ygdrassil-monitoring 0.4.0 Helm chart

Name: ygdrassil-monitoring Helm chart 0.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ygdrassil

Scored 14 Sept 2026

Metapackage to deploy Ygdrassil Project monitoring stack (Prometheus, Alertmanager, kube-static-metrics, Grafana)

Version 0.4.0 7 months agodeploys tag v1.8.2 0Artifact Hub

ygdrassil-monitoring 0.4.0 deploys 10 container images: quay.io/prometheus/node-exporter, grafana/grafana, opensearchproject/opensearch-dashboards, registry.k8s.io/kube-state-metrics/kube-state-metrics and 6 more. Across them, 1,003 findings — 0 critical, 4 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.2-r0, fixed in 3.3.6-r0.

Radar Score

9,38104115884

1,003 findings over 10 of 10 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
grafana/grafana	11.5.1	0125154	1,743
opensearchproject/opensearch-dashboards	2.18.0	0226119	1,731
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.18.0	011557	942
quay.io/prometheus/alertmanager	v0.28.0	00791	785

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

348 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-69420	openssl@3.3.2-r0	3.3.6-r0
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.2	0.5.0
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.21.0	2.25.4
Low	GHSA-445c-vh5m-36rj	log4j-core@2.21.0	2.25.4
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.32.0	0.52.0
Low	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Low	GHSA-62hf-57xw-28j9	axios@0.28.1	0.31.1
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.32.0	0.52.0
Low	GHSA-jrc7-96c5-q579	maplibre-gl@2.4.0	6.4.1
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.5.1	4.5.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.2.1	5.2.2
Low	GHSA-34x7-hfp2-rc4v	tar@6.2.1	7.5.7
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.108.Final	4.1.133.Final
Low	GHSA-8mvj-3j78-4qmw	jspdf@2.5.1	3.0.2
Low	GHSA-mw3v-mmfw-3x2g	opensearch-common@2.18.0	2.19.4
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.7.1	3.9.2
Low	GHSA-3g43-6gmg-66jw	axios@0.28.1	0.31.1
Low	GHSA-ph9p-34f9-6g65	tmp@0.2.1	0.2.6
Low	GHSA-pqxr-3g65-p328	jspdf@2.5.1	4.1.0
Low	GHSA-554w-wpv2-vw27	node-forge@1.3.1	1.3.2
Low	GHSA-hfxv-24rg-xrqf	axios@0.28.1	0.32.0
Low	GHSA-j5f8-grm9-p9fc	axios@0.28.1	0.32.0
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v3@v3.0.3	3.0.5
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.69.2	1.83.1
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.108.Final	4.1.132.Final
Low	GHSA-p4r4-xvrq-gvmc	github.com/grafana/tempo@v1.5.1-0.20241001135150-ed943d7a56b2	2.8.4
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.114.Final	4.1.133.Final
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-9cx6-37pm-9jff	handlebars@4.7.7	4.7.9
Low	GHSA-r277-6w6q-xmqw	github.com/getkin/kin-openapi@v0.126.0	0.144.0
Low	GHSA-574f-3g2m-x479	bcprov-jdk18on@1.78.1	1.80.2
Low	GHSA-574f-3g2m-x479	bcprov-jdk15to18@1.78.1	no fix listed
Low	GHSA-5m6q-g25r-mvwx	node-forge@1.3.1	1.4.0
Low	GHSA-pq2g-wx69-c263	json-smart@2.5.0	2.5.2
Low	GHSA-pmwg-cvhr-8vh7	axios@0.28.1	0.31.1
Low	GHSA-qffp-2rhf-9h96	tar@6.2.1	7.5.10
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.114.Final	4.1.137.Final
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-wfv2-pwc8-crg5	jspdf@2.5.1	4.2.1
Low	GHSA-52cp-r559-cp3m	js-yaml@3.14.1	3.15.0
Low	GHSA-q67f-28xg-22rw	node-forge@1.3.1	1.4.0
Low	ALPINE-CVE-2026-31789	openssl@3.3.2-r0	3.3.7-r0
Low	ALPINE-CVE-2025-69419	openssl@3.3.2-r0	3.3.6-r0
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.0	4.0.6
Low	GHSA-p5xg-68wr-hm3m	jspdf@2.5.1	4.2.0
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/selinux@v1.11.0	1.13.0
Low	GHSA-wq9g-9vfc-cfq9	github.com/getkin/kin-openapi@v0.126.0	0.131.0
Low	GHSA-7r86-cg39-jmmj	minimatch@3.1.2	3.1.3
Low	GHSA-36hh-x5p5-jgc8	@hapi/content@5.0.2	6.0.2
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.0latest	7 months ago	v1.8.2	04115884	9,381

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ygdrassil/ygdrassil-monitoring.svg)](https://charts.stackradar.io/charts/ygdrassil/ygdrassil-monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.