cognative Helm chart

Name: cognative Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mya

Scored 14 Sept 2026

cognative is an opinionated, minimalistic approach to business intelligence 🧠 and operations 🚨. We strongly believe companies should be able to own their own data, and many solutions out there leave organizations to the whims of third-party providers. Our goal is to reduce the complexity of traditional business intelligence and operations stacks, while seeking to maximize the efforts of everyday operations staff. This not only simplifies the process for operators, but also enhances the experience for less infrastructure-aware developers. (BETA) This chart provides an early access preview to the cogantive stack. It currently not suitable for production. I'm hoping to iterate on this stack in the public, and am actively looking for help from others to push it forward.

Latest 0.2403.3 2 years agoApp version not verified against the render 0Artifact Hub

cognative 0.2403.3 deploys 3 container images: otel/opentelemetry-collector-contrib, grafana/grafana and clickhouse/clickhouse-server. Across them, 635 findings — 3 critical, 14 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.22, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

7,30931496522

635 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector-contrib×3	0.96.0	0219155	1,721
grafana/grafana	10.4.0	0425159	2,030
clickhouse/clickhouse-server	24.2	3852208	3,558

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

339 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-40909	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GHSA-9mj6-hxhv-w67j	github.com/dvsekhvalnov/jose2go@v1.6.0	1.7.0
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GO-2023-1987	stdlib@go1.19.10	1.19.12
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.22.0	1.43.0
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.3.7	1.6.3
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.11	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.15	no fix listed
Low	GHSA-mh55-gqvf-xfwm	github.com/rs/cors@v1.10.1	1.11.0
Low	GO-2023-1878	stdlib@go1.19.10	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.18.0	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.31-0ubuntu9.15	no fix listed
Low	GO-2024-2963	stdlib@go1.21.8	1.21.12
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.20.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.30.0-9ubuntu0.5	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	UBUNTU-CVE-2025-0395	glibc@2.31-0ubuntu9.15	2.31-0ubuntu9.17
Low	UBUNTU-CVE-2023-4039	gcc-10@10.5.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	UBUNTU-CVE-2026-76642	util-linux@2.34-0.1ubuntu9.6	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.18.0	0.45.0
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.23	245.4-4ubuntu3.24+esm1
Low	GO-2023-2375	stdlib@go1.19.10	1.20.0
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.20.0	0.38.0
Low	GHSA-m454-3xv7-qj85	github.com/ClickHouse/ch-go@v0.58.2	0.65.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.60.1	1.83.1
Low	GHSA-v6v8-xj6m-xwqh	github.com/hashicorp/go-retryablehttp@v0.7.4	0.7.7
Low	GO-2023-2382	stdlib@go1.19.10	1.20.12
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.18.0	0.52.0
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.18.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.18.0	0.52.0
Low	GO-2024-2599	stdlib@go1.21.7	1.21.8
Low	GHSA-prf6-xjxh-p698	github.com/open-telemetry/opentelemetry-collector-contrib/receiver/awsfirehosereceiver@v0.96.0	0.108.0
Low	GO-2024-3106	stdlib@go1.21.8	1.22.7
Low	ALPINE-CVE-2024-2004	curl@8.5.0-r0	8.7.1-r0
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r15	1.36.1-r19
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r15	1.36.1-r17
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1
Low	GHSA-337j-9hxr-rhxg	react-router@6.21.3	7.18.0
Low	GO-2024-2600	stdlib@go1.21.7	1.21.8
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r15	1.36.1-r16
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.60.1	1.82.1
Low	GO-2024-2609	stdlib@go1.21.7	1.21.8
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.4-1ubuntu1.1	5.2.4-1ubuntu1.1+esm1
Low	GO-2024-3107	stdlib@go1.21.8	1.22.7
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r15	1.36.1-r19
Low	UBUNTU-CVE-2026-54411	pam@1.3.1-5ubuntu4.7	no fix listed
Low	GHSA-ffqx-q65f-36jf	github.com/grafana/tempo@v1.5.1-0.20230524121406-1dc1bfe7085b	2.10.3
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.13.1	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.1	1.7.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2403.3latest	2 years ago	—	31496522	7,309

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mya/cognative.svg)](https://charts.stackradar.io/charts/mya/cognative)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.