ygdrassil-monitoring Helm chart

Name: ygdrassil-monitoring Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ygdrassil

Scored 14 Sept 2026

Metapackage to deploy Ygdrassil Project monitoring stack (Prometheus, Alertmanager, kube-static-metrics, Grafana)

Latest 0.4.0 7 months agodeploys tag v1.8.2 0Artifact Hub

ygdrassil-monitoring 0.4.0 deploys 10 container images: quay.io/prometheus/node-exporter, grafana/grafana, opensearchproject/opensearch-dashboards, registry.k8s.io/kube-state-metrics/kube-state-metrics and 6 more. Across them, 1,003 findings — 0 critical, 4 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.2-r0, fixed in 3.3.6-r0.

Radar Score

9,38104115884

1,003 findings over 10 of 10 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
grafana/grafana	11.5.1	0125154	1,743
opensearchproject/opensearch-dashboards	2.18.0	0226119	1,731
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.18.0	011557	942
quay.io/prometheus/alertmanager	v0.28.0	00791	785

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

348 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.69.2	1.83.1
Low	GHSA-v2wj-7wpq-c8vv	dompurify@2.5.6	2.5.9
Low	GHSA-22g5-r2x5-97cx	showdown@1.9.1	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.32.0	0.52.0
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.108.Final	4.1.136.Final
Low	ALPINE-CVE-2026-22796	openssl@3.3.2-r0	3.3.6-r0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.32.0	0.45.0
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.32.0	0.52.0
Low	ALPINE-CVE-2025-10148	curl@8.11.1-r0	8.14.1-r2
Low	GHSA-cr32-g25g-vxjj	showdown@1.9.1	no fix listed
Low	GHSA-v9jr-rg53-9pgp	dompurify@3.1.5	3.4.0
Low	GHSA-w222-m46c-mgh6	github.com/openfga/openfga@v1.6.2	1.8.11
Low	GO-2024-3106	stdlib@go1.22.5	1.22.7
Low	GHSA-v2v4-37r5-5v8g	ip-address@6.4.0	10.1.1
Low	GHSA-378v-28hj-76wf	bn.js@4.12.0	4.12.3
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.69.2	1.82.1
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.108.Final	4.1.133.Final
Low	GHSA-h8r8-wccr-v5f2	dompurify@2.5.6	3.3.2
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.114.Final	4.1.115.Final
Low	GHSA-h7mw-gpvr-xq4m	dompurify@2.5.6	3.4.0
Low	GHSA-w9j2-pvgh-6h63	axios@0.28.1	0.31.1
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.108.Final	4.1.137.Final
Low	GO-2024-3107	stdlib@go1.22.5	1.22.7
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.17.2	2.18.8
Low	GHSA-cjw8-79x6-5cj4	jspdf@2.5.1	4.1.0
Low	GHSA-ffqx-q65f-36jf	github.com/grafana/tempo@v1.5.1-0.20241001135150-ed943d7a56b2	2.10.3
Low	GHSA-389x-839f-4rhx	netty-common@4.1.114.Final	4.1.118.Final
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.16.1	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.3	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.58.3	1.97.3
Low	GHSA-58qx-3vcg-4xpx	ws@8.18.0	8.20.1
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.108.Final	4.1.136.Final
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.32.0	0.52.0
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.1	2.3.2
Low	GHSA-497x-rrr9-68jp	github.com/grafana/loki/v3@v3.2.1	3.6.4
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v27.4.1+incompatible	no fix listed
Low	GHSA-7q8q-rj6j-mhjq	axios@0.28.1	0.33.0
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.52.0	0.311.2-0.20260410083055-07c6232d159b
Low	GHSA-2c64-vmv2-hgfc	github.com/openfga/openfga@v1.6.2	1.11.1
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	GO-2024-3333	golang.org/x/net@v0.32.0	0.33.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.33.0	1.40.0
Low	GHSA-9w9f-6mg8-jp7w	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0
Low	GHSA-v8jm-5vwx-cfxm	dompurify@2.5.6	no fix listed
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.126.0	0.144.0
Low	GHSA-6v7q-wjvx-w8wg	basic-ftp@5.0.5	5.2.2
Low	GHSA-vhxf-7vqr-mrjg	dompurify@2.5.6	3.2.4
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.17.2	2.18.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.0latest	7 months ago	v1.8.2	04115884	9,381

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ygdrassil/ygdrassil-monitoring.svg)](https://charts.stackradar.io/charts/ygdrassil/ygdrassil-monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.