StackRadar

airbyte 2.4.0 Helm chart

airbyte-v2Verified publisher

Scored 10 Oct 2026

Helm chart to deploy airbyte

Version 2.4.0 yesterdayapp version 2.4.0 0Artifact Hub

airbyte 2.4.0 deploys 10 container images: airbyte/cron, airbyte/manifest-server, airbyte/server, temporalio/auto-setup and 6 more. Across them, 1,301 findings — 5 critical, 5 high — 2 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-83.el9_3.7, fixed in 0:2.34-100.el9_4.2.

Radar Score

15,315552491,042

1,301 findings over 10 of 10 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images
ImageTagVulnerabilitiesRadar Score
airbyte/cron2.4.0001355802
airbyte/manifest-server7.28.202543043,844
airbyte/server2.4.0001463916
temporalio/auto-setup1.27.210391512,169
airbyte/worker2.4.0001558879
airbyte/workload-api-server2.4.0001457854
airbyte/workload-launcher2.4.0001360865
airbyte/bootloader2.4.0001355802
airbyte/minio×2RELEASE.2023-11-20T22-40-07Z33501462,776
airbyte/db2.4.01024931,408

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

744 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2011-3374apt@2.6.1no fix listed
LowDEBIAN-CVE-2026-89161pcre2@10.42-110.42-1+deb12u1
LowGHSA-hmhp-gh8m-c8xpgo.temporal.io/server@v0.0.0-20250327224552-a31fd7a9e5db1.27.4
LowGHSA-hvcg-qmg6-jm4cnetty-codec-http@4.2.9.Final4.2.15.Final
LowRHSA-2025:4244glibc@2.34-83.el9_3.70:2.34-125.el9_5.8
LowGHSA-48p4-8xcf-vxj5urllib3@2.3.02.5.0
LowDEBIAN-CVE-2013-4392systemd@252.39-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-41989libgcrypt20@1.10.1-31.10.1-3+deb12u1
LowPYSEC-2025-183pyjwt@2.10.1no fix listed
LowALPINE-CVE-2026-75806openssl@3.3.3-r03.3.7-r2
LowDEBIAN-CVE-2026-75806openssl@3.0.20-1~deb12u2no fix listed
LowDEBIAN-CVE-2026-42014gnutls28@3.7.9-2+deb12u53.7.9-2+deb12u7
LowDEBIAN-CVE-2026-56406expat@2.5.0-1+deb12u22.5.0-1+deb12u3
LowDEBIAN-CVE-2026-56407expat@2.5.0-1+deb12u22.5.0-1+deb12u3
LowGHSA-mfg7-5gfp-c4w3netty-codec-dns@4.2.9.Final4.2.16.Final
LowGO-2026-5856stdlib@go1.24.61.25.12
LowGHSA-32fw-gq77-f2f2github.com/eclipse/paho.mqtt.golang@v1.4.31.5.1
LowGO-2026-5757github.com/minio/minio@v0.0.0-20231120224007-f56a182b719cno fix listed
LowGHSA-4v53-57pg-c464lz4-java@1.11.11.11.2
LowGHSA-6cx8-rjf8-pr8glz4-java@1.11.11.11.2
LowGHSA-gm45-99xc-r7wvlz4-java@1.11.11.11.4
LowDEBIAN-CVE-2026-56403expat@2.5.0-1+deb12u22.5.0-1+deb12u3
LowRHSA-2026:42736acl@2.3.1-3.el90:2.4.0-1.el9_8
LowDEBIAN-CVE-2026-94283libx11@2:1.8.4-2+deb12u2no fix listed
LowDEBIAN-CVE-2026-40225systemd@252.39-1~deb12u1252.39-1~deb12u2
LowGHSA-x78j-v8h9-3j2qvirtualenv@20.39.121.7.12
LowRHSA-2025:9877glibc@2.34-83.el9_3.70:2.34-168.el9_6.20
LowGHSA-42vr-xj54-vc7vpyjwt@2.10.12.15.0
LowDEBIAN-CVE-2026-78409util-linux@2.38.1-5+deb12u3no fix listed
LowGO-2025-3750stdlib@go1.21.41.23.10
LowDEBIAN-CVE-2025-68973gnupg2@2.2.40-1.1+deb12u12.2.40-1.1+deb12u2
LowDEBIAN-CVE-2023-31439systemd@252.39-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-106585openssh@1:9.2p1-2+deb12u10no fix listed
LowGHSA-x746-7m8f-x49cstarlette@0.47.31.1.0
LowDEBIAN-CVE-2026-8674glibc@2.36-9+deb12u13no fix listed
LowDEBIAN-CVE-2026-76957expat@2.5.0-1+deb12u22.5.0-1+deb12u3
LowDEBIAN-CVE-2023-31437systemd@252.39-1~deb12u1no fix listed
LowGO-2026-5027golang.org/x/net@v0.17.00.55.0
LowGO-2026-5029golang.org/x/net@v0.17.00.55.0
LowGO-2026-5030golang.org/x/net@v0.17.00.55.0
LowGHSA-qccp-gfcp-xxvcurllib3@2.3.02.7.0
LowGHSA-v8h7-rr48-vmmvnetty-codec-http@4.2.9.Final4.2.13.Final
LowDEBIAN-CVE-2026-4438glibc@2.36-9+deb12u132.36-9+deb12u14
LowDEBIAN-CVE-2026-59998openssh@1:9.2p1-2+deb12u10no fix listed
LowGHSA-5p39-cfhj-2xmpanyio@4.9.04.14.2
LowGHSA-6w46-j5rx-g56gpytest@7.4.49.0.3
LowGO-2026-4340stdlib@go1.24.61.24.12
LowDEBIAN-CVE-2023-31438systemd@252.39-1~deb12u1no fix listed
LowDEBIAN-CVE-2026-4878libcap2@1:2.66-4+deb12u21:2.66-4+deb12u3
LowDEBIAN-CVE-2026-13757p11-kit@0.24.1-2no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.4.0latestyesterday2.4.0552491,04215,315
2.3.024 days ago2.3.0552511,03915,311
2.2.01 month ago2.2.02721296013,185

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/airbyte-v2/airbyte.svg)](https://charts.stackradar.io/charts/airbyte-v2/airbyte)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 10 Oct 2026 · scanned 10 Oct 2026 · advisories as of 10 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.