StackRadar

cost-analyzer 2.5.5 Helm chart

softonic

Scored 14 Sept 2026

Kubecost Helm chart - monitor your cloud costs!

Version 2.5.5 1 year agodeploys tag prod-2.5.5 0Artifact Hub

cost-analyzer 2.5.5 deploys 6 container images: gcr.io/kubecost1/cost-model, gcr.io/kubecost1/frontend, gcr.io/kubecost1/kubecost-modeling, ghcr.io/kiwigrid/k8s-sidecar and 2 more. Across them, 719 findings — 6 critical, 5 high. The highest contribution is CGA-7rrv-fg72-6q59 in nginx-mainline 1.27.4-r2, fixed in 1.31.0-r0.

Radar Score

7,90165111597

719 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
gcr.io/kubecost1/cost-model×3prod-2.5.520161571,777
gcr.io/kubecost1/frontendprod-2.5.51325481,214
gcr.io/kubecost1/kubecost-modelingv0.1.242020981,485
ghcr.io/kiwigrid/k8s-sidecar1.29.1111838791
grafana/grafana11.5.201221531,687
quay.io/prometheus/prometheusv3.2.10010103947

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

62 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.31.00.52.0
MediumCGA-jwcx-pm9x-r4g6nginx-mainline@1.27.4-r21.31.2-r0
MediumCGA-3cc9-j23w-933vnginx-mainline@1.27.4-r21.31.3-r0
MediumCGA-7g5x-r9p8-435rnginx-mainline@1.27.4-r21.31.2-r0
MediumRHSA-2026:25239openssl@1:3.2.2-6.el9_5.11:3.5.5-4.el9_8
MediumCGA-mpgm-j4f6-x8m5openssl@3.4.1-r23.6.3-r0
MediumGHSA-38jv-5279-wg99urllib3@2.3.02.6.3
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.67.11.79.3
MediumRHSA-2025:10699libxml2@2.9.13-6.el9_5.20:2.9.13-10.el9_6
MediumCGA-2mq2-wcqq-gj8wopenssl@3.4.1-r23.6.1-r0
MediumPYSEC-2025-49setuptools@75.8.278.1.1
MediumALPINE-CVE-2025-3277sqlite@3.47.1-r03.48.0-r1
MediumRHSA-2026:20612gnutls@3.8.3-4.el9_40:3.8.10-4.el9_8
MediumRHSA-2026:19177python3.12@3.12.5-2.el9_5.20:3.12.13-2.el9_8
MediumRHSA-2026:1408python3.12@3.12.5-2.el9_5.20:3.12.12-4.el9_7
MediumALPINE-CVE-2025-9230openssl@3.3.2-r13.3.5-r0
MediumCGA-2fmm-jpw2-g44pnginx-mainline@1.27.4-r21.29.7-r0
MediumALPINE-CVE-2024-12797openssl@3.3.2-r13.3.3-r0
MediumRHSA-2025:10189python3.12@3.12.5-2.el9_5.20:3.12.9-1.el9_6.1
MediumCGA-5hv9-mh2w-75gfnginx-mainline@1.27.4-r21.29.7-r0
MediumALPINE-CVE-2025-9231openssl@3.3.2-r13.3.5-r0
MediumGO-2026-4887github.com/docker/docker@v27.4.1+incompatibleno fix listed
MediumGHSA-xgrm-4fwx-7qm8github.com/jackc/pgx/v5@v5.7.15.9.0
MediumCGA-qpc2-2rgc-3w9vnginx-mainline@1.27.4-r21.29.7-r0
MediumRHSA-2025:3531expat@2.5.0-3.el9_5.10:2.5.0-3.el9_5.3
MediumGHSA-9jj7-4m8r-rfcmgithub.com/jackc/pgx/v5@v5.7.15.9.0
MediumRHSA-2026:8510libarchive@3.5.3-4.el90:3.5.3-9.el9_7
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.31.00.52.0
MediumCGA-58rp-89w2-gh83openssl@3.4.1-r23.6.3-r0
MediumRHSA-2025:7107python3.12@3.12.5-2.el9_5.20:3.12.9-1.el9
MediumGHSA-2xpw-w6gg-jr37urllib3@2.3.02.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@2.3.02.6.0
MediumCGA-3qwq-5w83-3j3qglibc@2.40-r232.43-r7
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.31.00.52.0
MediumCGA-2wwv-w5xp-m9x8openssl@3.4.1-r23.6.3-r0
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.31.00.52.0
MediumCGA-9w75-pmjm-p5h6openssl@3.4.1-r23.6.3-r0
MediumGHSA-vqfr-h8mv-ghfjh11@0.14.00.16.0
MediumALPINE-CVE-2026-31790openssl@3.3.2-r13.3.7-r0
MediumGHSA-897w-fcg9-f6xjdulwich@0.22.81.2.5
MediumCGA-g378-45wh-93f6openssl@3.4.1-r23.6.3-r0
MediumGHSA-pc3f-x583-g7j2github.com/moby/spdystream@v0.5.00.5.1
MediumRHSA-2025:11140glib2@2.68.4-14.el9_4.10:2.68.4-16.el9_6.2
MediumALPINE-CVE-2025-31115xz@5.6.3-r05.6.3-r1
MediumCGA-8rmm-cjmj-v3qhopenssl@3.4.1-r23.6.3-r0
MediumALPINE-CVE-2025-9232openssl@3.3.2-r13.3.5-r0
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.31.00.52.0
MediumCGA-3xw6-fv97-j6m5nginx-mainline@1.27.4-r21.31.3-r0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.31.00.35.0
MediumRHSA-2026:28254libxml2@2.9.13-6.el9_5.20:2.9.13-14.el9_8.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.5.5latest1 year agoprod-2.5.5651115977,901

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/softonic/cost-analyzer.svg)](https://charts.stackradar.io/charts/softonic/cost-analyzer)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.