quay.io/kiwigrid/k8s-sidecar:2.5.0 container image
Quay.ioScanned 14 Sept 2026
Deployed by 6 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/kiwigrid/k8s-sidecar
quay.io/kiwigrid/k8s-sidecar:2.5.0 resolved to a6b3f707f883, scanned 14 Sept 2026: 71 findings, 0 critical; deployed by 6 charts, among them pulsar, k8s-grafana-stack and dapr-agents.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest a6b3f707f883 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-45447 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2025-11187 | openssl | 3.5.5-r0 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-34182 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-34183 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-31790 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-34180 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2025-69421 | openssl | 3.5.5-r0 |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.5.6-r0 |
| Medium | GHSA-58pv-8j8x-9vj2 | jaraco-context | 6.1.0 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.5.6-r0 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| pulsarapache | 4.7.0 | 2.5.0 | 1 |
| k8s-grafana-stackk8s-grafana-stackVerified publisher | 0.2.32 | 2.5.0 | 1 |
| dapr-agentsdapr-agents-devVerified publisher | 0.1.5 | 2.5.0 | 2 |
| prometheus-operatormesosphere | 12.11.13 | 2.5.0 | 2 |
| ccx-monitoringseveralnines | 0.6.21, 0.6.10 | 2.5.0 | 4 |
| kube-prometheus-stacksoftonic | 81.5.1 | 2.5.0 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.