StackRadar

cost-analyzer Helm chart

softonic

Scored 15 Sept 2026

Kubecost Helm chart - monitor your cloud costs!

Latest 2.5.5 1 year agodeploys tag prod-2.5.5 0Artifact Hub

cost-analyzer 2.5.5 deploys 6 container images: gcr.io/kubecost1/cost-model, gcr.io/kubecost1/frontend, gcr.io/kubecost1/kubecost-modeling, ghcr.io/kiwigrid/k8s-sidecar and 2 more. Across them, 721 findings3 critical, 8 high. The highest contribution is CGA-7rrv-fg72-6q59 in nginx-mainline 1.27.4-r2, fixed in 1.31.0-r0.

Radar Score

7,93538113597

721 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
gcr.io/kubecost1/cost-model×3prod-2.5.511171571,794
gcr.io/kubecost1/frontendprod-2.5.51325481,214
gcr.io/kubecost1/kubecost-modelingv0.1.241121981,503
ghcr.io/kiwigrid/k8s-sidecar1.29.1021838790
grafana/grafana11.5.201221531,687
quay.io/prometheus/prometheusv3.2.10010103947

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

310 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGO-2026-6094github.com/google/cel-go@v0.22.00.30.0
LowGO-2026-6278github.com/gorilla/websocket@v1.5.01.5.3
LowALPINE-CVE-2025-46394busybox@1.36.1-r291.36.1-r31
LowGHSA-4vq8-7jfc-9cvpgithub.com/docker/docker@v27.4.1+incompatible28.0.0
LowRHSA-2026:39317libxml2@2.9.13-6.el9_5.20:2.9.13-14.el9_8.2
LowGHSA-j88v-2chj-qfwxgithub.com/jackc/pgx/v5@v5.7.15.9.2
LowGHSA-73h3-mf4w-8647poetry@2.1.12.3.4
LowGHSA-6vgw-5pg2-w6jppip@25.0.126.0
LowALPINE-CVE-2024-58251busybox@1.36.1-r291.36.1-r31
LowGHSA-4grg-w6v8-c28gflask@3.1.03.1.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.5.5latest1 year agoprod-2.5.5381135977,935

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/softonic/cost-analyzer.svg)](https://charts.stackradar.io/charts/softonic/cost-analyzer)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.