ygdrassil-monitoring 0.4.0 Helm chart

Name: ygdrassil-monitoring Helm chart 0.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ygdrassil

Scored 14 Sept 2026

Metapackage to deploy Ygdrassil Project monitoring stack (Prometheus, Alertmanager, kube-static-metrics, Grafana)

Version 0.4.0 7 months agodeploys tag v1.8.2 0Artifact Hub

ygdrassil-monitoring 0.4.0 deploys 10 container images: quay.io/prometheus/node-exporter, grafana/grafana, opensearchproject/opensearch-dashboards, registry.k8s.io/kube-state-metrics/kube-state-metrics and 6 more. Across them, 1,003 findings — 0 critical, 4 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.2-r0, fixed in 3.3.6-r0.

Radar Score

9,38104115884

1,003 findings over 10 of 10 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
grafana/grafana	11.5.1	0125154	1,743
opensearchproject/opensearch-dashboards	2.18.0	0226119	1,731
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.18.0	011557	942
quay.io/prometheus/alertmanager	v0.28.0	00791	785

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

420 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.16.1	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.58.3	1.97.3
Low	GHSA-58qx-3vcg-4xpx	ws@8.18.0	8.20.1
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.108.Final	4.1.136.Final
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.32.0	0.52.0
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.1	2.3.2
Low	GHSA-497x-rrr9-68jp	github.com/grafana/loki/v3@v3.2.1	3.6.4
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v27.4.1+incompatible	no fix listed
Low	GHSA-7q8q-rj6j-mhjq	axios@0.28.1	0.33.0
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.52.0	0.311.2-0.20260410083055-07c6232d159b
Low	GHSA-2c64-vmv2-hgfc	github.com/openfga/openfga@v1.6.2	1.11.1
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	GO-2024-3333	golang.org/x/net@v0.32.0	0.33.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.33.0	1.40.0
Low	GHSA-9w9f-6mg8-jp7w	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0
Low	GHSA-v8jm-5vwx-cfxm	dompurify@2.5.6	no fix listed
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.126.0	0.144.0
Low	GHSA-6v7q-wjvx-w8wg	basic-ftp@5.0.5	5.2.2
Low	GHSA-vhxf-7vqr-mrjg	dompurify@2.5.6	3.2.4
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.17.2	2.18.8
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GHSA-76mc-f452-cxcm	dompurify@2.5.6	3.4.7
Low	GO-2024-3105	stdlib@go1.22.5	1.22.7
Low	GHSA-cf98-j28v-49v6	github.com/openfga/openfga@v1.6.2	1.18.0
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@4.0.0	7.0.3
Low	GHSA-g27c-q7cp-mhx6	json-2-csv@3.20.0	5.5.11
Low	GO-2026-4981	stdlib@go1.23.5	1.25.10
Low	GO-2025-3563	stdlib@go1.23.5	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.17.2	2.18.9
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	GO-2026-4977	stdlib@go1.23.5	1.25.10
Low	GO-2026-4986	stdlib@go1.23.5	1.25.10
Low	GO-2026-4918	stdlib@go1.23.5	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.34.0	0.53.0
Low	GO-2026-4337	stdlib@go1.23.5	1.24.13
Low	GHSA-5c9x-8gcm-mpgx	axios@0.28.1	0.31.1
Low	GHSA-vf2m-468p-8v99	axios@0.28.1	0.31.1
Low	GHSA-39q2-94rc-95cp	dompurify@2.5.6	3.4.0
Low	GHSA-x426-x7cc-3fpc	@hapi/wreck@17.2.0	18.1.2
Low	GHSA-cj63-jhhr-wcxv	dompurify@2.5.6	3.3.2
Low	GHSA-h6c8-cww8-35hf	github.com/openfga/openfga@v1.6.2	1.13.1
Low	GO-2026-4601	stdlib@go1.23.5	1.25.8
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.52.0	0.311.3
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.108.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.108.Final	4.1.133.Final
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.108.Final	4.1.135.Final
Low	GHSA-rp9w-3fw7-7cwq	dompurify@2.5.6	3.4.7
Low	GO-2026-5026	stdlib@go1.23.5	1.25.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.0latest	7 months ago	v1.8.2	04115884	9,381

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ygdrassil/ygdrassil-monitoring.svg)](https://charts.stackradar.io/charts/ygdrassil/ygdrassil-monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.