cost-analyzer 1.82.2 Helm chart
statcanScored 14 Sept 2026
Kubecost
Version 1.82.2 3 years agodeploys tag v0.18.1 0Artifact Hub
cost-analyzer 1.82.2 deploys 9 container images: prom/node-exporter, kiwigrid/k8s-sidecar, grafana/grafana, quay.io/coreos/kube-state-metrics and 5 more. Across the 8 measured, 1,131 findings — 7 critical, 47 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
9 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| prom/ | v0.18.1 | 0000 | 0 |
| kiwigrid/ | 1.12.0 | 154726 | 1,776 |
| grafana/ | 7.5.6 | 1749179 | 3,120 |
| quay.io/ | v1.9.8 | — | unmeasured |
| jimmidyson/ | v0.3.0 | 0000 | 0 |
| prom/ | v2.22.2 | 0440210 | 2,811 |
| gcr.io/ | prod-1.82.2 | 11048173 | 3,211 |
| gcr.io/ | prod-1.82.2 | 18368 | 1,467 |
| gcr.io/ | prod-1.82.2 | 31367194 | 4,121 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
453 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GO-2022-0273 | stdlib | 1.16.8 |
| Medium | GHSA-p782-xgp4-8hr8 | golang.org/ | 0.0.0-20220412211240-33da011f77ad |
| Medium | GHSA-4f99-4q7p-p3gh | github.com/ | 1.8.3 |
| Medium | GHSA-x3jr-pf6g-c48f | golang.org/ | 0.0.0-20190424203555-c05e17bb3b2d |
| Medium | GHSA-5mqj-xc49-246p | github.com/ | 0.4.13 |
| Medium | GHSA-hqxw-f8mx-cpmw | github.com/ | 2.8.2-beta.1 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | GHSA-82hx-w2r5-c2wq | k8s.io/ | 0.15.10 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-6v2p-p543-phr9 | golang.org/ | 0.27.0 |
| Medium | GHSA-8rm2-7qqf-34qm | github.com/ | 0.305.2 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Medium | GHSA-5xp3-jfq3-5q8x | pip | 21.1 |
| Low | ALPINE-CVE-2021-20205 | libjpeg-turbo | 2.1.0-r0 |
| Low | ALPINE-CVE-2022-27774 | curl | 7.79.1-r1 |
| Low | ALPINE-CVE-2021-22924 | curl | 7.78.0-r0 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | GHSA-qc2g-gmh6-95p4 | k8s.io/ | 1.24.15 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | GHSA-f6mq-5m25-4r72 | go.mongodb.org/ | 1.5.1 |
| Low | GO-2021-0263 | stdlib | 1.16.10 |
| Low | ALPINE-CVE-2021-40528 | libgcrypt | 1.8.8-r1 |
| Low | GO-2023-1571 | stdlib | 1.19.6 |
| Low | ALPINE-CVE-2021-22923 | curl | 7.78.0-r0 |
| Low | GHSA-vv39-3w5q-974q | k8s.io/ | 1.29.13 |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-h7wq-jj8r-qm7p | k8s.io/ | 1.27.0-alpha.1 |
| Low | GO-2022-0435 | stdlib | 1.17.9 |
| Low | GHSA-6hwg-w5jg-9c6x | github.com/ | 19.03.9 |
| Low | GHSA-8wv5-x4w7-5gww | github.com/ | 0.24.0 |
| Low | GO-2022-0288 | stdlib | 1.16.12 |
| Low | GO-2022-0288 | golang.org/ | 0.0.0-20211209124913-491a49abca63 |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | GHSA-xqr8-7jwr-rhp7 | certifi | 2023.7.22 |
| Low | GO-2022-0236 | stdlib | 1.15.12 |
| Low | ALPINE-CVE-2023-0465 | openssl | 1.1.1t-r2 |
| Low | GHSA-jphm-g89m-v42p | github.com/ | no fix listed |
| Low | GO-2021-0240 | stdlib | 1.15.13 |
| Low | GHSA-grj5-8x6q-hc9q | github.com/ | 2.3.0 |
| Low | GO-2021-0242 | stdlib | 1.15.13 |
| Low | GHSA-33pg-m6jh-5237 | github.com/ | 20.10.24 |
| Low | GHSA-3x58-xr87-2fcj | github.com/ | 1.0.5 |
| Low | GO-2021-0264 | stdlib | 1.16.10 |
| Low | GO-2022-0969 | stdlib | 1.18.6 |
| Low | GO-2021-0239 | stdlib | 1.15.13 |
| Low | GO-2021-0347 | stdlib | 1.16.15 |
| Low | GO-2021-0245 | stdlib | 1.15.15 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-c72p-9xmj-rx3w | github.com/ | 1.4.8 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/statcan/cost-analyzer)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.