kubecost Helm chart

Name: kubecost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

radar-base

Scored 14 Sept 2026

A Helm chart for Kubecost cost analyzer. This chart is an overlay for the official cost-analyzer chart with custom resource limits configured for RADAR-K8s environments.

Latest 1.0.0 21 days agodeploys tag v0.17.6 0Artifact Hub

kubecost 1.0.0 deploys 7 container images: gcr.io/kubecost1/kubecost-network-costs, gcr.io/kubecost1/cost-model, gcr.io/kubecost1/frontend, gcr.io/kubecost1/kubecost-modeling and 3 more. Across them, 834 findings — 6 critical, 7 high — 1 on CISA KEV. The highest contribution is CGA-7rrv-fg72-6q59 in nginx-mainline 1.27.4-r0, fixed in 1.31.0-r0.

Radar Score

9,35567144676

834 findings over 7 of 7 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
gcr.io/kubecost1/kubecost-network-costs	v0.17.6	011951	865
gcr.io/kubecost1/cost-model×3	prod-2.6.3	2017157	1,795
gcr.io/kubecost1/frontend	prod-2.6.3	132548	1,214
gcr.io/kubecost1/kubecost-modeling	v0.1.22	2129119	1,943
ghcr.io/kiwigrid/k8s-sidecar	1.29.1	111838	791
grafana/grafana	11.4.0	0126160	1,800
quay.io/prometheus/prometheus	v3.2.0	0010103	947

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

430 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-5030	golang.org/x/net@v0.34.0	0.55.0
Low	GHSA-58qw-9mgm-455v	pip@24.3.1	26.1
Low	GO-2026-4602	stdlib@go1.23.4	1.25.8
Low	GHSA-8396-jffm-qx4w	github.com/openfga/openfga@v1.5.4	1.16.0
Low	RHSA-2026:66403	coreutils@8.32-36.el9	0:8.32-41.el9_8.1
Low	RHSA-2025:12748	glibc@2.34-125.el9_5.1	0:2.34-168.el9_6.23
Low	CGA-2pc4-p4g5-h72v	busybox@1.36.1-r11	1.37.0-r49
Low	CGA-499w-m9q3-62x4	busybox@1.36.1-r11	1.37.0-r58
Low	GHSA-597g-3phw-6986	virtualenv@20.29.2	20.36.1
Low	ALPINE-CVE-2025-69418	openssl@3.3.2-r4	3.3.6-r0
Low	GO-2026-5024	golang.org/x/sys@v0.29.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.20.0	0.40.0
Low	CGA-cvw6-9pj6-fx5j	openssl@3.3.2-r0	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.3.2-r0	no fix listed
Low	GO-2024-3344	filippo.io/age@v1.1.1	1.2.1
Low	GO-2026-4760	github.com/russellhaering/gosaml2@v0.9.1	0.11.0
Low	GO-2026-4764	github.com/russellhaering/gosaml2@v0.9.1	0.11.0
Low	GO-2026-5841	github.com/klauspost/compress@v1.17.11	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.32.0	no fix listed
Low	GO-2026-6016	github.com/oapi-codegen/oapi-codegen/v2@v2.3.0	2.7.1
Low	GO-2026-6061	google.golang.org/grpc@v1.69.4	1.82.1
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r9	1.37.0-r14
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v27.4.1+incompatible	28.0.0
Low	RHSA-2026:39317	libxml2@2.9.13-6.el9_5.1	0:2.9.13-14.el9_8.2
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v5@v5.5.5	5.9.2
Low	GHSA-73h3-mf4w-8647	poetry@2.0.1	2.3.4
Low	GHSA-6vgw-5pg2-w6jp	pip@24.3.1	26.0
Low	GHSA-4grg-w6v8-c28g	flask@3.1.0	3.1.1
None	GHSA-rjwr-m7qx-3fjr	github.com/oapi-codegen/oapi-codegen/v2@v2.3.0	2.7.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	21 days ago	v0.17.6	67144676	9,355

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/radar-base/kubecost.svg)](https://charts.stackradar.io/charts/radar-base/kubecost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.