airbyte 2.4.0 Helm chart

Name: airbyte Helm chart 2.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

airbyte-v2

Scored 10 Oct 2026

Helm chart to deploy airbyte

Version 2.4.0 yesterdayapp version 2.4.0 0Artifact Hub

airbyte 2.4.0 deploys 10 container images: airbyte/cron, airbyte/manifest-server, airbyte/server, temporalio/auto-setup and 6 more. Across them, 1,301 findings — 5 critical, 5 high — 2 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-83.el9_3.7, fixed in 0:2.34-100.el9_4.2.

Radar Score

15,315552491,042

1,301 findings over 10 of 10 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
airbyte/cron	2.4.0	001355	802
airbyte/manifest-server	7.28.2	0254304	3,844
airbyte/server	2.4.0	001463	916
temporalio/auto-setup	1.27.2	1039151	2,169
airbyte/worker	2.4.0	001558	879
airbyte/workload-api-server	2.4.0	001457	854
airbyte/workload-launcher	2.4.0	001360	865
airbyte/bootloader	2.4.0	001355	802
airbyte/minio×2	RELEASE.2023-11-20T22-40-07Z	3350146	2,776
airbyte/db	2.4.0	102493	1,408

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

744 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.14.0	0.45.0
Low	GO-2026-4865	stdlib@go1.24.6	1.25.9
Low	GO-2026-4982	stdlib@go1.24.6	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.17.0	0.55.0
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.2.9.Final	4.2.15.Final
Low	ALPINE-CVE-2025-10148	curl@8.12.1-r0	8.14.1-r2
Low	ALPINE-CVE-2026-78410	util-linux@2.41-r9	2.41.6-r0
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+deb12u3	no fix listed
Low	ALPINE-CVE-2026-34181	openssl@3.5.4-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-94p9-xgh2-xp45	virtualenv@20.39.1	21.7.12
Low	GHSA-p4g4-x82p-q773	pyjwt@2.10.1	2.14.0
Low	GHSA-p58f-9548-mpm2	virtualenv@20.39.1	21.7.13
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u15	no fix listed
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.12.1	1.17.7
Low	DEBIAN-CVE-2026-102633	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-87hc-h4r5-73f7	werkzeug@3.1.3	3.1.5
Low	GHSA-pq67-6m6q-mj2v	urllib3@2.3.0	2.5.0
Low	GO-2026-6091	stdlib@go1.24.6	1.25.13
Low	GO-2025-4008	stdlib@go1.24.6	1.24.8
Low	GO-2025-4010	stdlib@go1.24.6	1.24.8
Low	GHSA-hjcp-jmpx-g3qm	httpclient5@5.5	5.6.3
Low	DEBIAN-CVE-2007-2768	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	GHSA-pvcr-v8j8-j5q3	github.com/lestrrat-go/jwx@v1.2.26	1.2.28
Low	GHSA-8mcx-5rqc-vhmf	dulwich@0.22.8	1.2.9
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.59.0	1.82.1
Low	GHSA-65pc-fj4g-8rjx	idna@3.10	3.15
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.2.9.Final	4.2.17.Final
Low	DEBIAN-CVE-2026-59999	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	GO-2024-2888	stdlib@go1.21.4	1.21.11
Low	GHSA-465g-fh3v-9jw4	github.com/rabbitmq/amqp091-go@v1.9.0	1.13.0
Low	DEBIAN-CVE-2025-27587	openssl@3.0.20-1~deb12u2	no fix listed
Low	GHSA-9v7f-9g4p-ffgj	pyjwt@2.10.1	2.14.0
Low	GHSA-cm62-gvxx-vmxx	dulwich@0.22.8	1.2.8
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	GHSA-2gx3-rcp4-g85q	pyjwt@2.10.1	2.14.0
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1+deb12u2	no fix listed
Low	GHSA-w7vc-732c-9m39	pyjwt@2.10.1	2.13.0
Low	GO-2026-4976	stdlib@go1.24.6	1.25.10
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.34.0	1.40.0
Low	GO-2026-5039	stdlib@go1.24.6	1.25.11
Low	DEBIAN-CVE-2026-107708	krb5@1.20.1-2+deb12u5	no fix listed
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.6	no fix listed
Low	GHSA-xrvj-v92f-53gj	dulwich@0.22.8	1.2.5
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.4.0latest	yesterday	2.4.0	552491,042	15,315
2.3.0	24 days ago	2.3.0	552511,039	15,311
2.2.0	1 month ago	2.2.0	27212960	13,185

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/airbyte-v2/airbyte.svg)](https://charts.stackradar.io/charts/airbyte-v2/airbyte)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.