cost-analyzer 2.5.5 Helm chart

Name: cost-analyzer Helm chart 2.5.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

softonic

Scored 14 Sept 2026

Kubecost Helm chart - monitor your cloud costs!

Version 2.5.5 1 year agodeploys tag prod-2.5.5 0Artifact Hub

cost-analyzer 2.5.5 deploys 6 container images: gcr.io/kubecost1/cost-model, gcr.io/kubecost1/frontend, gcr.io/kubecost1/kubecost-modeling, ghcr.io/kiwigrid/k8s-sidecar and 2 more. Across them, 719 findings — 6 critical, 5 high. The highest contribution is CGA-7rrv-fg72-6q59 in nginx-mainline 1.27.4-r2, fixed in 1.31.0-r0.

Radar Score

7,90165111597

719 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
gcr.io/kubecost1/cost-model×3	prod-2.5.5	2016157	1,777
gcr.io/kubecost1/frontend	prod-2.5.5	132548	1,214
gcr.io/kubecost1/kubecost-modeling	v0.1.24	202098	1,485
ghcr.io/kiwigrid/k8s-sidecar	1.29.1	111838	791
grafana/grafana	11.5.2	0122153	1,687
quay.io/prometheus/prometheus	v3.2.1	0010103	947

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

310 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-69420	openssl@3.3.2-r1	3.3.6-r0
Low	PYSEC-2026-2132	click@8.1.8	8.3.3
Low	RHSA-2026:2786	glibc@2.34-125.el9_5.3	0:2.34-231.el9_7.10
Low	RHSA-2026:7668	nghttp2@1.43.0-6.el9	0:1.43.0-6.el9_7.1
Low	GHSA-63vm-454h-vhhq	pyasn1@0.6.1	0.6.2
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.31.0	0.52.0
Low	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.31.0	0.52.0
Low	RHSA-2026:10745	python3.12@3.12.5-2.el9_5.2	0:3.12.12-4.el9_7.3
Low	CGA-35mx-c7ph-5wqg	openssl@3.4.1-r2	3.6.3-r5
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.5.1	4.5.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.2.1	5.2.2
Low	RHSA-2025:12876	ncurses@6.2-10.20210508.el9	0:6.2-10.20210508.el9_6.2
Low	CGA-847w-c3x7-8qp6	openssl@3.4.1-r2	3.6.3-r0
Low	RHSA-2026:5080	libarchive@3.5.3-4.el9	0:3.5.3-7.el9_7
Low	RHSA-2026:59009	python3.12@3.12.5-2.el9_5.2	0:3.12.14-1.el9_8
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v3@v3.0.3	3.0.5
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.67.1	1.83.1
Low	RHSA-2025:21255	openssl@1:3.2.2-6.el9_5.1	1:3.5.1-4.el9_7
Low	RHSA-2025:15007	python3.12@3.12.5-2.el9_5.2	0:3.12.9-1.el9_6.2
Low	GHSA-p4r4-xvrq-gvmc	github.com/grafana/tempo@v1.5.1-0.20241001135150-ed943d7a56b2	2.8.4
Low	RHSA-2026:39771	python3.12@3.12.5-2.el9_5.2	0:3.12.13-3.el9_8.1
Low	CGA-9f7x-88h6-rvv4	glibc@2.40-r23	2.42-r6
Low	RHSA-2025:13428	libxml2@2.9.13-6.el9_5.2	0:2.9.13-12.el9_6
Low	GHSA-r277-6w6q-xmqw	github.com/getkin/kin-openapi@v0.126.0	0.144.0
Low	CGA-35p6-397x-pf84	nginx-mainline@1.27.4-r2	1.31.3-r0
Low	RHSA-2026:55440	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.9
Low	RHSA-2025:3631	python3.12@3.12.5-2.el9_5.2	0:3.12.5-2.el9_5.3
Low	CGA-jg28-qhp6-7wvw	openssl@3.4.1-r2	3.6.3-r0
Low	CGA-6ph6-75jp-484p	zlib@1.3.1-r6	1.3.3-r0
Low	RHSA-2026:55439	curl@7.76.1-31.el9	0:7.76.1-40.el9_8.5
Low	RHSA-2026:28253	libtasn1@4.16.0-8.el9_1	0:4.16.0-10.el9_8
Low	CGA-2g56-xw2x-g9cx	openssl@3.4.1-r2	3.6.2-r0
Low	CGA-2mgg-q5mj-634r	glibc@2.40-r23	2.42-r6
Low	RHSA-2026:42089	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.2
Low	ALPINE-CVE-2026-31789	openssl@3.3.2-r1	3.3.7-r0
Low	ALPINE-CVE-2025-69419	openssl@3.3.2-r1	3.3.6-r0
Low	RHSA-2026:15971	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.2
Low	RHSA-2026:19361	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.1
Low	GHSA-wq9g-9vfc-cfq9	github.com/getkin/kin-openapi@v0.126.0	0.131.0
Low	CGA-9fv6-c4c7-7xwr	openssl@3.4.1-r2	3.6.3-r0
Low	ALPINE-CVE-2025-29087	sqlite@3.47.1-r0	3.48.0-r1
Low	CGA-423r-p3g2-v2wq	openssl@3.4.1-r2	3.6.3-r0
Low	RHSA-2026:19218	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-2.el9_8
Low	RHSA-2026:27744	openssl-fips-provider@3.0.7-6.el9_5	0:3.0.7-11.el9_8
Low	RHSA-2026:1350	curl@7.76.1-31.el9	0:7.76.1-35.el9_7.3
Low	GHSA-6v7p-g79w-8964	msgpack@1.1.0	1.2.1
Low	RHSA-2026:52674	libarchive@3.5.3-4.el9	0:3.5.3-11.el9_8
Low	RHSA-2025:14130	libarchive@3.5.3-4.el9	0:3.5.3-6.el9_6
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r1	1.3.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.5.5latest	1 year ago	prod-2.5.5	65111597	7,901

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/softonic/cost-analyzer.svg)](https://charts.stackradar.io/charts/softonic/cost-analyzer)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.