StackRadar

kube-prometheus-stack 90.2.0 Helm chart

prometheus-communityOfficialVerified publisher

Scored 26 Sept 2026

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

Version 90.2.0 13 days agoapp version v0.93.1 1,236Artifact Hub

kube-prometheus-stack 90.2.0 deploys 6 container images: quay.io/prometheus/node-exporter, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 2 more. Across them, 116 findings — 0 critical, 0 high. The highest contribution is GHSA-8wv5-x4w7-5gww in github.com/apache/thrift v0.23.1-0.20260429145742-d2acd3c49e58, fixed in 0.24.0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

825008108

116 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
quay.io/prometheus/node-exporterv1.12.1-distroless0001280
quay.io/kiwigrid/k8s-sidecar×22.11.2000542
grafana/grafana13.2.1-distroless00461470
registry.k8s.io/kube-state-metrics/kube-state-metricsv2.20.000213102
quay.io/prometheus-operator/prometheus-operatorv0.93.100217131
ghcr.io/jkroepke/kube-webhook-certgen×21.8.800000

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

4 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-8wv5-x4w7-5gwwgithub.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e580.24.0
MediumGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.79.31.82.2
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.79.31.83.1
MediumGHSA-mh2q-q3fh-2475go.opentelemetry.io/otel@v1.40.01.41.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
91.5.3latesttodayv0.94.100694706
91.5.2yesterdayv0.94.100694706
91.5.12 days agov0.94.100694706
91.5.03 days agov0.94.000694706
91.4.110 days agov0.94.000694706
91.4.011 days agov0.94.000695714
90.2.013 days agov0.93.1008108825
90.1.114 days agov0.93.1008108825
90.0.019 days agov0.93.1008108825
89.2.221 days agov0.93.1008108825

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/prometheus-community/kube-prometheus-stack.svg)](https://charts.stackradar.io/charts/prometheus-community/kube-prometheus-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 26 Sept 2026 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.