devtron-enterprise Helm chart

Name: devtron-enterprise Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

romholdings

Scored 14 Sept 2026

Chart to configure and install Devtron Enterprise Stack. Devtron is a Kubernetes Orchestration system.

Latest 48.0.0 1 month agodeploys tag v1.4.1 0Artifact Hub

devtron-enterprise 48.0.0 deploys 28 container images: quay.io/devtron/bats, quay.io/devtron/nats-box, quay.io/devtron/image-scanner, quay.io/devtron/casbin and 23 more. Across the 27 measured, 6,002 findings — 22 critical, 104 high — 13 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.20, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

68,240221049254,945

6,002 findings over 27 of 28 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

28 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/bats	v1.4.1	0691	522
quay.io/devtron/nats-box	latest	0622140	1,963
quay.io/devtron/image-scanner	94237c18-109-39420	0532216	2,658
quay.io/devtron/casbin	172ef62b-9450794d-464-39422	0013179	1,637
quay.io/devtron/dashboard	0d8f6cf4-60e17132-931-39393	00526	326
quay.io/devtron/authenticator	e414faff-393-13273	21139157	2,967
quay.io/devtron/dex	v2.30.2	0938189	2,989
quay.io/devtron/inception	7beef376-948-31378	516170371	8,436
quay.io/devtron/kubelink	94237c18-314-39417	0018207	1,972
quay.io/devtron/kubewatch	09867a9c-419-39288	0115114	1,234
quay.io/devtron/lens×2	3b3d6d0e-333-39292	011581	965
quay.io/devtron/notifier	9804331c-372-39294	14129794	9,853
quay.io/devtron/silver-surfer	e3b9a2f6-1191-38789	018106	1,053
quay.io/devtron/git-sensor×3	94237c18-950-39418	011696	1,099
quay.io/devtron/nats	2.9.3-alpine	0414109	1,426
quay.io/devtron/nats-server-config-reloader	0.6.2	005119	1,122
quay.io/devtron/prometheus-nats-exporter	0.9.0	0118143	1,667
quay.io/devtron/postgres×2	14.9	4469347	4,916
quay.io/devtron/postgres_exporter	v0.10.1	0322147	1,874
quay.io/devtron/timescaledb-ha	pg18	—	not yet scanned
quay.io/devtron/kubectl×3	latest	2965229	3,946
quay.io/devtron/chart-sync×2	94237c18-1021-39419	0018206	1,968
quay.io/devtron/k8s-utils	tutum-curl	1362	405
quay.io/devtron/devtron×4	9450794d-930-39415	0023274	2,569
quay.io/devtron/migrator×5	v4.16.2	0629132	1,977
quay.io/devtron/devtron-utils	dup-chart-repo-v1.1.0	711117486	7,813
quay.io/devtron/devtron-utils	geni-v1.1.4	02511	311
quay.io/devtron/cost-sync	172ef62b-1159-39429	00563	572

