kubescape-operator 0.0.3 Helm chart

Name: kubescape-operator Helm chart 0.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-kubescape-operator

Scored 16 Oct 2026

Kubescape in-cluster: the operator, the configuration scanner (ksserver), the image vulnerability scanner (kubevuln) and the storage API server that keeps the results as Kubernetes objects. Hardened by QuenchWorks: every component built from source on Wolfi, 0-CVE, cosign-signed and pinned by digest.

Version 0.0.3app version 0.2.172 (not verified against the render) 0Artifact Hub

kubescape-operator 0.0.3 deploys 5 container images: ghcr.io/quenchworks/images/kubescape-operator, ghcr.io/quenchworks/images/kubescape, ghcr.io/quenchworks/images/kubevuln, ghcr.io/quenchworks/images/kubescape-storage and 1 more. Across them, 179 findings — 1 critical, 0 high — 1 on CISA KEV. The highest contribution is GO-2026-4919 in github.com/aquasecurity/trivy v0.72.0, with no fix listed.

Radar Score

1,8481018160

179 findings over 5 of 5 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/kubescape-operator	digest-pinned	00334	366
ghcr.io/quenchworks/images/kubescape	digest-pinned	10228	378
ghcr.io/quenchworks/images/kubevuln	digest-pinned	00224	265
ghcr.io/quenchworks/images/kubescape-storage	digest-pinned	00325	291
ghcr.io/quenchworks/images/kubectl×2	digest-pinned	00849	548

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

80 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-6599	stdlib@go1.27.1	1.26.9
Low	GO-2026-6600	stdlib@go1.27.1	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6617	stdlib@go1.27.1	1.27.2
Low	GO-2026-6094	github.com/google/cel-go@v0.29.2	0.30.0
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GHSA-vp62-88p7-qqf5	github.com/moby/moby@v28.5.2+incompatible	no fix listed
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r6	2.44-r8
Low	GO-2026-5939	github.com/quay/claircore@v1.5.54	no fix listed
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r6	no fix listed
Low	CGA-484j-x24x-cpc9	kubernetes-1.37@1.37.1-r0	no fix listed
Low	GO-2025-3547	k8s.io/kubernetes@v1.37.1+dirty	no fix listed
Low	CGA-277p-vcvg-mmrw	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-3862-v47f-8qx7	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-6mf8-9rf9-jqwc	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-6rfr-jp65-jqrq	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-7crm-jg8v-hcmw	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-7rqw-r7ww-h5pc	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-84xc-6qp9-53q8	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-8p24-rg3m-6q67	helm-4@4.3.0-r0	no fix listed
Low	CGA-cmv4-xcrj-hvxq	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-fmf5-6rqm-vg97	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-m5hm-8jx9-rvx8	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-qvvv-7fmc-7vxv	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-rw59-v8cv-vgh9	helm-4@4.3.0-r0	no fix listed
Low	CGA-w8pf-x6mg-w88p	kubernetes-1.37@1.37.1-r0	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed
Low	GO-2026-6225	github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589	no fix listed
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r6	2.44-r8
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.9latest	—	0.2.181	10673	736
0.0.8	—	0.2.181	10673	736
0.0.7	—	0.2.172	10672	727
0.0.6	—	0.2.172	10671	718
0.0.3	—	0.2.172	1018160	1,848

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-kubescape-operator/kubescape-operator.svg)](https://charts.stackradar.io/charts/quench-kubescape-operator/kubescape-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.