clickhouse 24.1.18 Helm chart

Name: clickhouse Helm chart 24.1.18: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

signoz

Scored 14 Sept 2026

A Helm chart for ClickHouse

Version 24.1.18 1 year agodeploys tag 0.21.2 1Artifact Hub

clickhouse 24.1.18 deploys 3 container images: altinity/clickhouse-operator, altinity/metrics-exporter and signoz/zookeeper. Across them, 491 findings — 0 critical, 5 high — 3 on CISA KEV. The highest contribution is GHSA-qppj-fm5r-hxr3 in golang.org/x/net v0.7.0, fixed in 0.17.0.

Radar Score

4,6950542444

491 findings over 3 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
altinity/clickhouse-operator	0.21.2	02495	889
altinity/metrics-exporter	0.21.2	02495	889
signoz/zookeeper	3.7.1	0134254	2,917

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

314 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-java-2024-21138	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-21933	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-21933	java@11.0.20-8-5	1.8.0
Low	GO-2023-2041	stdlib@go1.19.10	1.20.8
Low	BIT-java-2026-46968	java@11.0.20-8-5	1.8.0
Low	BIT-java-2026-46968	Java@11.0.20-8	1.8.0
Low	GO-2023-2043	stdlib@go1.19.10	1.20.8
Low	BIT-java-2024-21217	Java@11.0.20-8	1.8.0
Low	BIT-java-2024-21217	java@11.0.20-8-5	1.8.0
Low	GO-2023-2186	stdlib@go1.21.2	1.20.11
Low	DLA-4490-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u5
Low	GO-2024-3333	golang.org/x/net@v0.7.0	0.33.0
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.2.1	2.18.8
Low	GO-2024-3105	stdlib@go1.21.2	1.22.7
Low	BIT-java-2024-21144	java@11.0.20-8-5	1.8.0
Low	BIT-java-2024-21144	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-62574	java@11.0.20-8-5	1.8.0
Low	BIT-java-2026-62574	Java@11.0.20-8	1.8.0
Low	BIT-java-2024-21131	Java@11.0.20-8	1.8.0
Low	BIT-java-2024-21131	java@11.0.20-8-5	1.8.0
Low	GO-2026-4981	stdlib@go1.21.2	1.25.10
Low	GO-2025-3563	stdlib@go1.21.2	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.2.1	2.18.9
Low	BIT-java-2024-21208	java@11.0.20-8-5	1.8.0
Low	BIT-java-2024-21208	Java@11.0.20-8	1.8.0
Low	GO-2026-4977	stdlib@go1.21.2	1.25.10
Low	GO-2024-2610	stdlib@go1.21.2	1.21.8
Low	DLA-4259-1	systemd@247.3-7+deb11u4	247.3-7+deb11u7
Low	GO-2026-4986	stdlib@go1.21.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.7.0	0.53.0
Low	GO-2026-4918	stdlib@go1.21.2	1.25.10
Low	GO-2026-4337	stdlib@go1.21.2	1.24.13
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.43.v20210629	12.0.12
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u9	7.74.0-1.3+deb11u14
Low	GO-2026-4601	stdlib@go1.21.2	1.25.8
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u6
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.43.v20210629	no fix listed
Low	BIT-java-2024-21012	Java@11.0.20-8	11.0.23
Low	BIT-java-2024-21012	java@11.0.20-8-5	11.0.23
Low	BIT-java-2026-22021	java@11.0.20-8-5	1.8.0
Low	BIT-java-2026-22021	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-47021	Java@11.0.20-8	1.8.0
Low	BIT-java-2026-47021	java@11.0.20-8-5	1.8.0
Low	GO-2026-5026	stdlib@go1.21.2	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.7.0	0.55.0
Low	BIT-java-2025-30754	Java@11.0.20-8	1.8.0
Low	BIT-java-2025-30754	java@11.0.20-8-5	1.8.0
Low	BIT-java-2024-20945	Java@11.0.20-8	1.8.0
Low	BIT-java-2024-20945	java@11.0.20-8-5	1.8.0
Low	BIT-java-2026-46917	java@11.0.20-8-5	11.0.32

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
24.1.18latest	1 year ago	0.21.2	0542444	4,695

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/signoz/clickhouse.svg)](https://charts.stackradar.io/charts/signoz/clickhouse)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.