ccx-monitoring Helm chart

Name: ccx-monitoring Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

severalnines

Scored 14 Sept 2026

An Umbrella Chart for observability components in CCX

Latest 0.6.21 7 days agodeploys tag 2.5.0 0Artifact Hub

ccx-monitoring 0.6.21 deploys 7 container images: library/busybox, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 3 more. Across them, 737 findings — 0 critical, 11 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.0-r0, fixed in 3.5.5-r0.

Radar Score

7,708011108618

737 findings over 7 of 7 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31.1	0000	0
quay.io/kiwigrid/k8s-sidecar×2	2.5.0	011951	878
grafana/grafana	12.3.1	0138170	2,330
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.10.1	0210103	1,084
victoriametrics/vmalert	v1.96.0	031092	1,037
quay.io/prometheus/alertmanager	v0.26.0	0311110	1,239
victoriametrics/victoria-metrics	v1.120.0	012092	1,140

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

314 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4918	stdlib@go1.20.10	1.25.10
Low	GO-2026-4337	stdlib@go1.20.10	1.24.13
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.6.3	2.7.0
Low	GHSA-h6c8-cww8-35hf	github.com/openfga/openfga@v1.10.0	1.13.1
Low	GO-2026-4601	stdlib@go1.20.10	1.25.8
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.303.1	0.311.3
Low	GO-2026-5026	golang.org/x/net@v0.17.0	0.55.0
Low	GO-2026-5026	stdlib@go1.20.10	1.25.13
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0
Low	GO-2025-3420	stdlib@go1.20.10	1.22.11
Low	GO-2026-4342	stdlib@go1.20.10	1.24.12
Low	GO-2024-2598	stdlib@go1.20.10	1.21.8
Low	GO-2025-3751	stdlib@go1.20.10	1.23.10
Low	ALPINE-CVE-2024-13176	openssl@3.1.4-r2	3.1.8-r0
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.76.0	1.82.2
Low	ALPINE-CVE-2026-45446	openssl@3.5.0-r0	3.5.7-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GO-2025-4116	golang.org/x/crypto@v0.14.0	0.43.0
Low	GO-2026-4870	stdlib@go1.20.10	1.25.9
Low	GO-2025-4009	stdlib@go1.20.10	1.24.8
Low	GO-2026-4947	stdlib@go1.20.10	1.25.9
Low	GHSA-rg2x-37c3-w2rh	github.com/moby/moby@v27.5.1+incompatible	no fix listed
Low	GO-2025-4006	stdlib@go1.20.10	1.24.8
Low	GO-2026-5037	stdlib@go1.20.10	1.25.11
Low	GO-2026-4971	stdlib@go1.20.10	1.25.10
Low	GO-2026-5972	stdlib@go1.20.10	1.25.13
Low	GO-2026-6088	stdlib@go1.20.10	1.25.13
Low	GO-2026-6089	stdlib@go1.20.10	1.25.13
Low	GO-2026-6090	stdlib@go1.20.10	1.25.13
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	GO-2026-5038	stdlib@go1.20.10	1.25.11
Low	GO-2026-5942	golang.org/x/net@v0.17.0	0.56.0
Low	GHSA-qxp5-gwg8-xv66	golang.org/x/net@v0.17.0	0.36.0
Low	GO-2025-4012	stdlib@go1.20.10	1.24.8
Low	GO-2025-3956	stdlib@go1.20.10	1.23.12
Low	GO-2026-4440	golang.org/x/net@v0.17.0	0.45.0
Low	GO-2025-4011	stdlib@go1.20.10	1.24.8
Low	GO-2025-4015	stdlib@go1.20.10	1.24.8
Low	GO-2026-6218	stdlib@go1.20.10	1.25.13
Low	GO-2026-4441	golang.org/x/net@v0.17.0	0.45.0
Low	GO-2025-3373	stdlib@go1.20.10	1.22.11
Low	ALPINE-CVE-2025-15469	openssl@3.5.0-r0	3.5.5-r0
Low	GO-2026-5970	golang.org/x/text@v0.13.0	0.39.0
Low	PYSEC-2026-2275	requests@2.32.5	2.33.0
Low	ALPINE-CVE-2026-42768	openssl@3.5.0-r0	3.5.7-r0
Low	GO-2025-4155	stdlib@go1.20.10	1.24.11
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	GO-2024-2888	stdlib@go1.20.10	1.21.11
Low	GHSA-w8rr-5gcm-pp58	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.38.0	1.43.0
Low	GHSA-w8rr-5gcm-pp58	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.38.0	1.43.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.21latest	7 days ago	2.5.0	011108618	7,708
0.6.10	1 month ago	2.5.0	0998515	6,624

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/severalnines/ccx-monitoring.svg)](https://charts.stackradar.io/charts/severalnines/ccx-monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.