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,859 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2023-31486	perl@5.22.1-9ubuntu0.9	no fix listed
Medium	DEBIAN-CVE-2026-3497	openssh@1:9.2p1-2+deb12u7	1:9.2p1-2+deb12u9
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	GHSA-g6w6-r76c-28j7	github.com/nats-io/nats-server/v2@v2.2.5	2.7.2
Medium	DEBIAN-CVE-2026-2005	postgresql-15@15.14-0+deb12u1	15.16-0+deb12u1
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	UBUNTU-CVE-2018-5709	krb5@1.13.2+dfsg-5ubuntu2.2	no fix listed
Medium	DEBIAN-CVE-2012-0039	glib2.0@2.74.6-2+deb12u7	no fix listed
Medium	DEBIAN-CVE-2024-28757	expat@2.5.0-1+deb12u2	no fix listed
Medium	DEBIAN-CVE-2024-8088	python3.11@3.11.2-6	3.11.2-6+deb12u3
Medium	DEBIAN-CVE-2026-10536	curl@7.88.1-10+deb12u14	no fix listed
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.4.0
Medium	DEBIAN-CVE-2026-2004	postgresql-15@15.14-0+deb12u1	15.16-0+deb12u1
Medium	UBUNTU-CVE-2016-10228	glibc@2.23-0ubuntu11.3	2.23-0ubuntu11.3+esm3
Medium	UBUNTU-CVE-2023-31484	perl@5.22.1-9ubuntu0.9	5.22.1-9ubuntu0.9+esm2
Medium	UBUNTU-CVE-2023-2953	openldap@2.4.42+dfsg-2ubuntu3.13	2.4.42+dfsg-2ubuntu3.13+esm2
Medium	DEBIAN-CVE-2017-9937	jbigkit@2.1-6.1	no fix listed
Medium	UBUNTU-CVE-2019-12098	heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1	1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1
Medium	UBUNTU-CVE-2017-13729	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm1
Medium	UBUNTU-CVE-2017-13730	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm1
Medium	UBUNTU-CVE-2017-13731	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm1
Medium	UBUNTU-CVE-2017-13732	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm1
Medium	DEBIAN-CVE-2016-20012	openssh@1:9.2p1-2+deb12u7	no fix listed
Medium	DEBIAN-CVE-2026-46522	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u10
Medium	DEBIAN-CVE-2025-14087	glib2.0@2.74.6-2+deb12u7	2.74.6-2+deb12u8
Medium	UBUNTU-CVE-2023-36054	krb5@1.13.2+dfsg-5ubuntu2.2	1.13.2+dfsg-5ubuntu2.2+esm4
Medium	DEBIAN-CVE-2023-52355	tiff@4.5.0-6+deb12u3	no fix listed
Medium	DEBIAN-CVE-2023-52425	expat@2.5.0-1	2.5.0-1+deb12u2
Medium	GHSA-fxg5-wq6x-vr4w	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.1.1-0.20221104162952-702349b0e862
Medium	DEBIAN-CVE-2023-25193	harfbuzz@6.0.0+dfsg-3	no fix listed
Medium	DEBIAN-CVE-2026-2006	postgresql-15@15.14-0+deb12u1	15.16-0+deb12u1
Medium	ALPINE-CVE-2022-42916	curl@7.83.1-r3	7.83.1-r4
Medium	UBUNTU-CVE-2022-34903	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm2
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210428140749-89ef3d95e781
Medium	UBUNTU-CVE-2019-11922	libzstd@1.3.1+dfsg-1~ubuntu0.16.04.1	1.3.1+dfsg-1~ubuntu0.16.04.1+esm2
Medium	UBUNTU-CVE-2017-13733	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm1
Medium	GHSA-mqqv-chpx-vq25	github.com/russellhaering/goxmldsig@v1.1.0	1.1.1
Medium	GHSA-prjq-f4q3-fvfr	github.com/russellhaering/goxmldsig@v1.1.0	1.1.1
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.10.1-3	no fix listed
Medium	UBUNTU-CVE-2017-6594	heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1	no fix listed
Medium	DEBIAN-CVE-2018-20712	binutils@2.40-2	no fix listed
Medium	UBUNTU-CVE-2021-22925	curl@7.47.0-1ubuntu2.19	7.47.0-1ubuntu2.19+esm3
Medium	UBUNTU-CVE-2011-10043	perl@5.22.1-9ubuntu0.9	no fix listed
Medium	GHSA-xq3m-2v4x-88gg	protobufjs@7.5.3	7.5.5
Medium	UBUNTU-CVE-2019-25013	glibc@2.23-0ubuntu11.3	2.23-0ubuntu11.3+esm3
Medium	DEBIAN-CVE-2025-32988	gnutls28@3.7.9-2	3.7.9-2+deb12u5
Medium	DEBIAN-CVE-2024-45490	expat@2.5.0-1	2.5.0-1+deb12u1
Medium	DEBIAN-CVE-2007-3996	libwmf@0.2.12-5.1	no fix listed
Medium	ALPINE-CVE-2022-2097	openssl@1.1.1l-r0	1.1.1q-r0
Medium	UBUNTU-CVE-2024-33599	glibc@2.23-0ubuntu11.3	2.23-0ubuntu11.3+esm7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
48.0.0latest	1 month ago	v1.4.1	221049254,945	68,240

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/romholdings/devtron-enterprise.svg)](https://charts.stackradar.io/charts/romholdings/devtron-enterprise)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.