pmm-ha-dependencies 1.2.0 Helm chart

Name: pmm-ha-dependencies Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

percona

Scored 23 Oct 2026

Kubernetes operators required for PMM HA deployment

Version 1.2.0 todaydeploys tag 0.27.3 0Artifact Hub

pmm-ha-dependencies 1.2.0 deploys 5 container images: altinity/clickhouse-operator, altinity/metrics-exporter, percona/percona-postgresql-operator, victoriametrics/operator and 1 more. Across them, 279 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.32.0-0; rendered for Kubernetes 1.32.0.

Radar Score

3,3790057222

279 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
altinity/clickhouse-operator	0.27.3	00426	356
altinity/metrics-exporter	0.27.3	00426	356
percona/percona-postgresql-operator	3.1.0	00529	380
victoriametrics/operator	v0.74.1	00633	438
alpine/kubectl	1.35.0	0038108	1,849

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

131 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-75803	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6608	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6607	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-8286	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6609	stdlib@go1.26.5	1.26.9
Low	RHSA-2026:76918	openssl@1:3.5.5-6.el10_2	1:3.5.8-2.el10_2
Low	ALPINE-CVE-2026-80230	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-4946	stdlib@go1.25.5	1.25.9
Low	ALPINE-CVE-2026-6253	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-6276	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-6629	golang.org/x/text@v0.39.0	0.41.0
Low	ALPINE-CVE-2026-2673	openssl@3.5.5-r0	3.5.6-r0
Low	GO-2026-6613	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6605	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-3784	curl@8.17.0-r1	8.19.0-r0
Low	GO-2026-6610	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6610	stdlib@go1.26.5	1.26.9
Low	RHSA-2026:76734	rust-rpm-sequoia@1.10.1.1-2.el10	0:1.10.2.1-1.el10_2
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.47.0	0.55.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2025-14819	curl@8.17.0-r1	8.18.0-r0
Low	GO-2026-4970	stdlib@go1.25.5	1.25.12
Low	ALPINE-CVE-2026-8458	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2025-14524	curl@8.17.0-r1	8.18.0-r0
Low	RHSA-2026:76781	glibc@2.39-128.el10_2	0:2.39-142.el10_2
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	GO-2026-4980	stdlib@go1.25.5	1.25.10
Low	GO-2026-4603	stdlib@go1.25.5	1.25.8
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.82.1	1.83.1
Low	ALPINE-CVE-2026-6429	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-4864	stdlib@go1.25.5	1.25.9
Low	GO-2026-4982	stdlib@go1.25.5	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.47.0	0.55.0
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	RHSA-2026:84753	glibc@2.39-128.el10_2	0:2.39-145.el10_2
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	RHSA-2026:73429	gawk@5.3.0-6.el10	0:5.3.0-6.el10_2.1
Low	GO-2026-4865	stdlib@go1.25.5	1.25.9
Low	GO-2026-4976	stdlib@go1.25.5	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	today	0.27.3	0057222	3,379
1.0.0	8 months ago	0.25.4	1055338	4,567

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/percona/pmm-ha-dependencies.svg)](https://charts.stackradar.io/charts/percona/pmm-ha-dependencies)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.