pmm-ha-dependencies 1.2.0 Helm chart

Name: pmm-ha-dependencies Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

percona

Scored 23 Oct 2026

Kubernetes operators required for PMM HA deployment

Version 1.2.0 yesterdaydeploys tag 0.27.3 0Artifact Hub

pmm-ha-dependencies 1.2.0 deploys 5 container images: altinity/clickhouse-operator, altinity/metrics-exporter, percona/percona-postgresql-operator, victoriametrics/operator and 1 more. Across them, 279 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.32.0-0; rendered for Kubernetes 1.32.0.

Radar Score

3,3790057222

279 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
altinity/clickhouse-operator	0.27.3	00426	356
altinity/metrics-exporter	0.27.3	00426	356
percona/percona-postgresql-operator	3.1.0	00529	380
victoriametrics/operator	v0.74.1	00633	438
alpine/kubectl	1.35.0	0038108	1,849

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

131 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5039	stdlib@go1.25.5	1.25.11
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-5856	stdlib@go1.25.5	1.25.12
Low	GO-2026-5027	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	GO-2026-4340	stdlib@go1.25.5	1.24.12
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-6599	stdlib@go1.26.5	1.26.9
Low	GO-2026-6600	stdlib@go1.26.5	1.26.9
Low	RHSA-2026:67886	coreutils@9.5-8.el10_2	0:9.5-8.el10_2.1
Low	ALPINE-CVE-2026-42768	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-42769	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	GO-2026-4869	stdlib@go1.25.5	1.25.9
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	RHSA-2026:69553	libarchive@3.7.7-10.el10_2	0:3.7.7-11.el10_2
Low	GO-2025-3547	k8s.io/kubernetes@v1.35.0	no fix listed
Low	GO-2026-6809	stdlib@go1.26.5	1.26.10
Low	GO-2026-5932	golang.org/x/crypto@v0.56.0	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.38.0	0.44.0
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-4602	stdlib@go1.25.5	1.25.8
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.43.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	0.27.3	0057222	3,379
1.0.0	8 months ago	0.25.4	1055338	4,567

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/percona/pmm-ha-dependencies.svg)](https://charts.stackradar.io/charts/percona/pmm-ha-dependencies)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.