StackRadar

krr-enforcer 0.3.5 Helm chart

robusta

Scored 14 Sept 2026

KRR enforcer - auto apply KRR recommendations

Version 0.3.5 9 months agoapp version 0.3.5 0Artifact Hub

krr-enforcer 0.3.5 deploys 2 container images: us-central1-docker.pkg.dev/genuine-flight-317411/devel/krr-enforcer and alpine/k8s. Across the 1 measured, 325 findings1 critical, 9 high 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.44.2-r0, fixed in 3.44.2-r2.

Radar Score

4,0381969246

325 findings over 1 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
us-central1-docker.pkg.dev/genuine-flight-317411/devel/krr-enforcer0.3.5unmeasured
alpine/k8s1.30.019692464,038

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

69 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGO-2024-2687stdlib@go1.21.11.21.9
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.17.00.52.0
MediumALPINE-CVE-2024-7264curl@8.5.0-r08.9.1-r0
MediumGHSA-f5f7-6478-qm6pk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.19.15
MediumALPINE-CVE-2024-5535openssl@3.1.4-r53.1.6-r0
MediumGHSA-wqv3-8cm6-h6wgk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.16.11
MediumGHSA-hq6q-c2x6-hmchk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.25.16
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.17.00.31.0
MediumGHSA-34jx-wx69-9x8vk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.11.9
MediumGHSA-q78c-gwqw-jcmck8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.24.17
MediumGHSA-33c5-9fx5-fvjmk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.16.13
MediumALPINE-CVE-2024-6197curl@8.5.0-r08.9.0-r0
MediumGHSA-27wf-5967-98gxk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.28.12
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.12.00.17.0
MediumGHSA-g42g-737j-qx6jk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.18.18
MediumALPINE-CVE-2024-6345py3-setuptools@68.2.2-r070.3.0-r0
MediumGHSA-cx63-2mw6-8hw5setuptools@69.5.170.0.0
MediumALPINE-CVE-2024-45492expat@2.6.2-r02.6.3-r0
MediumGHSA-38jv-5279-wg99urllib3@2.2.12.6.3
MediumALPINE-CVE-2024-4741openssl@3.1.4-r53.1.6-r0
MediumALPINE-CVE-2025-4517python3@3.11.9-r03.11.13-r0
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.49.01.79.3
MediumGHSA-j9wf-vvm6-4r9wk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9no fix listed
MediumALPINE-CVE-2024-45491expat@2.6.2-r02.6.3-r0
MediumPYSEC-2025-49setuptools@69.5.178.1.1
MediumALPINE-CVE-2024-7592python3@3.11.9-r03.11.10-r0
MediumALPINE-CVE-2024-6232python3@3.11.9-r03.11.10-r0
MediumGHSA-x6mj-w4jf-jmgwk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.15.12
MediumALPINE-CVE-2024-8088python3@3.11.9-r03.11.9-r1
MediumALPINE-CVE-2024-45490expat@2.6.2-r02.6.3-r0
MediumALPINE-CVE-2025-9230openssl@3.1.4-r53.1.8-r1
MediumALPINE-CVE-2024-32004git@2.43.0-r02.43.4-r0
MediumGHSA-cgcv-5272-97prk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.24.15
MediumALPINE-CVE-2025-48385git@2.43.0-r02.43.7-r0
MediumALPINE-CVE-2025-4138python3@3.11.9-r03.11.13-r0
MediumGO-2026-4887github.com/docker/docker@v20.10.24+incompatibleno fix listed
MediumALPINE-CVE-2025-59375expat@2.6.2-r02.7.2-r0
MediumALPINE-CVE-2024-8176expat@2.6.2-r02.7.0-r0
MediumALPINE-CVE-2024-9681curl@8.5.0-r08.11.0-r0
MediumGHSA-8r3f-844c-mc37google.golang.org/protobuf@v1.31.01.33.0
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.17.00.52.0
MediumGHSA-jp32-vmm6-3vf5k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.1.1
MediumALPINE-CVE-2025-0725curl@8.5.0-r08.12.0-r0
MediumALPINE-CVE-2024-32465git@2.43.0-r02.43.4-r0
MediumGHSA-jmrx-5g74-6v2fk8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b91.16.0-beta.1
MediumGHSA-2xpw-w6gg-jr37urllib3@2.2.12.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@2.2.12.6.0
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.17.00.52.0
MediumALPINE-CVE-2024-9143openssl@3.1.4-r53.1.7-r1
MediumALPINE-CVE-2024-4032python3@3.11.9-r03.11.10-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.5latest9 months ago0.3.519692464,038

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/robusta/krr-enforcer.svg)](https://charts.stackradar.io/charts/robusta/krr-enforcer)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.