651,328

1,619 findings over 9 of 9 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
kiwigrid/k8s-sidecar×2	1.28.0	112045	879
grafana/grafana	9.4.7	0741205	3,018
quay.io/prometheus/alertmanager	v0.27.0	0110103	1,031
quay.io/prometheus-operator/prometheus-config-reloader	v0.69.1	0211107	1,152
quay.io/prometheus/prometheus	v2.55.0	0011108	1,008
quay.io/thanos/thanos	v0.36.1	0010107	998
gcr.io/kubecost1/cost-model	prod-1.108.1	1659270	3,818
gcr.io/kubecost1/frontend	prod-1.108.1	032017	753
bitnamilegacy/kubectl×3	1.30.5	1383366	5,036

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

794 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	DEBIAN-CVE-2025-48384KEV	git@1:2.39.5-0+deb12u1	1:2.39.5-0+deb12u3
Critical	ALPINE-CVE-2025-6965	sqlite@3.45.3-r1	3.45.3-r3
Critical	UBUNTU-CVE-2024-2961	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.7
High	ALPINE-CVE-2025-15467	openssl@3.3.2-r0	3.3.6-r0
High	DEBIAN-CVE-2025-15467	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
High	ALPINE-CVE-2024-6119	openssl@3.1.4-r1	3.1.7-r0
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.18
High	ALPINE-CVE-2024-2398	curl@8.5.0-r0	8.7.1-r0
High	ALPINE-CVE-2023-2650	openssl@3.0.8-r0	3.0.9-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.14.0	0.17.0
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.4.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.17.0	0.23.0
High	DEBIAN-CVE-2024-28182	nghttp2@1.52.0-1+deb12u1	1.52.0-1+deb12u2
High	ALPINE-CVE-2024-2511	openssl@3.1.4-r1	3.1.4-r6
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.17
High	UBUNTU-CVE-2024-3596	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.5
High	GHSA-7fxm-f474-hf8w	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.24.17
Medium	GO-2025-3704	github.com/grafana/grafana@v9.4.7	no fix listed
Medium	GO-2024-3215	github.com/grafana/grafana@v9.4.7	no fix listed
Medium	GO-2024-2687	stdlib@go1.21.4	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.14.0	0.52.0
Medium	ALPINE-CVE-2024-7264	curl@8.5.0-r0	8.9.1-r0
Medium	GO-2024-2857	github.com/grafana/grafana@v9.4.7	no fix listed
Medium	GHSA-f5f7-6478-qm6p	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.19.15
Medium	ALPINE-CVE-2024-5535	openssl@3.1.4-r1	3.1.6-r0
Medium	DEBIAN-CVE-2024-5535	openssl@3.0.14-1~deb12u2	3.0.15-1~deb12u1
Medium	GHSA-mpv3-g8m3-3fjc	github.com/grafana/grafana@v9.4.7	9.4.13
Medium	DSA-6113-1	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Medium	DEBIAN-CVE-2019-1010022	glibc@2.36-9+deb12u8	no fix listed
Medium	DEBIAN-CVE-2023-45853	zlib@1:1.2.13.dfsg-1	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.5.13+dfsg-5	no fix listed
Medium	GO-2025-3817	github.com/grafana/grafana@v9.4.7	no fix listed
Medium	GHSA-wqv3-8cm6-h6wg	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.16.11
Medium	GHSA-hq6q-c2x6-hmch	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.25.16
Medium	DEBIAN-CVE-2026-45447	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
Medium	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u8	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.14.0	0.31.0
Medium	DEBIAN-CVE-2015-3276	openldap@2.5.13+dfsg-5	no fix listed
Medium	GHSA-34jx-wx69-9x8v	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.11.9
Medium	GHSA-q78c-gwqw-jcmc	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.24.17
Medium	DEBIAN-CVE-2019-1010023	glibc@2.36-9+deb12u8	no fix listed
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.4.0	0.7.0
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.16.13
Medium	ALPINE-CVE-2024-6197	curl@8.5.0-r0	8.9.0-r0
Medium	UBUNTU-CVE-2021-46848	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.2
Medium	GHSA-27wf-5967-98gx	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.28.12
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.4.0	0.17.0
Medium	ALPINE-CVE-2023-0464	openssl@3.0.8-r0	3.0.8-r1
Medium	GHSA-g42g-737j-qx6j	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.18.18
Medium	GHSA-449p-3h89-pw88	github.com/go-git/go-git/v5@v5.4.2	5.11.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.37.5latest	1 year ago	1.28.0	3232651,328	17,693

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kubecost.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kubecost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.