grr 1.0.3 Helm chart

Name: grr Helm chart 1.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

osdfir-infrastructure

Scored 14 Sept 2026

A Helm chart for GRR/Fleetspeak Kubernetes deployments.

Version 1.0.3 2 years agodeploys tag v0.1 0Artifact Hub

grr 1.0.3 deploys 5 container images: library/grr-client, library/mariadb, ghcr.io/google/fleetspeak, library/busybox and 1 more. Across the 3 measured, 964 findings — 4 critical, 11 high — 1 on CISA KEV. The highest contribution is UBUNTU-CVE-2024-12084 in rsync 3.2.7-0ubuntu0.22.04.2, fixed in 3.2.7-0ubuntu0.22.04.3.

Radar Score

10,896411159788

964 findings over 3 of 5 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
library/grr-client	v0.1	—	unmeasured
library/mariadb	11.3.2	2459307	4,200
ghcr.io/google/fleetspeak×2	v0.1.17	27100481	6,696
library/busybox	1.36	0000	0
ghcr.io/google/grr×3	v3.4.7.5-release	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

602 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-0865	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u7
Low	DEBIAN-CVE-2025-66864	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-63074	openssl@3.0.13-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-1147	binutils@2.40-2	no fix listed
Low	GO-2023-1752	stdlib@go1.18.2	1.19.9
Low	DEBIAN-CVE-2025-14524	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2025-14831	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u7	no fix listed
Low	UBUNTU-CVE-2026-53789	rsync@3.2.7-0ubuntu0.22.04.2	no fix listed
Low	UBUNTU-CVE-2026-70454	rsync@3.2.7-0ubuntu0.22.04.2	no fix listed
Low	GO-2023-1705	stdlib@go1.18.2	1.19.8
Low	DEBIAN-CVE-2026-8328	python3.11@3.11.2-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-35414	openssh@1:9.2p1-2+deb12u3	1:9.2p1-2+deb12u10
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1	no fix listed
Low	GO-2023-1878	stdlib@go1.18.2	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.22.0	0.52.0
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-0672	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u7
Low	GO-2022-1039	stdlib@go1.18.2	1.18.7
Low	DEBIAN-CVE-2026-3442	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	GO-2024-2963	stdlib@go1.18.2	1.21.12
Low	GO-2023-1702	stdlib@go1.18.2	1.19.8
Low	UBUNTU-CVE-2026-40467	gawk@1:5.1.0-1ubuntu0.1	1:5.1.0-1ubuntu0.2
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.24.0	0.55.0
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u2	no fix listed
Low	GO-2022-0525	stdlib@go1.18.2	1.17.12
Low	GO-2022-0520	stdlib@go1.18.2	1.17.12
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	DEBIAN-CVE-2025-7546	binutils@2.40-2	no fix listed
Low	UBUNTU-CVE-2026-53786	rsync@3.2.7-0ubuntu0.22.04.2	no fix listed
Low	UBUNTU-CVE-2026-53792	rsync@3.2.7-0ubuntu0.22.04.2	no fix listed
Low	UBUNTU-CVE-2026-53784	rsync@3.2.7-0ubuntu0.22.04.2	no fix listed
Low	UBUNTU-CVE-2026-53802	rsync@3.2.7-0ubuntu0.22.04.2	no fix listed
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u7	2.36-9+deb12u10
Low	DEBIAN-CVE-2025-1176	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.22.0	0.45.0
Low	UBUNTU-CVE-2025-1352	elfutils@0.186-1build1	no fix listed
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	DEBIAN-CVE-2025-4598	systemd@252.26-1~deb12u2	252.38-1~deb12u1
Low	DSA-5759-1	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u3
Low	DEBIAN-CVE-2026-6846	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-58470	wget@1.21.3-1+b2	no fix listed
Low	GO-2023-2375	stdlib@go1.18.2	1.20.0
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-60001	openssh@1:9.2p1-2+deb12u3	no fix listed
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.24.0	0.38.0
Low	GO-2023-1569	stdlib@go1.18.2	1.19.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.3latest	2 years ago	v0.1	411159788	10,896

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/osdfir-infrastructure/grr.svg)](https://charts.stackradar.io/charts/osdfir-infrastructure/grr)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.