devtron-enterprise Helm chart

Name: devtron-enterprise Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

romholdings

Scored 14 Sept 2026

Chart to configure and install Devtron Enterprise Stack. Devtron is a Kubernetes Orchestration system.

Latest 48.0.0 1 month agodeploys tag v1.4.1 0Artifact Hub

devtron-enterprise 48.0.0 deploys 28 container images: quay.io/devtron/bats, quay.io/devtron/nats-box, quay.io/devtron/image-scanner, quay.io/devtron/casbin and 23 more. Across the 27 measured, 6,002 findings — 22 critical, 104 high — 13 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.20, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

68,240221049254,945

6,002 findings over 27 of 28 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

28 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/bats	v1.4.1	0691	522
quay.io/devtron/nats-box	latest	0622140	1,963
quay.io/devtron/image-scanner	94237c18-109-39420	0532216	2,658
quay.io/devtron/casbin	172ef62b-9450794d-464-39422	0013179	1,637
quay.io/devtron/dashboard	0d8f6cf4-60e17132-931-39393	00526	326
quay.io/devtron/authenticator	e414faff-393-13273	21139157	2,967
quay.io/devtron/dex	v2.30.2	0938189	2,989
quay.io/devtron/inception	7beef376-948-31378	516170371	8,436
quay.io/devtron/kubelink	94237c18-314-39417	0018207	1,972
quay.io/devtron/kubewatch	09867a9c-419-39288	0115114	1,234
quay.io/devtron/lens×2	3b3d6d0e-333-39292	011581	965
quay.io/devtron/notifier	9804331c-372-39294	14129794	9,853
quay.io/devtron/silver-surfer	e3b9a2f6-1191-38789	018106	1,053
quay.io/devtron/git-sensor×3	94237c18-950-39418	011696	1,099
quay.io/devtron/nats	2.9.3-alpine	0414109	1,426
quay.io/devtron/nats-server-config-reloader	0.6.2	005119	1,122
quay.io/devtron/prometheus-nats-exporter	0.9.0	0118143	1,667
quay.io/devtron/postgres×2	14.9	4469347	4,916
quay.io/devtron/postgres_exporter	v0.10.1	0322147	1,874
quay.io/devtron/timescaledb-ha	pg18	—	not yet scanned
quay.io/devtron/kubectl×3	latest	2965229	3,946
quay.io/devtron/chart-sync×2	94237c18-1021-39419	0018206	1,968
quay.io/devtron/k8s-utils	tutum-curl	1362	405
quay.io/devtron/devtron×4	9450794d-930-39415	0023274	2,569
quay.io/devtron/migrator×5	v4.16.2	0629132	1,977
quay.io/devtron/devtron-utils	dup-chart-repo-v1.1.0	711117486	7,813
quay.io/devtron/devtron-utils	geni-v1.1.4	02511	311
quay.io/devtron/cost-sync	172ef62b-1159-39429	00563	572

