ccx-monitoring Helm chart

Name: ccx-monitoring Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

severalnines

Scored 14 Sept 2026

An Umbrella Chart for observability components in CCX

Latest 0.6.21 7 days agodeploys tag 2.5.0 0Artifact Hub

ccx-monitoring 0.6.21 deploys 7 container images: library/busybox, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 3 more. Across them, 737 findings — 0 critical, 11 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.0-r0, fixed in 3.5.5-r0.

Radar Score

7,708011108618

737 findings over 7 of 7 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31.1	0000	0
quay.io/kiwigrid/k8s-sidecar×2	2.5.0	011951	878
grafana/grafana	12.3.1	0138170	2,330
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.10.1	0210103	1,084
victoriametrics/vmalert	v1.96.0	031092	1,037
quay.io/prometheus/alertmanager	v0.26.0	0311110	1,239
victoriametrics/victoria-metrics	v1.120.0	012092	1,140

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

253 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	GO-2024-2600	stdlib@go1.20.10	1.21.8
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r15	1.36.1-r16
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.76.0	1.82.1
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	GO-2024-2609	stdlib@go1.20.10	1.21.8
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	GO-2024-3107	stdlib@go1.20.10	1.22.7
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r15	1.36.1-r19
Low	GHSA-ffqx-q65f-36jf	github.com/grafana/tempo@v1.5.1-0.20250529124718-87c2dc380cec	2.10.3
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.17.4	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.11	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.51.0	1.65.0
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.84.0	1.97.3
Low	GHSA-jq9f-gm9w-rwm9	github.com/openfga/openfga@v1.10.0	1.11.3
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.14.0	0.52.0
Low	GHSA-497x-rrr9-68jp	github.com/grafana/loki/v3@v3.2.1	3.6.4
Low	GHSA-65pc-fj4g-8rjx	idna@3.11	3.15
Low	GHSA-x86f-5xw2-fm2r	github.com/moby/moby@v27.5.1+incompatible	no fix listed
Low	GO-2023-2041	stdlib@go1.20.7	1.20.8
Low	ALPINE-CVE-2026-42769	openssl@3.5.0-r0	3.5.7-r0
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.303.1	0.311.2-0.20260410083055-07c6232d159b
Low	GO-2023-2043	stdlib@go1.20.7	1.20.8
Low	GO-2023-2186	stdlib@go1.20.10	1.20.11
Low	GHSA-2c64-vmv2-hgfc	github.com/openfga/openfga@v1.10.0	1.11.1
Low	GO-2024-3333	golang.org/x/net@v0.17.0	0.33.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.38.0	1.40.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.133.0	0.144.0
Low	GO-2024-3105	stdlib@go1.20.10	1.22.7
Low	GHSA-cf98-j28v-49v6	github.com/openfga/openfga@v1.10.0	1.18.0
Low	GO-2026-4981	stdlib@go1.20.10	1.25.10
Low	GO-2025-3563	stdlib@go1.20.10	1.23.8
Low	GO-2026-4977	stdlib@go1.20.10	1.25.10
Low	GO-2024-2610	stdlib@go1.20.10	1.21.8
Low	GO-2026-4986	stdlib@go1.20.10	1.25.10
Low	GO-2026-4918	stdlib@go1.20.10	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.17.0	0.53.0
Low	GO-2026-4337	stdlib@go1.20.10	1.24.13
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.6.3	2.7.0
Low	GHSA-h6c8-cww8-35hf	github.com/openfga/openfga@v1.10.0	1.13.1
Low	GO-2026-4601	stdlib@go1.20.10	1.25.8
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.303.1	0.311.3
Low	GO-2026-5026	stdlib@go1.20.10	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.17.0	0.55.0
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0
Low	GO-2025-3420	stdlib@go1.20.10	1.22.11
Low	GO-2026-4342	stdlib@go1.20.10	1.24.12

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.21latest	7 days ago	2.5.0	011108618	7,708
0.6.10	1 month ago	2.5.0	0998515	6,624

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/severalnines/ccx-monitoring.svg)](https://charts.stackradar.io/charts/severalnines/ccx-monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.