cost-analyzer 1.82.2 Helm chart
statcanScored 14 Sept 2026
Kubecost
Version 1.82.2 3 years agodeploys tag v0.18.1 0Artifact Hub
cost-analyzer 1.82.2 deploys 9 container images: prom/node-exporter, kiwigrid/k8s-sidecar, grafana/grafana, quay.io/coreos/kube-state-metrics and 5 more. Across the 8 measured, 1,131 findings — 7 critical, 47 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
9 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| prom/ | v0.18.1 | 0000 | 0 |
| kiwigrid/ | 1.12.0 | 154726 | 1,776 |
| grafana/ | 7.5.6 | 1749179 | 3,120 |
| quay.io/ | v1.9.8 | — | unmeasured |
| jimmidyson/ | v0.3.0 | 0000 | 0 |
| prom/ | v2.22.2 | 0440210 | 2,811 |
| gcr.io/ | prod-1.82.2 | 11048173 | 3,211 |
| gcr.io/ | prod-1.82.2 | 18368 | 1,467 |
| gcr.io/ | prod-1.82.2 | 31367194 | 4,121 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
453 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-5064 | github.com/ | no fix listed |
| Low | GHSA-xc8m-28vv-4pjc | k8s.io/ | 1.24.14 |
| Low | GHSA-f9jg-8p32-2f55 | k8s.io/ | 1.26.0-alpha.3 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | GO-2026-6303 | golang.org/ | 0.55.0 |
| Low | GHSA-jp4c-xjxw-mgf9 | pip | 26.1 |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | GO-2025-3547 | k8s.io/ | no fix listed |
| Low | GO-2026-4982 | stdlib | 1.25.10 |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | GO-2026-5338 | github.com/ | no fix listed |
| Low | GO-2025-3750 | stdlib | 1.23.10 |
| Low | GO-2026-4864 | stdlib | 1.25.9 |
| Low | GO-2025-3447 | stdlib | 1.22.12 |
| Low | GO-2026-4865 | stdlib | 1.25.9 |
| Low | GO-2026-4869 | stdlib | 1.25.9 |
| Low | GO-2026-4340 | stdlib | 1.24.12 |
| Low | GO-2025-4175 | stdlib | 1.24.11 |
| Low | GHSA-7ww5-4wqc-m92c | github.com/ | 1.6.26 |
| Low | GHSA-jq35-85cj-fj4p | github.com/ | 20.10.27 |
| Low | GHSA-xmmx-7jpf-fx42 | github.com/ | 20.10.11 |
| Low | GO-2026-4403 | stdlib | 1.23.9 |
| Low | GO-2026-5025 | golang.org/ | 0.55.0 |
| Low | GO-2026-4970 | stdlib | 1.25.12 |
| Low | GO-2022-0635 | github.com/ | no fix listed |
| Low | GO-2026-5027 | golang.org/ | 0.55.0 |
| Low | GO-2026-5029 | golang.org/ | 0.55.0 |
| Low | GO-2026-5030 | golang.org/ | 0.55.0 |
| Low | GHSA-58qw-9mgm-455v | pip | 26.1 |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
| Low | GO-2026-5622 | github.com/ | no fix listed |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | GO-2022-0360 | github.com/ | 1.4.12 |
| Low | GO-2022-0379 | github.com/ | 2.8.0+incompatible |
| Low | GO-2022-0965 | k8s.io/ | 0.0.0-20190927203648-9ce6eca90e73 |
| Low | GO-2022-1107 | github.com/ | 20.10.20+incompatible |
| Low | GO-2023-2153 | google.golang.org/ | 1.56.3 |
| Low | GO-2023-2412 | github.com/ | 1.6.26 |
| Low | GO-2024-2846 | github.com/ | 1.5.11 |
| Low | GO-2024-2914 | github.com/ | 20.10.11+incompatible |
| Low | GO-2026-4760 | github.com/ | 0.11.0 |
| Low | GO-2026-4764 | github.com/ | 0.11.0 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6061 | google.golang.org/ | 1.82.1 |
| Low | GO-2026-6278 | github.com/ | 1.5.3 |
| Low | GHSA-v994-f8vw-g7j4 | github.com/ | 20.10.9 |
| Low | GHSA-4vq8-7jfc-9cvp | github.com/ | 25.0.13 |
| Low | GHSA-6vgw-5pg2-w6jp | pip | 26.0 |
| Low | GHSA-5j5w-g665-5m35 | github.com/ | 1.4.12 |
| Low | GHSA-77vh-xpmg-72qh | github.com/ | 1.0.2 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/statcan/cost-analyzer)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.