dapr Helm chart
wenermeScored 14 Sept 2026
A Helm chart for Dapr on Kubernetes
Latest 1.18.4 4 days agoapp version 1.18.4 2Artifact Hub
dapr 1.18.4 deploys 5 container images: ghcr.io/dapr/operator, ghcr.io/dapr/sentry, ghcr.io/dapr/injector, ghcr.io/dapr/placement and 1 more. Across them, 20 findings — 0 critical, 0 high. The highest contribution is GHSA-vp52-pcj8-j9qc in google.golang.org/grpc v1.82.1, fixed in 1.83.1.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 1.18.4 | 0004 | 35 |
| ghcr.io/ | 1.18.4 | 0004 | 35 |
| ghcr.io/ | 1.18.4 | 0004 | 35 |
| ghcr.io/ | 1.18.4 | 0004 | 35 |
| ghcr.io/ | 1.18.4 | 0004 | 35 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | GHSA-2v4p-qf9q-27wj | google.golang.org/ | 1.82.2 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.18.4latest | 4 days ago | 1.18.4 | 00020 | 175 |
| 1.18.3 | 30 days ago | 1.18.3 | 00037 | 262 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.