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,859 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
Medium	ALPINE-CVE-2023-23916	curl@7.83.1-r3	7.83.1-r6
Medium	ALPINE-CVE-2024-9143	openssl@3.1.4-r5	3.1.7-r1
Medium	UBUNTU-CVE-2024-9143	openssl@1.0.2g-1ubuntu4.20	no fix listed
Medium	ALPINE-CVE-2023-46218	curl@7.80.0-r6	8.5.0-r0
Medium	UBUNTU-CVE-2023-46218	curl@7.47.0-1ubuntu2.19	7.47.0-1ubuntu2.19+esm11
Medium	DEBIAN-CVE-2026-14669	postgresql-15@15.14-0+deb12u1	15.19-0+deb12u1
Medium	DEBIAN-CVE-2026-34182	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2
Medium	DEBIAN-CVE-2026-63382	libevent@2.1.12-stable-8	no fix listed
Medium	DEBIAN-CVE-2024-4032	python3.11@3.11.2-6	3.11.2-6+deb12u3
Medium	ALPINE-CVE-2023-3817	openssl@3.1.0-r4	3.1.2-r0
Medium	UBUNTU-CVE-2023-3817	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm10
Medium	GHSA-6wrf-mxfj-pf5p	github.com/docker/docker@v20.10.17+incompatible	20.10.24
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
Medium	DEBIAN-CVE-2026-5201	gdk-pixbuf@2.42.10+dfsg-1+deb12u2	2.42.10+dfsg-1+deb12u4
Medium	GHSA-m7wr-2xf7-cm9p	github.com/jackc/pgx/v4@v4.18.1	4.18.2
Medium	GHSA-f23m-r3pf-42rh	lodash@4.17.23	4.18.0
Medium	GO-2021-0243	stdlib@go1.15.7	1.15.14
Medium	DEBIAN-CVE-2024-52006	git@1:2.39.2-1.1	1:2.39.5-0+deb12u2
Medium	DEBIAN-CVE-2026-44172	mariadb@1:10.11.14-0+deb12u2	1:10.11.18-0+deb12u1
Medium	UBUNTU-CVE-2020-35525	sqlite3@3.11.0-1ubuntu1.5	3.11.0-1ubuntu1.5+esm1
Medium	DEBIAN-CVE-2025-27113	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	DEBIAN-CVE-2026-33416	libpng1.6@1.6.39-2	1.6.39-2+deb12u4
Medium	GO-2022-0273	stdlib@go1.16.6	1.16.8
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1	0.0.0-20220412211240-33da011f77ad
Medium	UBUNTU-CVE-2020-23026	gccgo-6@6.0.1-0ubuntu1	no fix listed
Medium	UBUNTU-CVE-2020-23026	gcc-5@5.4.0-6ubuntu1~16.04.12	no fix listed
Medium	ALPINE-CVE-2023-29491	ncurses@6.3_p20211120-r0	6.3_p20211120-r2
Medium	UBUNTU-CVE-2023-29491	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm3
Medium	DEBIAN-CVE-2026-6100	python3.11@3.11.2-6+deb12u6	3.11.2-6+deb12u8
Medium	ALPINE-CVE-2026-31790	openssl@3.3.2-r4	3.3.7-r0
Medium	DEBIAN-CVE-2026-31790	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-25986	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	8:6.9.11.60+dfsg-1.6+deb12u7
Medium	DEBIAN-CVE-2025-32990	gnutls28@3.7.9-2	3.7.9-2+deb12u5
Medium	UBUNTU-CVE-2026-34180	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm16
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	UBUNTU-CVE-2025-31115	xz-utils@5.6.1+really5.4.5-1build0.1	5.6.1+really5.4.5-1ubuntu0.2
Medium	DEBIAN-CVE-2024-2379	curl@7.88.1-10+deb12u14	no fix listed
Medium	UBUNTU-CVE-2026-7383	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm16
Medium	DEBIAN-CVE-2020-14145	openssh@1:9.2p1-2+deb12u7	no fix listed
Medium	UBUNTU-CVE-2026-8924	curl@7.47.0-1ubuntu2.19	7.47.0-1ubuntu2.19+esm16
Medium	UBUNTU-CVE-2025-69720	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1
Medium	UBUNTU-CVE-2024-33601	glibc@2.23-0ubuntu11.3	2.23-0ubuntu11.3+esm7
Medium	UBUNTU-CVE-2026-8376	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.3
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.8.1	1.8.3
Medium	DEBIAN-CVE-2017-11754	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	no fix listed
Medium	DEBIAN-CVE-2017-11755	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u4	no fix listed
Medium	ALPINE-CVE-2025-9232	openssl@3.3.2-r4	3.3.5-r0
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
48.0.0latest	1 month ago	v1.4.1	221049254,945	68,240

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/romholdings/devtron-enterprise.svg)](https://charts.stackradar.io/charts/romholdings/devtron-enterprise)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.