ygdrassil-monitoring Helm chart

Name: ygdrassil-monitoring Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ygdrassil

Scored 14 Sept 2026

Metapackage to deploy Ygdrassil Project monitoring stack (Prometheus, Alertmanager, kube-static-metrics, Grafana)

Latest 0.4.0 7 months agodeploys tag v1.8.2 0Artifact Hub

ygdrassil-monitoring 0.4.0 deploys 10 container images: quay.io/prometheus/node-exporter, grafana/grafana, opensearchproject/opensearch-dashboards, registry.k8s.io/kube-state-metrics/kube-state-metrics and 6 more. Across them, 1,003 findings — 0 critical, 4 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.2-r0, fixed in 3.3.6-r0.

Radar Score

9,38104115884

1,003 findings over 10 of 10 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
grafana/grafana	11.5.1	0125154	1,743
opensearchproject/opensearch-dashboards	2.18.0	0226119	1,731
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
library/busybox	latest	0000	0
opensearchproject/opensearch×2	2.18.0	011557	942
quay.io/prometheus/alertmanager	v0.28.0	00791	785

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

420 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-6chq-wfr3-2hj9	axios@0.28.1	0.31.1
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.14.1	3.15.2
Low	GHSA-xjpj-3mr7-gcpf	handlebars@4.7.7	4.7.9
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk18on@1.78.1	1.84
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15to18@1.78.1	1.84
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.6	1.16.0
Low	ALPINE-CVE-2025-15468	openssl@3.3.2-r0	3.3.6-r0
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20220621081337-cb9428e4ac1e	0.1.1
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.52.0	0.311.3
Low	GHSA-w5hq-g745-h8pq	uuid@9.0.0	11.1.1
Low	GHSA-j452-xhg8-qg39	protocol-buffers-schema@3.6.0	3.6.1
Low	GHSA-2328-f5f3-gj25	node-forge@1.3.1	1.4.0
Low	GHSA-rp42-5vxx-qpwr	basic-ftp@5.0.5	5.3.0
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GO-2026-4341	stdlib@go1.23.5	1.24.12
Low	GHSA-67mf-3cr5-8w23	bc-fips@2.0.0	2.0.1
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.23.8	7.26.10
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v3@v3.0.3	3.0.4
Low	GHSA-3p68-rc4w-qgx5	axios@0.28.1	0.31.0
Low	GHSA-hcxc-wf8j-23hv	github.com/openfga/openfga@v1.6.2	1.18.0
Low	GHSA-479m-364c-43vc	github.com/russellhaering/goxmldsig@v1.4.0	1.6.0
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.108.Final	4.1.133.Final
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v27.4.1+incompatible	no fix listed
Low	GHSA-rmmh-p597-ppvv	showdown@1.9.1	no fix listed
Low	ALPINE-CVE-2025-26519	musl@1.2.5-r0	1.2.5-r1
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	GHSA-px8p-9vwx-vf98	fflate@0.4.8	0.4.9
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.114.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15to18@1.78.1	1.79
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk18on@1.78.1	1.79
Low	GHSA-6xff-cpcq-vpw2	github.com/grafana/tempo@v1.5.1-0.20241001135150-ed943d7a56b2	1.5.1-0.20260303204923-b13f74291d48
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.108.Final	4.1.136.Final
Low	GHSA-42h9-826w-cgv3	axios@0.28.1	0.33.0
Low	GHSA-pmv8-rq9r-6j72	axios@0.28.1	0.33.0
Low	GHSA-vhjm-w67q-g75c	@hapi/wreck@17.2.0	18.1.1
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.108.Final	4.1.136.Final
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.21.0	2.25.4
Low	GHSA-72hv-8253-57qq	jackson-core@2.17.2	2.18.6
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.33.0	1.43.0
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.108.Final	4.1.133.Final
Low	GHSA-v86x-5fm3-5p7j	github.com/prometheus/alertmanager@v0.0.0-20250115100447-4ce04fb010bd	0.25.1
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.3.7	1.6.3
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.18.0	2.18.9
Low	GHSA-m7pr-hjqh-92cm	axios@0.28.1	0.31.1
Low	GHSA-wf66-mphr-4c4r	kafka-clients@3.7.1	3.9.2
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.32.0	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.0latest	7 months ago	v1.8.2	04115884	9,381

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ygdrassil/ygdrassil-monitoring.svg)](https://charts.stackradar.io/charts/ygdrassil/ygdrassil-monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.