prometheus-operator 12.11.13 Helm chart

Name: prometheus-operator Helm chart 12.11.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mesosphere

Scored 14 Sept 2026

prometheus-operator collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

Version 12.11.13 6 months agoapp version 0.44.0 0Artifact Hub

prometheus-operator 12.11.13 deploys 8 container images: quay.io/prometheus/node-exporter, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 4 more. Across the 7 measured, 972 findings — 1 critical, 19 high — 3 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1i-r0, fixed in 1.1.1l-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

11,689119181771

972 findings over 7 of 8 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.0.1	0327163	2,188
quay.io/kiwigrid/k8s-sidecar×2	2.5.0	011951	878
grafana/grafana	12.3.3	0036153	2,075
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.18.0	00665	618
quay.io/prometheus-operator/prometheus-operator	v0.44.0	0331164	2,252
apteno/alpine-jq	2021-01-19	19299	1,345
bitnami/kubectl×4	1.19.7	—	unmeasured
jettech/kube-webhook-certgen×2	v1.5.0	0333166	2,333

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

430 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2022-0477	stdlib@go1.14.12	1.17.11
Low	GO-2026-4341	stdlib@go1.14.12	1.24.12
Low	GO-2022-0533	stdlib@go1.14.12	1.17.11
Low	ALPINE-CVE-2021-22898	curl@7.74.0-r0	7.77.0-r0
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-hcxc-wf8j-23hv	github.com/openfga/openfga@v1.11.3	1.18.0
Low	GO-2022-0523	stdlib@go1.14.12	1.17.12
Low	GO-2024-2887	stdlib@go1.14.12	1.21.11
Low	ALPINE-CVE-2026-6276	curl@8.17.0-r1	8.20.0-r0
Low	GO-2022-0522	stdlib@go1.14.12	1.17.12
Low	GO-2022-0527	stdlib@go1.14.12	1.17.12
Low	GO-2022-0524	stdlib@go1.14.12	1.17.12
Low	GHSA-pxq6-2prw-chj9	github.com/moby/moby@v27.5.1+incompatible	no fix listed
Low	GO-2023-1704	stdlib@go1.14.12	1.19.8
Low	ALPINE-CVE-2026-2673	openssl@3.5.5-r0	3.5.6-r0
Low	GO-2022-0289	stdlib@go1.14.12	1.16.12
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.45.1	0.46.2
Low	ALPINE-CVE-2026-9080	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-3784	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-6xff-cpcq-vpw2	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	1.5.1-0.20260303204923-b13f74291d48
Low	GO-2021-0223	stdlib@go1.14.4	1.13.13
Low	ALPINE-CVE-2025-14819	curl@8.17.0-r1	8.18.0-r0
Low	GO-2022-0526	stdlib@go1.14.12	1.17.12
Low	ALPINE-CVE-2026-76642	util-linux@2.41-r9	2.41.6-r0
Low	GO-2023-1568	stdlib@go1.14.12	1.19.6
Low	GO-2022-1037	stdlib@go1.14.12	1.18.7
Low	GO-2023-1987	stdlib@go1.14.12	1.19.12
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.39.0	1.43.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.5-r0	3.5.8-r0
Low	GO-2023-1752	stdlib@go1.14.12	1.19.9
Low	GHSA-v86x-5fm3-5p7j	github.com/prometheus/alertmanager@v0.21.0	0.25.1
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.6.1	1.6.3
Low	ALPINE-CVE-2025-14524	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2022-35252	curl@7.74.0-r0	7.79.1-r3
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	GO-2023-1705	stdlib@go1.14.12	1.19.8
Low	GO-2023-1878	stdlib@go1.14.12	1.19.11
Low	ALPINE-CVE-2021-42374	busybox@1.32.1-r0	1.32.1-r7
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	GO-2022-1039	stdlib@go1.14.12	1.18.7
Low	GO-2024-2963	stdlib@go1.14.12	1.21.12
Low	GO-2023-1702	stdlib@go1.14.12	1.19.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.47.0	0.55.0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	GO-2022-0525	stdlib@go1.14.12	1.17.12
Low	GO-2022-0520	stdlib@go1.14.12	1.17.12

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.11.13latest	6 months ago	0.44.0	119181771	11,689

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mesosphere/prometheus-operator.svg)](https://charts.stackradar.io/charts/mesosphere/prometheus-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.