demochart Helm chart

Name: demochart Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

tech-challenge

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.0 3 years agodeploys tag latest 0Artifact Hub

demochart 0.1.0 deploys 4 container images: alexvm6/pythonalex, alexvm6/generator, grafana/grafana and prom/prometheus. Across the 3 measured, 208 findings — 2 critical, 7 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.41.2-r2, fixed in 3.41.2-r4.

Radar Score

3,6322796103

208 findings over 3 of 4 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
alexvm6/pythonalex	latest	132631	1,094
alexvm6/generator	latest	132929	1,105
grafana/grafana	5.1.0	014143	1,433
prom/prometheus	v2.2.1	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

161 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DSA-4367-1	systemd@232-25+deb9u2	232-25+deb9u7
Low	DLA-2481-1	openldap@2.4.44+dfsg-5+deb9u1	2.4.44+dfsg-5+deb9u6
Low	DLA-2760-1	nettle@3.3-1+b2	3.3-1+deb9u1
Low	DLA-2596-1	shadow@1:4.4-4.1	1:4.4-4.1+deb9u1
Low	ALPINE-CVE-2024-4603	openssl@3.1.0-r4	3.1.5-r0
Low	DLA-2771-1	krb5@1.15-1+deb9u1	1.15-1+deb9u3
Low	GHSA-wf93-45jw-7689	pip@22.3.1	26.1.2
Low	GHSA-h75v-3vvj-5mfj	jinja2@3.1.2	3.1.4
Low	GHSA-9hjg-9r4m-mvj7	requests@2.31.0	2.32.4
Low	DLA-2425-1	openldap@2.4.44+dfsg-5+deb9u1	2.4.44+dfsg-5+deb9u5
Low	GHSA-h5c8-rqwp-cp95	jinja2@3.1.2	3.1.3
Low	GHSA-29vq-49wr-vm6x	werkzeug@2.3.4	3.1.6
Low	DSA-4393-1	systemd@232-25+deb9u2	232-25+deb9u9
Low	GHSA-hgf8-39gv-g3f2	werkzeug@2.3.4	3.1.4
Low	ALPINE-CVE-2025-26519	musl@1.2.4-r0	1.2.4-r3
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.40.0	0.46.2
Low	GHSA-34jh-p97f-mpxf	urllib3@2.0.2	2.2.2
Low	GHSA-4xh5-x5gv-qwph	pip@22.3.1	25.3
Low	ALPINE-CVE-2023-2975	openssl@3.1.0-r4	3.1.1-r2
Low	GHSA-h35f-9h28-mq5c	setuptools@65.5.1	83.0.0
Low	DLA-2691-1	libgcrypt20@1.7.6-2+deb9u2	1.7.6-2+deb9u4
Low	DSA-4685-1	apt@1.4.8	1.4.10
Low	PYSEC-2026-3721	pip@22.3.1	26.2
Low	DLA-2295-1	curl@7.52.1-5+deb9u5	7.52.1-5+deb9u11
Low	GHSA-mq26-g339-26xf	pip@22.3.1	23.3
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.1.2	3.1.6
Low	DSA-4428-1	systemd@232-25+deb9u2	232-25+deb9u11
Low	ALPINE-CVE-2023-42364	busybox@1.36.0-r9	1.36.1-r7
Low	GHSA-87hc-h4r5-73f7	werkzeug@2.3.4	3.1.5
Low	ALPINE-CVE-2023-42363	busybox@1.36.0-r9	1.36.1-r7
Low	DSA-4535-1	e2fsprogs@1.43.4-2	1.43.4-2+deb9u1
Low	ALPINE-CVE-2023-42366	busybox@1.36.0-r9	1.36.1-r6
Low	ALPINE-CVE-2023-42365	busybox@1.36.0-r9	1.36.1-r7
Low	GHSA-pq67-6m6q-mj2v	urllib3@2.0.2	2.5.0
Low	DLA-2290-1	e2fsprogs@1.43.4-2	1.43.4-2+deb9u2
Low	ALPINE-CVE-2023-52426	expat@2.5.0-r1	2.6.0-r0
Low	GHSA-65pc-fj4g-8rjx	idna@3.4	3.15
Low	GHSA-9wx4-h78v-vm56	requests@2.31.0	2.32.0
Low	DSA-4231-1	libgcrypt20@1.7.6-2+deb9u2	1.7.6-2+deb9u3
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.0.2	2.7.0
Low	ALPINE-CVE-2024-13176	openssl@3.1.0-r4	3.1.8-r0
Low	GHSA-g4mx-q9vg-27p4	urllib3@2.0.2	2.0.7
Low	DLA-2830-1	tar@1.29b-1.1	1.29b-1.1+deb9u1
Low	PYSEC-2026-2275	requests@2.31.0	2.33.0
Low	DLA-3063-1	systemd@232-25+deb9u2	232-25+deb9u14
Low	PYSEC-2026-2151	flask@2.3.2	3.1.3
Low	DLA-2487-1	apt@1.4.8	1.4.11
Low	GHSA-jp4c-xjxw-mgf9	pip@22.3.1	26.1
Low	GHSA-58qw-9mgm-455v	pip@22.3.1	26.1
Low	DLA-2424-1	tzdata@2018c-0+deb9u1	2020d-0+deb9u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	3 years ago	latest	2796103	3,632

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/tech-challenge/demochart.svg)](https://charts.stackradar.io/charts/tech-challenge/demochart)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.