pmm-ha-dependencies 1.0.0 Helm chart

Name: pmm-ha-dependencies Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

percona

Scored 14 Sept 2026

Kubernetes operators required for PMM HA deployment

Version 1.0.0 7 months agodeploys tag 0.25.4 0Artifact Hub

pmm-ha-dependencies 1.0.0 deploys 4 container images: altinity/clickhouse-operator, altinity/metrics-exporter, percona/percona-postgresql-operator and victoriametrics/operator. Across them, 299 findings — 1 critical, 0 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.5.1-3.el9, fixed in 1:3.5.1-7.el9_7.

Radar Score

2,4311012286

299 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
altinity/clickhouse-operator	0.25.4	00063	419
altinity/metrics-exporter	0.25.4	00063	419
percona/percona-postgresql-operator	2.8.0	1012110	1,260
victoriametrics/operator	v0.65.0	00050	333

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

142 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2026:1473	openssl@1:3.5.1-3.el9	1:3.5.1-7.el9_7
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.43.0	0.52.0
Medium	RHSA-2026:25239	openssl@1:3.5.1-3.el9	1:3.5.5-4.el9_8
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.76.0	1.79.3
Medium	RHSA-2026:20612	gnutls@3.8.3-9.el9	0:3.8.10-4.el9_8
Medium	RHSA-2026:8510	libarchive@3.5.3-6.el9_6	0:3.5.3-9.el9_7
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.43.0	0.52.0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.43.0	0.52.0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.43.0	0.52.0
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.5.0	0.5.1
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.43.0	0.52.0
Medium	RHSA-2026:28254	libxml2@2.9.13-12.el9_6	0:2.9.13-14.el9_8.1
Medium	RHSA-2026:22312	openssl@1:3.5.1-3.el9	1:3.5.5-3.el9_8
Low	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.38.0	1.41.0
Low	RHSA-2026:2786	glibc@2.34-231.el9_7.2	0:2.34-231.el9_7.10
Low	RHSA-2026:7668	nghttp2@1.43.0-6.el9	0:1.43.0-6.el9_7.1
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.43.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.43.0	0.52.0
Low	RHSA-2026:5080	libarchive@3.5.3-6.el9_6	0:3.5.3-7.el9_7
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.76.0	1.83.1
Low	RHSA-2025:21255	openssl@1:3.5.1-3.el9	1:3.5.1-4.el9_7
Low	RHSA-2026:55440	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.9
Low	RHSA-2026:55439	curl@7.76.1-34.el9	0:7.76.1-40.el9_8.5
Low	RHSA-2026:28253	libtasn1@4.16.0-9.el9	0:4.16.0-10.el9_8
Low	RHSA-2026:42089	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.2
Low	RHSA-2026:15971	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.2
Low	RHSA-2026:19361	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.1
Low	RHSA-2026:19218	openssl@1:3.5.1-3.el9	1:3.5.5-2.el9_8
Low	RHSA-2026:27744	openssl-fips-provider@3.0.7-8.el9	0:3.0.7-11.el9_8
Low	RHSA-2026:1350	curl@7.76.1-34.el9	0:7.76.1-35.el9_7.3
Low	RHSA-2026:52674	libarchive@3.5.3-6.el9_6	0:3.5.3-11.el9_8
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.43.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.43.0	0.52.0
Low	RHSA-2026:18599	p11-kit@0.25.3-3.el9_5	0:0.26.2-1.el9
Low	RHSA-2026:0936	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1
Low	GO-2026-4341	stdlib@go1.25.1	1.24.12
Low	RHSA-2026:19357	krb5@1.21.1-8.el9_6	0:1.21.1-10.el9_8
Low	RHSA-2026:39315	libsolv@0.7.24-3.el9	0:0.7.24-6.el9_8
Low	RHSA-2026:20597	glibc@2.34-231.el9_7.2	0:2.34-270.el9_8
Low	RHSA-2026:42952	glibc@2.34-231.el9_7.2	0:2.34-274.el9_8
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.24.0	1.43.0
Low	RHSA-2026:4188	gnutls@3.8.3-9.el9	0:3.8.3-10.el9_7
Low	GHSA-8q3c-rjr9-xxrp	github.com/VictoriaMetrics/VictoriaMetrics@v1.128.0	1.136.12
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.43.0	0.52.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.38.0	0.55.0
Low	RHSA-2026:64800	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.43.0	0.45.0
Low	RHSA-2026:58936	sqlite@3.34.1-9.el9_7	0:3.34.1-11.el9_8
Low	RHSA-2025:22660	systemd@252-55.el9_7.2	0:252-55.el9_7.7
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.76.0	1.83.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	7 months ago	0.25.4	1012286	2,431

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/percona/pmm-ha-dependencies.svg)](https://charts.stackradar.io/charts/percona/pmm-ha-dependencies)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.