devtron-enterprise 48.0.0 Helm chart

Name: devtron-enterprise Helm chart 48.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

romholdings

Scored 16 Sept 2026

Chart to configure and install Devtron Enterprise Stack. Devtron is a Kubernetes Orchestration system.

Version 48.0.0 1 month agodeploys tag v1.4.1 0Artifact Hub

devtron-enterprise 48.0.0 deploys 28 container images: quay.io/devtron/bats, quay.io/devtron/nats-box, quay.io/devtron/image-scanner, quay.io/devtron/casbin and 23 more. Across the 27 measured, 6,046 findings — 19 critical, 107 high — 13 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.20, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

68,695191079334,981

6,046 findings over 27 of 28 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

28 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/bats	v1.4.1	0691	522
quay.io/devtron/nats-box	latest	0622140	1,964
quay.io/devtron/image-scanner	94237c18-109-39420	0533215	2,667
quay.io/devtron/casbin	172ef62b-9450794d-464-39422	0013186	1,687
quay.io/devtron/dashboard	0d8f6cf4-60e17132-931-39393	00526	327
quay.io/devtron/authenticator	e414faff-393-13273	21139157	2,974
quay.io/devtron/dex	v2.30.2	0938189	2,995
quay.io/devtron/inception	7beef376-948-31378	417170372	8,452
quay.io/devtron/kubelink	94237c18-314-39417	0018214	2,025
quay.io/devtron/kubewatch	09867a9c-419-39288	0116113	1,241
quay.io/devtron/lens×2	3b3d6d0e-333-39292	011680	972
quay.io/devtron/notifier	9804331c-372-39294	14130801	9,927
quay.io/devtron/silver-surfer	e3b9a2f6-1191-38789	019105	1,060
quay.io/devtron/git-sensor×3	94237c18-950-39418	011795	1,106
quay.io/devtron/nats	2.9.3-alpine	0414109	1,426
quay.io/devtron/nats-server-config-reloader	0.6.2	005119	1,122
quay.io/devtron/prometheus-nats-exporter	0.9.0	0118143	1,667
quay.io/devtron/postgres×2	14.9	3570345	4,933
quay.io/devtron/postgres_exporter	v0.10.1	0322147	1,874
quay.io/devtron/timescaledb-ha	pg18	—	not yet scanned
quay.io/devtron/kubectl×3	latest	2965229	3,957
quay.io/devtron/chart-sync×2	94237c18-1021-39419	0018213	2,021
quay.io/devtron/k8s-utils	tutum-curl	1362	405
quay.io/devtron/devtron×4	9450794d-930-39415	0023281	2,619
quay.io/devtron/migrator×5	v4.16.2	0629132	1,984
quay.io/devtron/devtron-utils	dup-chart-repo-v1.1.0	612118493	7,885
quay.io/devtron/devtron-utils	geni-v1.1.4	02511	311
quay.io/devtron/cost-sync	172ef62b-1159-39429	00563	572

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,868 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-56131	expat@2.6.1-2ubuntu0.4	no fix listed
Low	GO-2025-3887	helm@3.10.1	no fix listed
Low	GO-2025-3888	helm@3.10.1	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
Low	GO-2025-3955	stdlib@go1.25.0	1.25.1
Low	GHSA-f9jg-8p32-2f55	k8s.io/kubernetes@v1.20.4	1.26.0-alpha.3
Low	GO-2026-4603	stdlib@go1.17.6	1.25.8
Low	DEBIAN-CVE-2026-0864	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2010-4756	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-0988	glib2.0@2.74.6-2+deb12u7	2.74.6-2+deb12u9
Low	GHSA-v422-hmwv-36x6	body-parser@1.20.4	1.20.6
Low	GO-2026-6303	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-8m3c-c648-2xjj	nodemailer@7.0.13	9.1.1
Low	GHSA-9ggv-8w38-r7pm	typeorm@0.3.28	0.3.29
Low	DEBIAN-CVE-2025-6141	ncurses@6.4-4	no fix listed
Low	GO-2026-6354	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0
Low	UBUNTU-CVE-2026-29111	systemd@255.4-1ubuntu8.4	255.4-1ubuntu8.14
Low	GO-2025-3547	k8s.io/kubernetes@v1.33.4	no fix listed
Low	GO-2026-4982	stdlib@go1.17.6	1.25.10
Low	DEBIAN-CVE-2025-30258	gnupg2@2.2.40-1.1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8851	tiff@4.5.0-6+deb12u3	no fix listed
Low	GO-2026-6091	stdlib@go1.17.6	1.25.13
Low	DEBIAN-CVE-2026-90801	binutils@2.40-2	no fix listed
Low	UBUNTU-CVE-2026-15059	systemd@255.4-1ubuntu8.4	255.4-1ubuntu8.17
Low	DEBIAN-CVE-2007-2243	openssh@1:9.2p1-2+deb12u7	no fix listed
Low	UBUNTU-CVE-2024-56433	shadow@1:4.13+dfsg1-4ubuntu3.2	no fix listed
Low	DEBIAN-CVE-2024-25260	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2007-3476	libwmf@0.2.12-5.1	no fix listed
Low	DEBIAN-CVE-2008-1687	m4@1.4.19-3	no fix listed
Low	GHSA-698x-9w2p-7vvp	github.com/quay/claircore@v1.3.1	no fix listed
Low	GO-2026-5338	github.com/containerd/containerd@v1.7.5	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.12-1ubuntu3	1.12-1ubuntu3.2
Low	DEBIAN-CVE-2026-19548	binutils@2.40-2	no fix listed
Low	UBUNTU-CVE-2026-5419	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6
Low	GO-2026-6180	golang.org/x/mod@v0.13.0	0.40.0
Low	DEBIAN-CVE-2025-1148	binutils@2.40-2	no fix listed
Low	UBUNTU-CVE-2026-89157	pcre2@10.42-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-40226	systemd@255.4-1ubuntu8.4	255.4-1ubuntu8.16
Low	DEBIAN-CVE-2026-44169	mariadb@1:10.11.14-0+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-61143	tiff@4.5.0-6+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-86423	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	no fix listed
Low	GO-2025-3750	stdlib@go1.17.6	1.23.10
Low	GO-2026-4864	stdlib@go1.17.6	1.25.9
Low	DEBIAN-CVE-2011-4116	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2024-32020	git@1:2.39.2-1.1	1:2.39.5-0+deb12u1
Low	DEBIAN-CVE-2026-15003	binutils@2.40-2	no fix listed
Low	GO-2025-3447	stdlib@go1.17.6	1.22.12
Low	GO-2026-4865	stdlib@go1.17.6	1.25.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
48.0.0latest	1 month ago	v1.4.1	191079334,981	68,695

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/romholdings/devtron-enterprise.svg)](https://charts.stackradar.io/charts/romholdings/devtron-enterprise)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.