tfy-grafana 0.1.21 Helm chart

Name: tfy-grafana Helm chart 0.1.21: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

truefoundry

Scored 14 Sept 2026

Truefoundry grafana provisioner

Version 0.1.21 8 months agoApp version not verified against the render 0Artifact Hub

tfy-grafana 0.1.21 deploys 3 container images: mirror.gcr.io/library/busybox, quay.io/kiwigrid/k8s-sidecar and mirror.gcr.io/grafana/grafana. Across the 1 measured, 81 findings — 0 critical, 2 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

1,062022257

81 findings over 1 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
mirror.gcr.io/library/busybox	1.31.1	—	unmeasured
quay.io/kiwigrid/k8s-sidecar	2.1.2	022257	1,062
mirror.gcr.io/grafana/grafana	12.3.0	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

81 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-4xh5-x5gv-qwph	pip@25.2	25.3
Low	ALPINE-CVE-2026-34181	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	ALPINE-CVE-2025-66199	openssl@3.5.4-r0	3.5.5-r0
Low	PYSEC-2026-3721	pip@25.3	26.2
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	GHSA-65pc-fj4g-8rjx	idna@3.11	3.15
Low	ALPINE-CVE-2026-42769	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.5.0	2.7.0
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-x746-7m8f-x49c	starlette@0.49.3	1.1.0
Low	ALPINE-CVE-2025-15469	openssl@3.5.4-r0	3.5.5-r0
Low	PYSEC-2026-2275	requests@2.32.5	2.33.0
Low	ALPINE-CVE-2026-42768	openssl@3.5.4-r0	3.5.7-r0
Low	PYSEC-2026-248	starlette@0.49.3	1.3.0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r10	1.2.5-r11
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-jp4c-xjxw-mgf9	pip@25.3	26.1
Low	ALPINE-CVE-2025-68160	openssl@3.5.4-r0	3.5.5-r0
Low	GHSA-58qw-9mgm-455v	pip@25.3	26.1
Low	ALPINE-CVE-2026-27456	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r19	1.37.0-r20
Low	GHSA-6vgw-5pg2-w6jp	pip@25.3	26.0
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r19	1.37.0-r20

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.21latest	8 months ago	—	022257	1,062

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/truefoundry/tfy-grafana.svg)](https://charts.stackradar.io/charts/truefoundry/tfy-grafana)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.