devtron-enterprise 48.0.0 Helm chart

Name: devtron-enterprise Helm chart 48.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

romholdings

Scored 14 Sept 2026

Chart to configure and install Devtron Enterprise Stack. Devtron is a Kubernetes Orchestration system.

Version 48.0.0 1 month agodeploys tag v1.4.1 0Artifact Hub

devtron-enterprise 48.0.0 deploys 28 container images: quay.io/devtron/bats, quay.io/devtron/nats-box, quay.io/devtron/image-scanner, quay.io/devtron/casbin and 23 more. Across the 27 measured, 6,002 findings — 22 critical, 104 high — 13 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.20, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

68,240221049254,945

6,002 findings over 27 of 28 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

28 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/bats	v1.4.1	0691	522
quay.io/devtron/nats-box	latest	0622140	1,963
quay.io/devtron/image-scanner	94237c18-109-39420	0532216	2,658
quay.io/devtron/casbin	172ef62b-9450794d-464-39422	0013186	1,675
quay.io/devtron/dashboard	0d8f6cf4-60e17132-931-39393	00526	327
quay.io/devtron/authenticator	e414faff-393-13273	21139157	2,967
quay.io/devtron/dex	v2.30.2	0938189	2,989
quay.io/devtron/inception	7beef376-948-31378	417170372	8,442
quay.io/devtron/kubelink	94237c18-314-39417	0018214	2,011
quay.io/devtron/kubewatch	09867a9c-419-39288	0115114	1,234
quay.io/devtron/lens×2	3b3d6d0e-333-39292	011581	965
quay.io/devtron/notifier	9804331c-372-39294	13116811	9,567
quay.io/devtron/silver-surfer	e3b9a2f6-1191-38789	018106	1,053
quay.io/devtron/git-sensor×3	94237c18-950-39418	011696	1,099
quay.io/devtron/nats	2.9.3-alpine	0414109	1,426
quay.io/devtron/nats-server-config-reloader	0.6.2	005119	1,122
quay.io/devtron/prometheus-nats-exporter	0.9.0	0118143	1,667
quay.io/devtron/postgres×2	14.9	0351369	4,363
quay.io/devtron/postgres_exporter	v0.10.1	0322147	1,874
quay.io/devtron/timescaledb-ha	pg18	—	not yet scanned
quay.io/devtron/kubectl×3	latest	2965229	3,948
quay.io/devtron/chart-sync×2	94237c18-1021-39419	0018213	2,007
quay.io/devtron/k8s-utils	tutum-curl	1362	405
quay.io/devtron/devtron×4	9450794d-930-39415	0023281	2,607
quay.io/devtron/migrator×5	v4.16.2	0629132	1,977
quay.io/devtron/devtron-utils	dup-chart-repo-v1.1.0	1488531	6,791
quay.io/devtron/devtron-utils	geni-v1.1.4	02511	311
quay.io/devtron/cost-sync	172ef62b-1159-39429	00563	572

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,863 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-23c5-xmqv-rm74	minimatch@10.0.3	10.2.3
Low	DEBIAN-CVE-2026-6479	postgresql-15@15.14-0+deb12u1	15.18-0+deb12u1
Low	GO-2021-0319	stdlib@go1.17.6	1.16.14
Low	UBUNTU-CVE-2023-47039	perl@5.22.1-9ubuntu0.9	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.12	1.1.17
Low	UBUNTU-CVE-2025-15281	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.7
Low	DEBIAN-CVE-2026-25971	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u9
Low	GHSA-4vrq-3vrq-g6gg	github.com/moby/buildkit@v0.11.6	0.28.1
Low	UBUNTU-CVE-2025-6297	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.5
Low	UBUNTU-CVE-2019-1563	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.fips.4.16.1
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	no fix listed
Low	GHSA-wcpc-wj8m-hjx6	protobufjs@7.5.3	7.6.1
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2024-12243	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.3
Low	GHSA-73rr-hh4g-fpgx	diff@8.0.2	8.0.3
Low	UBUNTU-CVE-2025-32989	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.4
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.13.0
Low	UBUNTU-CVE-2022-41916	heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1	1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2
Low	DEBIAN-CVE-2026-6464	postgresql-15@15.14-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2026-24485	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u7
Low	GHSA-2qjp-425j-52j9	github.com/containerd/containerd@v1.6.6	1.6.12
Low	UBUNTU-CVE-2026-9538	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
Low	GO-2022-0493	stdlib@go1.17.6	1.17.10
Low	DEBIAN-CVE-2026-23952	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u6
Low	DEBIAN-CVE-2026-58050	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GHSA-mcj4-mphf-j9ff	github.com/aquasecurity/trivy@v0.46.1	0.71.1
Low	DEBIAN-CVE-2020-15719	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2026-46520	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2026-60000	openssh@1:9.2p1-2+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-86421	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	no fix listed
Low	GHSA-66ff-xgx4-vchm	protobufjs@7.5.3	7.5.6
Low	UBUNTU-CVE-2025-6395	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.4
Low	DEBIAN-CVE-2026-56208	aom@3.6.0-1+deb12u2	3.6.0-1+deb12u3
Low	DEBIAN-CVE-2026-25988	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u7
Low	DEBIAN-CVE-2026-0990	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6
Low	UBUNTU-CVE-2025-24528	krb5@1.13.2+dfsg-5ubuntu2.2	no fix listed
Low	DEBIAN-CVE-2026-66034	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	UBUNTU-CVE-2016-2779	util-linux@2.27.1-6ubuntu3.10	no fix listed
Low	DEBIAN-CVE-2026-33900	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u9
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.1	7.5.18
Low	GO-2021-0317	stdlib@go1.17.6	1.16.14
Low	DEBIAN-CVE-2026-25798	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u7
Low	DEBIAN-CVE-2025-7458	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	GHSA-35c7-w35f-xwgh	k8s.io/kubernetes@v1.20.4	1.21.0
Low	DEBIAN-CVE-2025-15661	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GHSA-mmfr-pmjx-hw9w	github.com/getkin/kin-openapi@v0.67.0	0.141.0
Low	DEBIAN-CVE-2026-14668	postgresql-15@15.14-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2026-28693	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u8
Low	GO-2023-2185	stdlib@go1.17.6	1.20.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
48.0.0latest	1 month ago	v1.4.1	221049254,945	68,240

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/romholdings/devtron-enterprise.svg)](https://charts.stackradar.io/charts/romholdings/devtron-enterprise)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.