devtron-operator Helm chart

Name: devtron-operator Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

romholdings

Scored 14 Sept 2026

Chart to configure and install Devtron. Devtron is a Kubernetes Orchestration system.

Latest 0.23.3 1 month agodeploys tag c7b89667-690-39290 0Artifact Hub

devtron-operator 0.23.3 deploys 11 container images: quay.io/devtron/dashboard, quay.io/devtron/authenticator, quay.io/devtron/dex, quay.io/devtron/kubelink and 7 more. Across them, 2,853 findings — 15 critical, 53 high — 9 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.80.0-r6, fixed in 8.4.0-r0.

Radar Score

32,90215534422,341

2,853 findings over 11 of 11 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/devtron/dashboard	c7b89667-690-39290	00526	326
quay.io/devtron/authenticator	e414faff-393-13273	21139157	2,967
quay.io/devtron/dex	v2.30.2	0938189	2,989
quay.io/devtron/kubelink	09867a9c-564-39289	0018206	1,968
quay.io/devtron/postgres×2	14.9	4469347	4,916
quay.io/devtron/postgres_exporter	v0.10.1	0322147	1,874
quay.io/devtron/kubectl×2	latest	2965229	3,946
quay.io/devtron/chart-sync×2	3b3d6d0e-836-39296	0018203	1,946
quay.io/devtron/devtron-utils	dup-chart-repo-v1.1.0	711117486	7,813
quay.io/devtron/hyperion×2	0874dcaf-280-39287	0022219	2,180
quay.io/devtron/migrator×2	v4.16.2	0629132	1,977

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,052 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2021-0241	stdlib@go1.15.7	1.15.13
Low	DEBIAN-CVE-2025-5222	icu@72.1-3	72.1-3+deb12u1
Low	GO-2022-0521	stdlib@go1.17.6	1.17.12
Low	GO-2022-0477	stdlib@go1.17.6	1.17.11
Low	DEBIAN-CVE-2026-18220	binutils@2.40-2	no fix listed
Low	UBUNTU-CVE-2026-4437	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8
Low	GO-2026-4341	stdlib@go1.25.0	1.24.12
Low	GO-2022-0533	stdlib@go1.17.6	1.17.11
Low	DEBIAN-CVE-2018-1000021	git@1:2.39.2-1.1	no fix listed
Low	DEBIAN-CVE-2025-66866	binutils@2.40-2	no fix listed
Low	GHSA-5xqw-8hwv-wg92	helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4	3.17.3
Low	DEBIAN-CVE-2025-5244	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-5245	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-9547	curl@7.88.1-10+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-17084	python3.11@3.11.2-6	no fix listed
Low	DEBIAN-CVE-2021-45346	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.5.2-6+deb12u1	no fix listed
Low	DSA-6015-1	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.13.2	5.19.2
Low	DEBIAN-CVE-2025-7545	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.40.1-2	no fix listed
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6
Low	GHSA-479m-364c-43vc	github.com/russellhaering/goxmldsig@v1.1.0	1.6.0
Low	DEBIAN-CVE-2022-49043	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	GO-2022-0523	stdlib@go1.17.6	1.17.12
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2build2	5.38.2-3.2ubuntu0.4
Low	GO-2024-2887	stdlib@go1.17.6	1.21.11
Low	DEBIAN-CVE-2026-6276	curl@7.88.1-10+deb12u4	no fix listed
Low	GO-2022-0522	stdlib@go1.17.6	1.17.12
Low	GO-2022-0527	stdlib@go1.17.6	1.17.12
Low	GO-2022-0524	stdlib@go1.17.6	1.17.12
Low	GHSA-fxhp-mv3v-67qp	oras.land/oras-go/v2@v2.6.0	2.6.2
Low	GHSA-4hfp-h4cw-hj8p	helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4	3.17.3
Low	GHSA-53c4-hhmh-vw5q	helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4	3.10.3
Low	GHSA-67fx-wx78-jx33	helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4	3.10.3
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v20.10.17+incompatible	no fix listed
Low	DEBIAN-CVE-2026-3276	python3.11@3.11.2-6	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.20.1-2+deb12u1	no fix listed
Low	ALPINE-CVE-2026-76956	expat@2.8.1-r0	2.8.4-r0
Low	DEBIAN-CVE-2025-11083	binutils@2.40-2	no fix listed
Low	GHSA-6xp3-p59p-q4fj	github.com/go-pg/pg@v6.15.1+incompatible	no fix listed
Low	GO-2023-1704	stdlib@go1.17.6	1.19.8
Low	DEBIAN-CVE-2025-11082	binutils@2.40-2	no fix listed
Low	ALPINE-CVE-2025-26519	musl@1.2.4-r0	1.2.4-r3
Low	DSA-5726-1	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u2
Low	DEBIAN-CVE-2025-12084	python3.11@3.11.2-6	3.11.2-6+deb12u7
Low	GO-2022-0289	stdlib@go1.16.6	1.16.12
Low	DEBIAN-CVE-2023-40217	python3.11@3.11.2-6	3.11.2-6+deb12u2
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6	no fix listed
Low	DEBIAN-CVE-2026-1299	python3.11@3.11.2-6	3.11.2-6+deb12u7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.23.3latest	1 month ago	c7b89667-690-39290	15534422,341	32,902

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/romholdings/devtron-operator.svg)](https://charts.stackradar.io/charts/romholdings/devtron-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.