StackRadar

kubecost 0.37.5 Helm chart

mesosphere-stable

Scored 15 Sept 2026

Kubecost

Version 0.37.5 1 year agodeploys tag 1.28.0 2Artifact Hub

kubecost 0.37.5 deploys 9 container images: kiwigrid/k8s-sidecar, grafana/grafana, quay.io/prometheus/alertmanager, quay.io/prometheus-operator/prometheus-config-reloader and 5 more. Across them, 1,626 findings2 critical, 24 high 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-48384 in git 1:2.39.5-0+deb12u1, fixed in 1:2.39.5-0+deb12u3.

Radar Score

17,7552242661,334

1,626 findings over 9 of 9 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
kiwigrid/k8s-sidecar×21.28.0022045878
grafana/grafana9.4.707412053,018
quay.io/prometheus/alertmanagerv0.27.001101031,031
quay.io/prometheus-operator/prometheus-config-reloaderv0.69.102111071,152
quay.io/prometheus/prometheusv2.55.000111081,008
quay.io/thanos/thanosv0.36.10010107998
gcr.io/kubecost1/cost-modelprod-1.108.116592773,857
gcr.io/kubecost1/frontendprod-1.108.1032017753
bitnamilegacy/kubectl×31.30.513843655,060

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

603 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-89156pcre2@10.42-110.42-1+deb12u1
LowDEBIAN-CVE-2026-5958sed@4.9-14.9-1+deb12u1
LowDEBIAN-CVE-2026-6368glibc@2.36-9+deb12u8no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.37.5latest1 year ago1.28.02242661,33417,755

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/kubecost.svg)](https://charts.stackradar.io/charts/mesosphere-stable/kubecost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.