npre-essentials 0.1.60 Helm chart

Name: npre-essentials Helm chart 0.1.60: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

phntom

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.1.60 3 years agodeploys tag v1.5.0 0Artifact Hub

npre-essentials 0.1.60 deploys 22 container images: quay.io/prometheus/node-exporter, grafana/promtail, amazon/aws-cli, bitnami/minideb and 18 more. Across the 18 measured, 2,299 findings — 6 critical, 68 high — 14 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

26,8406683261,897

2,299 findings over 18 of 22 images measured

KEV ×14 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.5.0	0314121	1,429
grafana/promtail	2.7.0	0531181	2,390
amazon/aws-cli×2	2.2.38	0000	0
bitnami/minideb	buster	0000	0
phntom/chartmuseum	v0.15.2	1737184	2,760
k8s.gcr.io/autoscaling/cluster-autoscaler	v1.23.0	—	unmeasured
bitnami/external-dns	0.13.1-debian-11-r9	—	unmeasured
registry.k8s.io/ingress-nginx/controller	v1.5.1	2726125	2,079
library/busybox	1.31.1	0000	0
curlimages/curl	7.85.0	1362	405
quay.io/kiwigrid/k8s-sidecar×2	1.21.0	032425	906
grafana/grafana	9.3.1	0637198	2,837
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.7.0	0315127	1,486
quay.io/prometheus-operator/prometheus-operator	v0.61.1	0210118	1,226
phntom/oauth2-proxy	v7.3.4	0621134	1,877
quay.io/prometheuscommunity/elasticsearch-exporter	v1.5.0	00496	846
abutaha/aws-es-proxy	v1.1	1519139	2,029
bitnami/thanos×2	0.28.0-scratch-r1	—	unmeasured
phntom/kochi	1.1.3	1941167	2,963
grafana/loki	2.6.1	0728167	2,364
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2	v20220916-gd32f8c343	0213113	1,243
k8s.gcr.io/ingress-nginx/kube-webhook-certgen×2	v1.3.0	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

514 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
Low	GO-2024-2599	stdlib@go1.19.3	1.21.8
Low	GO-2022-1038	stdlib@go1.18.5	1.18.7
Low	GO-2024-3106	stdlib@go1.19.3	1.22.7
Low	GO-2023-1570	stdlib@go1.19.3	1.19.6
Low	DLA-4061-1	libtasn1-6@4.16.0-2	4.16.0-2+deb11u2
Low	GHSA-cvm3-pp2j-chr3	github.com/grafana/grafana@v9.3.1	9.3.15
Low	GO-2022-0531	stdlib@go1.15.5	1.17.11
Low	GO-2024-2600	stdlib@go1.19.3	1.21.8
Low	ALPINE-CVE-2023-42366	busybox@1.35.0-r17	1.35.0-r18
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.50.1	1.82.1
Low	GO-2024-2609	stdlib@go1.19.3	1.21.8
Low	GO-2024-2851	github.com/grafana/grafana@v9.3.1	no fix listed
Low	GO-2024-3107	stdlib@go1.19.3	1.22.7
Low	GO-2024-2856	github.com/grafana/grafana@v9.3.1	no fix listed
Low	GO-2023-1751	stdlib@go1.19.3	1.19.9
Low	GO-2023-1753	stdlib@go1.19.3	1.19.9
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.12	2.5.0
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.10.2	1.17.7
Low	GO-2025-3814	github.com/grafana/grafana@v9.3.1	no fix listed
Low	ALPINE-CVE-2023-52426	expat@2.4.9-r0	2.6.0-r0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
Low	GHSA-pwhc-rpq9-4c8w	github.com/containerd/containerd@v1.6.6	1.7.29
Low	GHSA-pwcw-6f5g-gxf8	helm.sh/helm/v3@v3.9.4	3.11.1
Low	GHSA-f5pg-7wfw-84q9	github.com/aws/aws-sdk-go@v1.30.4	1.34.0
Low	GHSA-65pc-fj4g-8rjx	idna@3.4	3.15
Low	GHSA-259w-8hf6-59c2	github.com/containerd/containerd@v1.6.6	1.6.18
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v20.10.17+incompatible	no fix listed
Low	GO-2023-2041	stdlib@go1.19.3	1.20.8
Low	GHSA-9wx4-h78v-vm56	requests@2.28.1	2.32.0
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.40.2	0.311.2-0.20260410083055-07c6232d159b
Low	GO-2023-2043	stdlib@go1.19.3	1.20.8
Low	GO-2022-0515	stdlib@go1.15.5	1.17.12
Low	GO-2023-2186	stdlib@go1.19.3	1.20.11
Low	GO-2024-2848	github.com/grafana/grafana@v9.3.1	no fix listed
Low	DLA-4490-1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u5
Low	GO-2024-3333	golang.org/x/net@v0.2.0	0.33.0
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.103.0	0.144.0
Low	GHSA-389r-gv7p-r3rp	github.com/go-git/go-git/v5@v5.4.2	5.19.0
Low	GHSA-8cfg-vx93-jvxw	k8s.io/client-go@v0.0.0-20180806134042-1f13a808da65	0.17.16
Low	GO-2024-3105	stdlib@go1.19.3	1.22.7
Low	GO-2022-1095	stdlib@go1.18.5	1.18.8
Low	GO-2024-2867	github.com/grafana/grafana@v9.3.1	no fix listed
Low	GHSA-m6hq-p25p-ffr2	github.com/containerd/containerd@v1.6.6	1.7.29
Low	GO-2023-1621	stdlib@go1.19.3	1.19.7
Low	GO-2026-4981	stdlib@go1.19.3	1.25.10
Low	GO-2025-3563	stdlib@go1.19.3	1.23.8
Low	GO-2026-4977	stdlib@go1.19.3	1.25.10
Low	GO-2024-2610	stdlib@go1.19.3	1.21.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.60latest	3 years ago	v1.5.0	6683261,897	26,840

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/phntom/npre-essentials.svg)](https://charts.stackradar.io/charts/phntom/npre-essentials)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.