kube-prometheus-stack 91.5.1 Helm chart

Name: kube-prometheus-stack Helm chart 91.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

prometheus-community

Scored 26 Sept 2026

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

Version 91.5.1 2 days agoapp version v0.94.1 1,236Artifact Hub

kube-prometheus-stack 91.5.1 deploys 6 container images: quay.io/prometheus/node-exporter, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 2 more. Across them, 100 findings — 0 critical, 0 high. The highest contribution is GHSA-8wv5-x4w7-5gww in github.com/apache/thrift v0.23.1-0.20260429145742-d2acd3c49e58, fixed in 0.24.0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

70600694

100 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.12.1-distroless	00012	80
quay.io/kiwigrid/k8s-sidecar×2	2.11.2	0005	42
grafana/grafana	13.2.2-distroless	00460	462
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.20.0	00213	102
quay.io/prometheus-operator/prometheus-operator	v0.94.1	0004	20
ghcr.io/jkroepke/kube-webhook-certgen×2	1.8.8	0000	0

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

67 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5027	golang.org/x/net@v0.51.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.51.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.51.0	0.55.0
Low	ALPINE-CVE-2026-27456	util-linux@2.41-r9	2.41.6-r0
Low	GO-2026-4869	stdlib@go1.25.7	1.25.9
Low	GO-2026-4970	stdlib@go1.26.4	1.25.12
Low	GO-2026-4864	stdlib@go1.25.7	1.25.9
Low	GO-2026-5024	golang.org/x/sys@v0.41.0	0.44.0
Low	GO-2026-4602	stdlib@go1.25.7	1.25.8
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.2	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.55.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	GO-2026-6094	github.com/google/cel-go@v0.26.0	0.30.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
91.5.3latest	today	v0.94.1	00694	706
91.5.2	yesterday	v0.94.1	00694	706
91.5.1	2 days ago	v0.94.1	00694	706
91.5.0	3 days ago	v0.94.0	00694	706
91.4.1	10 days ago	v0.94.0	00694	706
91.4.0	11 days ago	v0.94.0	00695	714
90.2.0	13 days ago	v0.93.1	008108	825
90.1.1	14 days ago	v0.93.1	008108	825
90.0.0	19 days ago	v0.93.1	008108	825
89.2.2	21 days ago	v0.93.1	008108	825

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/prometheus-community/kube-prometheus-stack.svg)](https://charts.stackradar.io/charts/prometheus-community/kube-prometheus-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.