alertmanager

Helm chart
prometheus-community repositoryon Artifact Hub 59#86 by starsofficialverified publisher

The Alertmanager handles alerts sent by client applications such as the Prometheus server.

latest 1.42.0kube >=1.25.0-0app version v0.34.0
README badge
[![Radar Score](https://charts.stackradar.io/badge/prometheus-community/alertmanager.svg)](https://charts.stackradar.io/charts/prometheus-community/alertmanager)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

Radar Score

28
worst finding Low
Critical
0
High
0
Medium
0
Low
5
On CISA KEV
0
Exploited (EPSS ≥ 0.1)
0

5 findings over 1 of 1 images measured · scored 2 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Upgrade delta from 0.33.1 not yet computed: both versions need a scan.

History

Radar Score of 1.42.0, one sample per day, last 90 days. Hover a point for its date and advisory data.

2 Sept 2026 · Radar Score 28 · OSV as of 2 Sept 2026
history since 2 Sept 2026

Score moves

A score can move without the chart changing: the advisory data behind every finding is refreshed daily. Each move lists which inputs changed. Why a score moves

Fewer than two samples so far.

Findings

5 distinct across the version’s images

AdvisoryPackageFixed inContributionEPSSSinceDigests
GHSA-vp52-pcj8-j9qc

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

google.golang.org/grpc@v1.82.1golang1.83.19/1002 Sept 2026690c7b525f43
GO-2026-6303

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

golang.org/x/crypto@v0.54.0golang0.55.06/1000.003 (25th pct)2 Sept 2026690c7b525f43
GO-2026-6180

Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb

golang.org/x/mod@v0.38.0golang0.40.06/1000.003 (22th pct)2 Sept 2026690c7b525f43
GO-2026-6179

Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog

golang.org/x/mod@v0.38.0golang0.40.04/1000.001 (1th pct)2 Sept 2026690c7b525f43
GO-2026-5932

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

golang.org/x/crypto@v0.54.0golangno fix listed4/1002 Sept 2026690c7b525f43

Workloads and images

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

ContainerImageTagDigestRadar Score
StatefulSet candidate-alertmanager
alertmanagerquay.io/prometheus/alertmanagerv0.34.0690c7b525f4328

Unmeasured images (0)

Every image the render resolved has a scan.

Indexed versions

The latest version and the previous major, as selected nightly from the repository’s index.

VersionApp versionRadar ScoreBandMeasuredRender
1.42.0latestv0.34.028Low1 / 1rendered 2 Sept 2026
0.33.1previous majorv0.25.00 / 1rendered 2 Sept 2026

helm v3.16.4 · syft 1.42.1 · rendered 2 Sept 2026 · scanned 2 Sept 2026 · advisories as of 2 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.