vm-standalone Helm chart

Name: vm-standalone Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ot-container-kit

Scored 14 Sept 2026

A Helm chart for Victoria Metrics K8s stack standalone setup

Latest 0.0.4 4 months agoapp version 0.69.0 0Artifact Hub

vm-standalone 0.0.4 deploys 6 container images: quay.io/opstree/node-exporter, quay.io/opstree/kube-state-metrics, quay.io/opstree/victoriametrics-operator, library/busybox and 2 more. Across them, 339 findings — 0 critical, 0 high. The highest contribution is GHSA-x744-4wpc-v9h2 in github.com/moby/moby v28.0.1+incompatible, fixed in 29.3.1.

Radar Score

3,3780052287

339 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/opstree/node-exporter	1.11.1-alpine3.23	00543	427
quay.io/opstree/kube-state-metrics	2.18.0-debian13	00549	472
quay.io/opstree/victoriametrics-operator	v0.69.0	00039	273
library/busybox	1.37.0	0000	0
quay.io/opstree/k8s-sidecar×2	2.7.3	001741	732
quay.io/opstree/grafana	12.4.3	0025115	1,474

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

151 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u2	no fix listed
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.303.1	0.311.3
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.3	0.6.4
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.3	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.3	0.6.4
Low	DEBIAN-CVE-2026-4437	glibc@2.41-12+deb13u2	2.41-12+deb13u3
Low	GHSA-hcxc-wf8j-23hv	github.com/openfga/openfga@v1.11.3	1.18.0
Low	GHSA-pxq6-2prw-chj9	github.com/moby/moby@v28.0.1+incompatible	no fix listed
Low	DEBIAN-CVE-2026-42767	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	GHSA-6xff-cpcq-vpw2	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	1.5.1-0.20260303204923-b13f74291d48
Low	GHSA-m2h6-j472-rp4c	cryptography@46.0.7	49.0.0
Low	DEBIAN-CVE-2026-63074	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u2	no fix listed
Low	GHSA-g6cj-pr64-35w5	cryptography@46.0.7	50.0.0
Low	GHSA-8q3c-rjr9-xxrp	github.com/VictoriaMetrics/VictoriaMetrics@v1.140.0	1.146.0
Low	DEBIAN-CVE-2026-34181	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.50.0	0.52.0
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u2	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.53.0	0.55.0
Low	PYSEC-2026-3721	pip@26.1.1	26.2
Low	GHSA-68m9-983m-f3v5	github.com/openfga/openfga@v1.11.3	1.14.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.80.0	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.80.0	1.82.1
Low	GHSA-ffqx-q65f-36jf	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.10.3
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.17.6	1.17.7
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.50.0	0.52.0
Low	GHSA-497x-rrr9-68jp	github.com/grafana/loki/v3@v3.2.1	3.6.4
Low	GHSA-x86f-5xw2-fm2r	github.com/moby/moby@v28.0.1+incompatible	no fix listed
Low	DEBIAN-CVE-2026-42769	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.303.1	0.311.2-0.20260410083055-07c6232d159b
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.133.0	0.144.0
Low	GHSA-cf98-j28v-49v6	github.com/openfga/openfga@v1.11.3	1.18.0
Low	GO-2026-4981	stdlib@go1.26.2	1.25.10
Low	GO-2026-4977	stdlib@go1.26.2	1.25.10
Low	GO-2026-4986	stdlib@go1.26.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.52.0	0.53.0
Low	GO-2026-4918	stdlib@go1.26.2	1.25.10
Low	DEBIAN-CVE-2026-4438	glibc@2.41-12+deb13u2	2.41-12+deb13u3
Low	GHSA-h6c8-cww8-35hf	github.com/openfga/openfga@v1.11.3	1.13.1
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.303.1	0.311.3
Low	GO-2026-5026	stdlib@go1.26.2	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.53.0	0.55.0
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.80.0	1.82.2
Low	GHSA-537c-gmf6-5ccf	cryptography@46.0.7	48.0.1
Low	DEBIAN-CVE-2026-45446	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	GHSA-rg2x-37c3-w2rh	github.com/moby/moby@v28.0.1+incompatible	no fix listed
Low	GO-2026-5037	stdlib@go1.26.2	1.25.11
Low	GO-2026-4971	stdlib@go1.26.2	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.4latest	4 months ago	0.69.0	0052287	3,378

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ot-container-kit/vm-standalone.svg)](https://charts.stackradar.io/charts/ot-container-kit/vm-standalone)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.