devtron-enterprise 48.0.0 Helm chart

Name: devtron-enterprise Helm chart 48.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

romholdings

Scored 15 Sept 2026

Chart to configure and install Devtron Enterprise Stack. Devtron is a Kubernetes Orchestration system.

Version 48.0.0 1 month agodeploys tag v1.4.1 0Artifact Hub

devtron-enterprise 48.0.0 deploys 28 container images: quay.io/devtron/bats, quay.io/devtron/nats-box, quay.io/devtron/image-scanner, quay.io/devtron/casbin and 23 more. Across the 27 measured, 6,036 findings — 11 critical, 96 high — 13 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.20, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

66,54211968655,058

6,036 findings over 27 of 28 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

28 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/bats	v1.4.1	0691	522
quay.io/devtron/nats-box	latest	0622140	1,963
quay.io/devtron/image-scanner	94237c18-109-39420	0532216	2,658
quay.io/devtron/casbin	172ef62b-9450794d-464-39422	0013186	1,675
quay.io/devtron/dashboard	0d8f6cf4-60e17132-931-39393	00526	327
quay.io/devtron/authenticator	e414faff-393-13273	21139157	2,967
quay.io/devtron/dex	v2.30.2	0938189	2,989
quay.io/devtron/inception	7beef376-948-31378	417170372	8,442
quay.io/devtron/kubelink	94237c18-314-39417	0018214	2,011
quay.io/devtron/kubewatch	09867a9c-419-39288	0115114	1,234
quay.io/devtron/lens×2	3b3d6d0e-333-39292	011581	965
quay.io/devtron/notifier	9804331c-372-39294	13116811	9,567
quay.io/devtron/silver-surfer	e3b9a2f6-1191-38789	018106	1,053
quay.io/devtron/git-sensor×3	94237c18-950-39418	011696	1,099
quay.io/devtron/nats	2.9.3-alpine	0414109	1,426
quay.io/devtron/nats-server-config-reloader	0.6.2	005119	1,122
quay.io/devtron/prometheus-nats-exporter	0.9.0	0118143	1,667
quay.io/devtron/postgres×2	14.9	0351369	4,363
quay.io/devtron/postgres_exporter	v0.10.1	0322147	1,874
quay.io/devtron/timescaledb-ha	pg18	—	not yet scanned
quay.io/devtron/kubectl×3	latest	2965229	3,948
quay.io/devtron/chart-sync×2	94237c18-1021-39419	0018213	2,007
quay.io/devtron/k8s-utils	tutum-curl	1362	405
quay.io/devtron/devtron×4	9450794d-930-39415	0023281	2,607
quay.io/devtron/migrator×5	v4.16.2	0629132	1,977
quay.io/devtron/devtron-utils	dup-chart-repo-v1.1.0	1488531	6,791
quay.io/devtron/devtron-utils	geni-v1.1.4	02511	311
quay.io/devtron/cost-sync	172ef62b-1159-39429	00563	572

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,863 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-2219	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6
Low	UBUNTU-CVE-2026-42497	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.3
Low	DEBIAN-CVE-2025-24928	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2026-41992	gzip@1.12-1ubuntu3	1.12-1ubuntu3.2
Low	UBUNTU-CVE-2023-7008	systemd@229-4ubuntu21.31	no fix listed
Low	DEBIAN-CVE-2023-6780	glibc@2.36-9+deb12u3	2.36-9+deb12u4
Low	DEBIAN-CVE-2026-56211	aom@3.6.0-1+deb12u2	3.6.0-1+deb12u3
Low	GHSA-5jv8-h7qh-rf5p	github.com/argoproj/argo-workflows/v3@v3.7.11	3.7.14
Low	GHSA-xv26-6w52-cph6	websocket-driver@0.7.4	0.7.5
Low	DEBIAN-CVE-2025-13699	mariadb@1:10.11.14-0+deb12u2	1:10.11.18-0+deb12u1
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	UBUNTU-CVE-2019-20633	patch@2.7.6-7build3	no fix listed
Low	DEBIAN-CVE-2026-35386	openssh@1:9.2p1-2+deb12u7	1:9.2p1-2+deb12u10
Low	GHSA-j2g6-362q-6qc6	github.com/vmware-tanzu/velero@v1.14.1	1.18.1
Low	DEBIAN-CVE-2026-12912	tiff@4.5.0-6+deb12u3	no fix listed
Low	ALPINE-CVE-2024-4603	openssl@3.1.4-r5	3.1.5-r0
Low	DEBIAN-CVE-2026-12064	curl@7.88.1-10+deb12u14	no fix listed
Low	GHSA-x6g4-f6q3-fqvv	github.com/nats-io/nats-server/v2@v2.2.5	2.11.15
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.0.1	10.3.1
Low	UBUNTU-CVE-2026-8932	curl@7.47.0-1ubuntu2.19	no fix listed
Low	DEBIAN-CVE-2025-24855	libxslt@1.1.35-1	1.1.35-1+deb12u1
Low	GHSA-8xwf-rjm4-xvhv	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.15
Low	DEBIAN-CVE-2025-1372	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2023-41105	python3.11@3.11.2-6	3.11.2-6+deb12u2
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.19.0-3build1	4.19.0-3ubuntu0.24.04.1
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.0.0	5.9.0
Low	UBUNTU-CVE-2026-8286	curl@7.47.0-1ubuntu2.19	7.47.0-1ubuntu2.19+esm16
Low	DEBIAN-CVE-2025-1365	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2026-24481	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u7
Low	GHSA-4x4m-3c2p-qppc	k8s.io/kubernetes@v1.33.1	1.33.4
Low	GHSA-6chq-wfr3-2hj9	axios@1.13.6	1.15.1
Low	UBUNTU-CVE-2024-33602	glibc@2.23-0ubuntu11.3	2.23-0ubuntu11.3+esm7
Low	GHSA-r6q2-hw4h-h46w	tar@7.5.1	7.5.4
Low	DEBIAN-CVE-2026-25799	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u7
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v24.0.5+incompatible	29.2.0
Low	DEBIAN-CVE-2023-27043	python3.11@3.11.2-6	3.11.2-6+deb12u5
Low	DEBIAN-CVE-2026-14679	postgresql-15@15.14-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2025-64181	openexr@3.1.5-5	no fix listed
Low	GHSA-jxpm-75mh-9fp7	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	UBUNTU-CVE-2026-4046	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8
Low	DEBIAN-CVE-2026-40250	openexr@3.1.5-5	no fix listed
Low	GHSA-3w6x-2g7m-8v23	axios@1.13.6	1.15.2
Low	DEBIAN-CVE-2026-41071	libheif@1.15.1-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2019-14855	gnupg@1.4.20-1ubuntu3.3	no fix listed
Low	GHSA-r292-9mhp-454m	tar@7.5.1	7.5.21
Low	DEBIAN-CVE-2025-49506	apr-util@1.6.3-1	1.6.3-1+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
48.0.0latest	1 month ago	v1.4.1	11968655,058	66,542

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/romholdings/devtron-enterprise.svg)](https://charts.stackradar.io/charts/romholdings/devtron-enterprise)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.