cosmos-node 2.6.3 Helm chart

Name: cosmos-node Helm chart 2.6.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

nodeify

Not scored yet

A professional, production-ready Helm chart for deploying Cosmos SDK blockchain nodes with enterprise-grade features

Version 2.6.3 todayapp version v25.1.0 0Artifact Hub

cosmos-node 2.6.3 deploys 2 container images: library/alpine and ghcr.io/cosmos/gaia. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.0-r0, fixed in 3.5.5-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 2 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/alpine	3.24	—	not yet scanned
ghcr.io/cosmos/gaia	v25.1.0	1041162	2,438

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

204 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-15468	openssl@3.5.0-r0	3.5.5-r0
Low	GO-2026-6608	stdlib@go1.24.5	1.26.9
Low	GO-2026-6607	stdlib@go1.24.5	1.26.9
Low	GO-2025-3442	github.com/cometbft/cometbft@v0.38.17	1.0.1
Low	GO-2025-4013	stdlib@go1.24.5	1.24.8
Low	GO-2026-6609	stdlib@go1.24.5	1.26.9
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GO-2025-3956	stdlib@go1.24.5	1.23.12
Low	GO-2026-4946	stdlib@go1.24.5	1.25.9
Low	GO-2026-6629	golang.org/x/text@v0.25.0	0.41.0
Low	ALPINE-CVE-2026-2673	openssl@3.5.0-r0	3.5.6-r0
Low	ALPINE-CVE-2025-5245	binutils@2.44-r0	2.44-r3
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.38.0	0.52.0
Low	ALPINE-CVE-2025-5244	binutils@2.44-r0	2.44-r3
Low	GO-2026-6613	stdlib@go1.24.5	1.26.9
Low	GO-2025-3849	stdlib@go1.24.5	1.23.12
Low	GO-2026-6605	stdlib@go1.24.5	1.26.9
Low	GO-2026-6610	stdlib@go1.24.5	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.40.0	0.60.0
Low	ALPINE-CVE-2025-49014	jq@1.8.0-r0	1.8.1-r0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.40.0	0.55.0
Low	GHSA-fw7p-63qq-7hpr	filippo.io/edwards25519@v1.1.0	1.1.1
Low	ALPINE-CVE-2026-63074	openssl@3.5.0-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.0-r0	3.5.7-r0
Low	GO-2026-4970	stdlib@go1.24.5	1.25.12
Low	ALPINE-CVE-2025-4575	openssl@3.5.0-r0	3.5.1-r0
Low	GO-2025-4012	stdlib@go1.24.5	1.24.8
Low	ALPINE-CVE-2025-66199	openssl@3.5.0-r0	3.5.5-r0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	GO-2026-4980	stdlib@go1.24.5	1.25.10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.38.0	0.45.0
Low	ALPINE-CVE-2026-22796	openssl@3.5.0-r0	3.5.5-r0
Low	GO-2026-4440	golang.org/x/net@v0.40.0	0.45.0
Low	GO-2025-4011	stdlib@go1.24.5	1.24.8
Low	GO-2025-4015	stdlib@go1.24.5	1.24.8
Low	GO-2026-4441	golang.org/x/net@v0.40.0	0.45.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.38.0	0.45.0
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.34.0	1.43.0
Low	GO-2026-4603	stdlib@go1.24.5	1.25.8
Low	GO-2025-4175	stdlib@go1.24.5	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.72.2	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.38.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.38.0	0.52.0
Low	GO-2026-4864	stdlib@go1.24.5	1.25.9
Low	GO-2026-4982	stdlib@go1.24.5	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.40.0	0.55.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.38.0	0.52.0
Low	ALPINE-CVE-2026-34181	openssl@3.5.0-r0	3.5.7-r0
Low	GO-2026-6091	stdlib@go1.24.5	1.25.13
Low	GO-2025-4008	stdlib@go1.24.5	1.24.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.6.3latest	today	v25.1.0	—	—
2.6.0	11 months ago	v25.1.0	1041163	2,451

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/nodeify/cosmos-node.svg)](https://charts.stackradar.io/charts/nodeify/cosmos-node)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.