kubescape-operator 0.0.3 Helm chart

Name: kubescape-operator Helm chart 0.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-kubescape-operator

Scored 16 Oct 2026

Kubescape in-cluster: the operator, the configuration scanner (ksserver), the image vulnerability scanner (kubevuln) and the storage API server that keeps the results as Kubernetes objects. Hardened by QuenchWorks: every component built from source on Wolfi, 0-CVE, cosign-signed and pinned by digest.

Version 0.0.3app version 0.2.172 (not verified against the render) 0Artifact Hub

kubescape-operator 0.0.3 deploys 5 container images: ghcr.io/quenchworks/images/kubescape-operator, ghcr.io/quenchworks/images/kubescape, ghcr.io/quenchworks/images/kubevuln, ghcr.io/quenchworks/images/kubescape-storage and 1 more. Across them, 179 findings — 1 critical, 0 high — 1 on CISA KEV. The highest contribution is GO-2026-4919 in github.com/aquasecurity/trivy v0.72.0, with no fix listed.

Radar Score

1,8481018160

179 findings over 5 of 5 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/kubescape-operator	digest-pinned	00334	366
ghcr.io/quenchworks/images/kubescape	digest-pinned	10228	378
ghcr.io/quenchworks/images/kubevuln	digest-pinned	00224	265
ghcr.io/quenchworks/images/kubescape-storage	digest-pinned	00325	291
ghcr.io/quenchworks/images/kubectl×2	digest-pinned	00849	548

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

80 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GO-2026-4919KEV	github.com/aquasecurity/trivy@v0.72.0	no fix listed
Medium	CGA-3vcm-8x8j-vfq4	kubernetes-1.37@1.37.1-r0	no fix listed
Medium	CGA-cq8w-gh2q-r887	kubernetes-1.37@1.37.1-r0	no fix listed
Medium	CGA-54xr-85g7-v6c7	kubernetes-1.37@1.37.1-r0	no fix listed
Medium	CGA-4jjx-m8gf-273m	kubernetes-1.37@1.37.1-r0	no fix listed
Medium	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.5	3.5.33
Medium	CGA-52wv-3w8x-88q8	kubernetes-1.37@1.37.1-r0	1.37.1-r2
Medium	CGA-rp37-mxv6-g5fj	helm-4@4.3.0-r0	4.3.0-r2
Medium	GO-2026-6612	stdlib@go1.27.1	1.27.2
Medium	GO-2026-6612	golang.org/x/net@v0.59.0	0.60.0
Low	CGA-9mpv-qcf2-fr4c	kubernetes-1.37@1.37.1-r0	1.37.1-r2
Low	CGA-hmpr-chf9-7j4f	helm-4@4.3.0-r0	4.3.0-r2
Low	GO-2026-6603	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6603	stdlib@go1.27.1	1.27.2
Low	CGA-g6hf-4469-c7p8	helm-4@4.3.0-r0	4.3.0-r2
Low	CGA-jxch-2x88-v4q3	kubernetes-1.37@1.37.1-r0	1.37.1-r2
Low	GO-2026-6611	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6611	stdlib@go1.27.1	1.27.2
Low	GO-2026-5064	github.com/containerd/containerd@v1.7.36	no fix listed
Low	GO-2025-3521	k8s.io/kubernetes@v1.37.1+dirty	no fix listed
Low	GO-2026-6608	stdlib@go1.27.1	1.26.9
Low	GO-2026-6607	stdlib@go1.27.1	1.26.9
Low	GHSA-pxq6-2prw-chj9	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-6609	stdlib@go1.27.1	1.26.9
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.4	1.18.7
Low	GO-2026-6613	stdlib@go1.27.1	1.26.9
Low	GO-2026-6605	stdlib@go1.27.1	1.26.9
Low	CGA-8m3g-7799-mp4m	kubernetes-1.37@1.37.1-r0	1.37.1-r2
Low	CGA-8vqq-r2ff-395m	helm-4@4.3.0-r0	4.3.0-r2
Low	GO-2026-6610	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6610	stdlib@go1.27.1	1.27.2
Low	GHSA-x744-4wpc-v9h2	github.com/moby/moby@v28.5.2+incompatible	29.3.1
Low	GO-2026-4887	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-5622	github.com/containerd/containerd@v1.7.36	no fix listed
Low	GO-2026-6604	stdlib@go1.27.1	1.26.9
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GHSA-x86f-5xw2-fm2r	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	CGA-jqfv-2763-m3gw	kubernetes-1.37@1.37.1-r0	no fix listed
Low	GHSA-rwvp-r38j-9rgg	github.com/nwaples/rardecode@v1.1.3	no fix listed
Low	GO-2026-5338	github.com/containerd/containerd@v1.7.36	no fix listed
Low	CGA-fv7m-5pp8-x296	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-5ff5-5vw4-4gx8	kubernetes-1.37@1.37.1-r0	no fix listed
Low	GHSA-rg2x-37c3-w2rh	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GHSA-rg2x-37c3-w2rh	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	GO-2026-6596	github.com/cilium/cilium@v1.19.5	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-4653-rw6m-872g	helm-4@4.3.0-r0	4.3.0-r2
Low	CGA-4h9w-grf4-6jpp	kubernetes-1.37@1.37.1-r0	1.37.1-r2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.9latest	—	0.2.181	10673	736
0.0.8	—	0.2.181	10673	736
0.0.7	—	0.2.172	10672	727
0.0.6	—	0.2.172	10671	718
0.0.3	—	0.2.172	1018160	1,848

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-kubescape-operator/kubescape-operator.svg)](https://charts.stackradar.io/charts/quench-kubescape-operator/kubescape-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.