StackRadar

tfy-grafana Helm chart

truefoundryVerified publisher

Scored 14 Sept 2026

Truefoundry grafana provisioner

Latest 0.1.21 8 months agoApp version not verified against the render 0Artifact Hub

tfy-grafana 0.1.21 deploys 3 container images: mirror.gcr.io/library/busybox, quay.io/kiwigrid/k8s-sidecar and mirror.gcr.io/grafana/grafana. Across the 1 measured, 81 findings0 critical, 2 high 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

1,062022257

81 findings over 1 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
mirror.gcr.io/library/busybox1.31.1unmeasured
quay.io/kiwigrid/k8s-sidecar2.1.20222571,062
mirror.gcr.io/grafana/grafana12.3.0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

57 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2025-68160openssl@3.5.4-r03.5.5-r0
LowGHSA-58qw-9mgm-455vpip@25.326.1
LowALPINE-CVE-2026-27456util-linux@2.41-r92.41.6-r0
LowALPINE-CVE-2025-69418openssl@3.5.4-r03.5.5-r0
LowALPINE-CVE-2025-46394busybox@1.37.0-r191.37.0-r20
LowGHSA-6vgw-5pg2-w6jppip@25.326.0
LowALPINE-CVE-2024-58251busybox@1.37.0-r191.37.0-r20

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.21latest8 months ago0222571,062

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/truefoundry/tfy-grafana.svg)](https://charts.stackradar.io/charts/truefoundry/tfy-grafana)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.