airbyte 2.4.0 Helm chart

Name: airbyte Helm chart 2.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

airbyte-v2

Scored 10 Oct 2026

Helm chart to deploy airbyte

Version 2.4.0 yesterdayapp version 2.4.0 0Artifact Hub

airbyte 2.4.0 deploys 10 container images: airbyte/cron, airbyte/manifest-server, airbyte/server, temporalio/auto-setup and 6 more. Across them, 1,301 findings — 5 critical, 5 high — 2 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-83.el9_3.7, fixed in 0:2.34-100.el9_4.2.

Radar Score

15,315552491,042

1,301 findings over 10 of 10 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
airbyte/cron	2.4.0	001355	802
airbyte/manifest-server	7.28.2	0254304	3,844
airbyte/server	2.4.0	001463	916
temporalio/auto-setup	1.27.2	1039151	2,169
airbyte/worker	2.4.0	001558	879
airbyte/workload-api-server	2.4.0	001457	854
airbyte/workload-launcher	2.4.0	001360	865
airbyte/bootloader	2.4.0	001355	802
airbyte/minio×2	RELEASE.2023-11-20T22-40-07Z	3350146	2,776
airbyte/db	2.4.0	102493	1,408

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

590 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-31498	c-ares@1.34.3-r0	1.34.5-r0
Low	GO-2026-4977	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	GHSA-mw54-j2v2-42hr	ddtrace@3.16.0	4.8.2
Low	RHSA-2026:2786	glibc@2.34-83.el9_3.7	0:2.34-231.el9_7.10
Low	GHSA-h75p-j8xm-m278	github.com/coredns/coredns@v1.11.1	1.14.2
Low	GO-2026-4986	stdlib@go1.24.6	1.25.10
Low	GO-2026-4918	stdlib@go1.24.6	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.17.0	0.53.0
Low	ALPINE-CVE-2026-42764	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.4-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	GHSA-527x-5wrf-22m2	github.com/coredns/coredns@v1.11.1	1.14.0
Low	GHSA-63vm-454h-vhhq	pyasn1@0.6.1	0.6.2
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	GHSA-9pwp-9qqc-pr26	bcprov-jdk18on@1.79	1.85
Low	GO-2025-3495	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	no fix listed
Low	GO-2024-2599	stdlib@go1.21.4	1.21.8
Low	DEBIAN-CVE-2026-42013	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt@v3.2.2+incompatible	no fix listed
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.5.0	4.5.2
Low	ALPINE-CVE-2026-14456	openssl@3.5.4-r0	3.5.8-r0
Low	RHSA-2025:12876	ncurses@6.2-10.20210508.el9	0:6.2-10.20210508.el9_6.2
Low	GHSA-c653-97m9-rcg9	netty-handler@4.2.9.Final	4.2.15.Final
Low	GHSA-8hjv-92q9-g4xj	micronaut-context@4.10.18	4.10.22
Low	GHSA-558v-64gr-wgg4	netty-codec-compression@4.2.9.Final	4.2.16.Final
Low	DEBIAN-CVE-2026-77214	expat@2.5.0-1+deb12u2	no fix listed
Low	ALPINE-CVE-2026-9076	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.4-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-66032	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.2.9.Final	4.2.10.Final
Low	GHSA-jjjj-jwhf-8rgr	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	0.0.0-20251015170045-c1a49490c78e
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.2.9.Final	4.2.13.Final
Low	DEBIAN-CVE-2026-12087	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.2.9.Final	4.2.16.Final
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.2.9.Final	4.2.16.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.2.9.Final	4.2.16.Final
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	GO-2025-4009	stdlib@go1.24.6	1.24.8
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.2.9.Final	4.2.13.Final
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u1	no fix listed
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.0.5	4.1.4
Low	GHSA-wqp7-x3pw-xc5r	starlette@0.47.3	1.1.0
Low	GO-2025-4006	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2026-7598	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2026-82560	perl@5.36.0-7+deb12u3	no fix listed
Low	GO-2026-5942	golang.org/x/net@v0.17.0	0.56.0
Low	DEBIAN-CVE-2026-93990	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.14.0	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.4.0latest	yesterday	2.4.0	552491,042	15,315
2.3.0	24 days ago	2.3.0	552511,039	15,311
2.2.0	1 month ago	2.2.0	27212960	13,185

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/airbyte-v2/airbyte.svg)](https://charts.stackradar.io/charts/airbyte-v2/airbyte)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.