prometheus 29.36.0 Helm chart

Name: prometheus Helm chart 29.36.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

prometheus-community

Scored 9 Oct 2026

Prometheus is a monitoring system and time series database.

Version 29.36.0 yesterdayapp version v3.15.0 555Artifact Hub

prometheus 29.36.0 deploys 6 container images: quay.io/prometheus/node-exporter, registry.k8s.io/kube-state-metrics/kube-state-metrics, quay.io/prometheus/pushgateway, quay.io/prometheus-operator/prometheus-config-reloader and 2 more. Across them, 169 findings — 0 critical, 0 high. The highest contribution is GO-2026-5026 in stdlib go1.26.3, fixed in 1.25.13. Chart.yaml declares kubeVersion >=1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

1,056006163

169 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.12.1	00129	221
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.20.0	00229	185
quay.io/prometheus/pushgateway	v1.11.3	00136	302
quay.io/prometheus-operator/prometheus-config-reloader×2	v0.94.1	00021	101
quay.io/prometheus/prometheus	v3.15.0	00123	120
quay.io/prometheus/alertmanager	v0.34.1	00125	127

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

48 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	GO-2026-5942	stdlib@go1.26.3	1.26.6
Low	GO-2026-5037	stdlib@go1.26.3	1.25.11
Low	GO-2026-5972	stdlib@go1.26.3	1.25.13
Low	GO-2026-6088	stdlib@go1.26.3	1.25.13
Low	GO-2026-6089	stdlib@go1.26.3	1.25.13
Low	GO-2026-6090	stdlib@go1.26.3	1.25.13
Low	GO-2026-5038	stdlib@go1.26.3	1.25.11
Low	GO-2026-6218	stdlib@go1.26.3	1.25.13
Low	GO-2026-6355	golang.org/x/crypto@v0.55.0	0.56.0
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.55.0	0.56.0
Low	GO-2026-4970	stdlib@go1.26.3	1.25.12
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.0.0-20260925072538-5241a27fe3c6+dirty	0.311.2-0.20260410083055-07c6232d159b
Low	GO-2026-6091	stdlib@go1.26.3	1.25.13
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.79.3	1.82.1
Low	GO-2026-5039	stdlib@go1.26.3	1.25.11
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-5856	stdlib@go1.26.3	1.25.12
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.0.0-20260925072538-5241a27fe3c6+dirty	0.311.3
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.26.0	0.29.0
Low	GO-2026-5932	golang.org/x/crypto@v0.56.0	no fix listed
Low	GO-2026-6599	stdlib@go1.27.1	1.26.9
Low	GO-2026-6600	stdlib@go1.27.1	1.26.9
Low	GO-2026-6603	stdlib@go1.27.1	1.27.2
Low	GO-2026-6603	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6604	stdlib@go1.27.1	1.26.9
Low	GO-2026-6605	stdlib@go1.27.1	1.26.9
Low	GO-2026-6607	stdlib@go1.27.1	1.26.9
Low	GO-2026-6608	stdlib@go1.27.1	1.26.9
Low	GO-2026-6609	stdlib@go1.27.1	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6610	stdlib@go1.27.1	1.27.2
Low	GO-2026-6611	stdlib@go1.27.1	1.27.2
Low	GO-2026-6611	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6612	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6612	stdlib@go1.27.1	1.27.2
Low	GO-2026-6613	stdlib@go1.27.1	1.26.9
Low	GO-2026-6617	stdlib@go1.27.1	1.27.2
Low	GO-2026-6617	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
29.36.1latest	today	v3.15.0	005146	830
29.36.0	yesterday	v3.15.0	006163	1,056
29.35.0	11 days ago	v3.15.0	006163	1,056
29.33.1	13 days ago	v3.15.0	006163	1,056
29.33.0	16 days ago	v3.14.0	008171	1,145
29.31.1	20 days ago	v3.14.0	008171	1,145
29.30.1	21 days ago	v3.14.0	008171	1,145
29.30.0	24 days ago	v3.14.0	009175	1,202
29.29.0	26 days ago	v3.14.0	009175	1,202
29.28.1	27 days ago	v3.14.0	009175	1,202
29.28.0	28 days ago	v3.14.0	009175	1,202
29.27.2	1 month ago	v3.14.0	0010183	1,322
29.27.1	1 month ago	v3.14.0	0010183	1,322

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/prometheus-community/prometheus.svg)](https://charts.stackradar.io/charts/prometheus-community/prometheus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.