clickhouse Helm chart
temp-chartsScored 14 Sept 2026
Helm chart for clickhouse.
Latest 0.7.1 3 years agodeploys tag 0.16.1 0Artifact Hub
clickhouse 0.7.1 deploys 3 container images: altinity/clickhouse-operator, altinity/metrics-exporter and library/zookeeper. Across them, 567 findings — 8 critical, 26 high — 4 on CISA KEV. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
3 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| altinity/ | 0.16.1 | 21141174 | 3,292 |
| altinity/ | 0.16.1 | 21141174 | 3,292 |
| library/ | 3.6.1 | 443964 | 2,123 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
339 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | GHSA-7286-pgfv-vxvh | zookeeper | 3.7.2 |
| Medium | RHSA-2022:6834 | expat | 0:2.1.0-15.el7_9 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | DLA-3103-1 | zlib | 1:1.2.11.dfsg-1+deb10u2 |
| Medium | RHSA-2025:12240 | libxml2 | 0:2.9.1-6.el7_9.10 |
| Medium | GHSA-86wm-rrjm-8wh8 | jetty-server | 9.4.35.v20201120 |
| Medium | GHSA-xrjj-mj9h-534m | golang.org/ | 0.4.0 |
| Medium | GHSA-vp98-w2p3-mv35 | log4j | 2.0 |
| Medium | RHSA-2024:5076 | krb5 | 0:1.15.1-55.el7_9.2 |
| Medium | RHSA-2022:0621 | openldap | 0:2.4.44-25.el7_9 |
| Medium | GHSA-qcwq-55hx-v3vh | snappy-java | 1.1.10.1 |
| Medium | GHSA-6mjq-h674-j845 | netty-handler | 4.1.94.Final |
| Medium | GHSA-69ch-w2m2-3vjp | golang.org/ | 0.3.8 |
| Medium | GO-2022-0433 | stdlib | 1.17.9 |
| Medium | RHSA-2025:2673 | libxml2 | 0:2.9.1-6.el7_9.9 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | RHSA-2021:4788 | krb5 | 0:1.15.1-51.el7_9 |
| Medium | GHSA-ppp9-7jff-5vj2 | golang.org/ | 0.3.7 |
| Medium | DSA-4942-1 | systemd | 241-7~deb10u8 |
| Medium | RHSA-2023:1332 | nss | 0:3.79.0-5.el7_9 |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | GHSA-8r3f-844c-mc37 | google.golang.org/ | 1.33.0 |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | RHSA-2023:7743 | curl | 0:7.29.0-59.el7_9.2 |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-qw69-rqj8-6qw8 | jetty-server | 9.4.51.v20230217 |
| Medium | GHSA-3x8x-79m2-3w2w | jackson-databind | 2.12.6 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | GHSA-gwc9-m7rh-j2ww | golang.org/ | 0.0.0-20211202192323-5770296d904e |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | RHSA-2023:5615 | libssh2 | 0:1.8.0-4.el7_9.1 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | DSA-4807-1 | openssl | 1.1.1d-0+deb10u4 |
| Medium | GO-2021-0243 | stdlib | 1.15.14 |
| Medium | GO-2022-0273 | stdlib | 1.16.8 |
| Medium | GHSA-p782-xgp4-8hr8 | golang.org/ | 0.0.0-20220412211240-33da011f77ad |
| Medium | GHSA-55g7-9cwv-5qfv | snappy-java | 1.1.10.4 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | DLA-3530-1 | openssl | 1.1.1n-0+deb10u6 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-6v2p-p543-phr9 | golang.org/ | 0.27.0 |
| Medium | RHSA-2026:61752 | libssh2 | 0:1.8.0-4.el7_9.2 |
| Medium | GHSA-pqr6-cmr2-h8hf | snappy-java | 1.1.10.1 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/temp-charts/clickhouse)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.