kube-prometheus-stack 19.3.0 Helm chart

Name: kube-prometheus-stack Helm chart 19.3.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

romholdings

Scored 14 Sept 2026

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

Version 19.3.0 4 years agoapp version 0.50.0 0Artifact Hub

kube-prometheus-stack 19.3.0 deploys 6 container images: quay.io/prometheus/node-exporter, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, k8s.gcr.io/kube-state-metrics/kube-state-metrics and 2 more. Across the 4 measured, 666 findings — 0 critical, 21 high — 3 on CISA KEV. The highest contribution is ALPINE-CVE-2022-25236 in expat 2.4.1-r0, fixed in 2.4.5-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

8,645021137508

666 findings over 4 of 6 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.2.2	0323151	1,942
quay.io/kiwigrid/k8s-sidecar×2	1.14.2	074729	1,835
grafana/grafana	8.2.5	0948175	3,061
k8s.gcr.io/kube-state-metrics/kube-state-metrics	v1.9.8	—	unmeasured
quay.io/prometheus-operator/prometheus-operator	v0.50.0	0219153	1,807
k8s.gcr.io/ingress-nginx/kube-webhook-certgen×2	v1.0	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

80 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GO-2024-2687	stdlib@go1.16.7	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
Medium	ALPINE-CVE-2022-25235	expat@2.4.1-r0	2.4.5-r0
Medium	ALPINE-CVE-2022-22822	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-25315	expat@2.4.1-r0	2.4.5-r0
Medium	ALPINE-CVE-2022-23852	expat@2.4.1-r0	2.4.4-r0
Medium	ALPINE-CVE-2022-1271	xz@5.2.5-r0	5.2.5-r1
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1l-r0	1.1.1t-r0
Medium	ALPINE-CVE-2022-22823	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-22824	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2021-45960	expat@2.4.1-r0	2.4.3-r0
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.11.0	1.11.1
Medium	ALPINE-CVE-2022-28391	busybox@1.33.1-r3	1.33.1-r7
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0
Medium	ALPINE-CVE-2022-25314	expat@2.4.1-r0	2.4.5-r0
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.7.0
Medium	ALPINE-CVE-2022-22826	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-22827	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1l-r0	1.1.1t-r0
Medium	ALPINE-CVE-2021-46143	expat@2.4.1-r0	2.4.3-r0
Medium	ALPINE-CVE-2022-22825	expat@2.4.1-r0	2.4.3-r0
Medium	GHSA-j2jp-wvqg-wc2g	github.com/crewjam/saml@v0.4.6-0.20201227203850-bca570abb2ce	0.4.9
Medium	ALPINE-CVE-2022-23990	expat@2.4.1-r0	2.4.4-r0
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b	3.0.1
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220314234659-1baeb1ce4c0b
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.17.0
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1l-r0	1.1.1t-r1
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-cx63-2mw6-8hw5	setuptools@57.5.0	70.0.0
Medium	GHSA-38jv-5279-wg99	urllib3@1.26.7	2.6.3
Medium	ALPINE-CVE-2022-40674	expat@2.4.1-r0	2.4.9-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.38.0	1.79.3
Medium	ALPINE-CVE-2021-46828	libtirpc@1.3.2-r0	1.3.2-r1
Medium	ALPINE-CVE-2021-42380	busybox@1.33.1-r3	1.33.1-r6
Medium	GHSA-qwmp-2cf2-g9g6	wheel@0.37.0	0.38.1
Medium	GHSA-r9hx-vwmv-q579	setuptools@57.5.0	65.5.1
Medium	ALPINE-CVE-2021-42379	busybox@1.33.1-r3	1.33.1-r6
Medium	ALPINE-CVE-2021-42381	busybox@1.33.1-r3	1.33.1-r6
Medium	ALPINE-CVE-2021-42385	busybox@1.33.1-r3	1.33.1-r6
Medium	ALPINE-CVE-2022-43680	expat@2.4.1-r0	2.5.0-r0
Medium	PYSEC-2025-49	setuptools@57.5.0	78.1.1
Medium	ALPINE-CVE-2021-42378	busybox@1.33.1-r3	1.33.1-r6
Medium	ALPINE-CVE-2021-42382	busybox@1.33.1-r3	1.33.1-r6
Medium	ALPINE-CVE-2021-42384	busybox@1.33.1-r3	1.33.1-r6
Medium	ALPINE-CVE-2021-42386	busybox@1.33.1-r3	1.33.1-r6
Medium	ALPINE-CVE-2022-25313	expat@2.4.1-r0	2.4.5-r0
Medium	ALPINE-CVE-2021-42383	busybox@1.33.1-r3	1.33.1-r6
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.4.0
Medium	GHSA-mqqv-chpx-vq25	github.com/russellhaering/goxmldsig@v1.1.0	1.1.1
Medium	GHSA-prjq-f4q3-fvfr	github.com/russellhaering/goxmldsig@v1.1.0	1.1.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
19.3.0latest	4 years ago	0.50.0	021137508	8,645

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/romholdings/kube-prometheus-stack.svg)](https://charts.stackradar.io/charts/romholdings/kube-prometheus-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.