StackRadar

cost-analyzer Helm chart

softonic

Scored 14 Sept 2026

Kubecost Helm chart - monitor your cloud costs!

Latest 2.5.5 1 year agodeploys tag prod-2.5.5 0Artifact Hub

cost-analyzer 2.5.5 deploys 6 container images: gcr.io/kubecost1/cost-model, gcr.io/kubecost1/frontend, gcr.io/kubecost1/kubecost-modeling, ghcr.io/kiwigrid/k8s-sidecar and 2 more. Across them, 719 findings — 6 critical, 5 high. The highest contribution is CGA-7rrv-fg72-6q59 in nginx-mainline 1.27.4-r2, fixed in 1.31.0-r0.

Radar Score

7,90165111597

719 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
gcr.io/kubecost1/cost-model×3prod-2.5.520161571,777
gcr.io/kubecost1/frontendprod-2.5.51325481,214
gcr.io/kubecost1/kubecost-modelingv0.1.242020981,485
ghcr.io/kiwigrid/k8s-sidecar1.29.1111838791
grafana/grafana11.5.201221531,687
quay.io/prometheus/prometheusv3.2.10010103947

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

379 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalCGA-7rrv-fg72-6q59nginx-mainline@1.27.4-r21.31.0-r0
CriticalRHSA-2026:1473openssl@1:3.2.2-6.el9_5.11:3.5.1-7.el9_7
CriticalALPINE-CVE-2025-6965sqlite@3.47.1-r03.48.0-r3
CriticalRHSA-2025:11992sqlite@3.34.1-7.el9_30:3.34.1-8.el9_6
HighALPINE-CVE-2025-15467openssl@3.3.2-r13.3.6-r0
HighCGA-272c-r2vx-c7h2nginx-mainline@1.27.4-r21.29.7-r0
HighCGA-fqhh-mxp3-x5hqnginx-mainline@1.27.4-r21.31.1-r0
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.31.00.52.0
MediumCGA-jwcx-pm9x-r4g6nginx-mainline@1.27.4-r21.31.2-r0
MediumCGA-3cc9-j23w-933vnginx-mainline@1.27.4-r21.31.3-r0
MediumCGA-7g5x-r9p8-435rnginx-mainline@1.27.4-r21.31.2-r0
MediumRHSA-2026:25239openssl@1:3.2.2-6.el9_5.11:3.5.5-4.el9_8
MediumCGA-mpgm-j4f6-x8m5openssl@3.4.1-r23.6.3-r0
MediumGHSA-38jv-5279-wg99urllib3@2.3.02.6.3
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.67.11.79.3
MediumRHSA-2025:10699libxml2@2.9.13-6.el9_5.20:2.9.13-10.el9_6
MediumCGA-2mq2-wcqq-gj8wopenssl@3.4.1-r23.6.1-r0
MediumPYSEC-2025-49setuptools@75.8.278.1.1
MediumALPINE-CVE-2025-3277sqlite@3.47.1-r03.48.0-r1
MediumRHSA-2026:20612gnutls@3.8.3-4.el9_40:3.8.10-4.el9_8
MediumRHSA-2026:19177python3.12@3.12.5-2.el9_5.20:3.12.13-2.el9_8
MediumRHSA-2026:1408python3.12@3.12.5-2.el9_5.20:3.12.12-4.el9_7
MediumALPINE-CVE-2025-9230openssl@3.3.2-r13.3.5-r0
MediumCGA-2fmm-jpw2-g44pnginx-mainline@1.27.4-r21.29.7-r0
MediumALPINE-CVE-2024-12797openssl@3.3.2-r13.3.3-r0
MediumRHSA-2025:10189python3.12@3.12.5-2.el9_5.20:3.12.9-1.el9_6.1
MediumCGA-5hv9-mh2w-75gfnginx-mainline@1.27.4-r21.29.7-r0
MediumALPINE-CVE-2025-9231openssl@3.3.2-r13.3.5-r0
MediumGO-2026-4887github.com/docker/docker@v27.4.1+incompatibleno fix listed
MediumGHSA-xgrm-4fwx-7qm8github.com/jackc/pgx/v5@v5.7.15.9.0
MediumCGA-qpc2-2rgc-3w9vnginx-mainline@1.27.4-r21.29.7-r0
MediumRHSA-2025:3531expat@2.5.0-3.el9_5.10:2.5.0-3.el9_5.3
MediumGHSA-9jj7-4m8r-rfcmgithub.com/jackc/pgx/v5@v5.7.15.9.0
MediumRHSA-2026:8510libarchive@3.5.3-4.el90:3.5.3-9.el9_7
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.31.00.52.0
MediumCGA-58rp-89w2-gh83openssl@3.4.1-r23.6.3-r0
MediumRHSA-2025:7107python3.12@3.12.5-2.el9_5.20:3.12.9-1.el9
MediumGHSA-2xpw-w6gg-jr37urllib3@2.3.02.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@2.3.02.6.0
MediumCGA-3qwq-5w83-3j3qglibc@2.40-r232.43-r7
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.31.00.52.0
MediumCGA-2wwv-w5xp-m9x8openssl@3.4.1-r23.6.3-r0
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.31.00.52.0
MediumCGA-9w75-pmjm-p5h6openssl@3.4.1-r23.6.3-r0
MediumGHSA-vqfr-h8mv-ghfjh11@0.14.00.16.0
MediumALPINE-CVE-2026-31790openssl@3.3.2-r13.3.7-r0
MediumGHSA-897w-fcg9-f6xjdulwich@0.22.81.2.5
MediumCGA-g378-45wh-93f6openssl@3.4.1-r23.6.3-r0
MediumGHSA-pc3f-x583-g7j2github.com/moby/spdystream@v0.5.00.5.1
MediumRHSA-2025:11140glib2@2.68.4-14.el9_4.10:2.68.4-16.el9_6.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.5.5latest1 year agoprod-2.5.5651115977,901

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/softonic/cost-analyzer.svg)](https://charts.stackradar.io/charts/softonic/cost-analyzer)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.