StackRadar

airbyte Helm chart

airbyte-v2Verified publisher

Scored 14 Sept 2026

Helm chart to deploy airbyte

Latest 2.2.0 1 month agoapp version 2.2.0 0Artifact Hub

airbyte 2.2.0 deploys 10 container images: airbyte/cron, airbyte/manifest-server, airbyte/server, temporalio/auto-setup and 6 more. Across them, 1,145 findings1 critical, 8 high 2 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-83.el9_3.7, fixed in 0:2.34-100.el9_4.2.

Radar Score

12,47318193943

1,145 findings over 10 of 10 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images
ImageTagVulnerabilitiesRadar Score
airbyte/cron2.2.0001452753
airbyte/manifest-server7.23.702512473,277
airbyte/server2.2.0001559835
temporalio/auto-setup1.27.201201331,465
airbyte/worker2.2.0001655810
airbyte/workload-api-server2.2.0001554786
airbyte/workload-launcher2.2.0001455790
airbyte/bootloader2.2.0001452753
minio/minio×2RELEASE.2023-11-20T22-40-07Z14171521,958
airbyte/db2.2.00117841,046

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

638 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-5476-xc4j-rqcvc3p0@0.9.5.40.12.0
MediumALPINE-CVE-2026-28388openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2025-69421openssl@3.3.3-r03.3.6-r0
MediumGHSA-hf6x-8p5f-cgmfhttpcore5@5.3.45.4.3
MediumGHSA-v3jc-474w-2wm6httpcore5-h2@5.3.45.4.3
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.2.9.Final4.2.15.Final
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.13.00.27.0
MediumALPINE-CVE-2026-28387openssl@3.3.3-r03.3.7-r0
MediumGHSA-58pv-8j8x-9vj2jaraco-context@5.3.06.1.0
MediumDEBIAN-CVE-2024-52005git@1:2.39.5-0+deb12u3no fix listed
MediumALPINE-CVE-2026-28389openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2026-28390openssl@3.3.3-r03.3.7-r0
MediumGHSA-jr27-m4p2-rc6rpyasn1@0.6.10.6.3
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u13no fix listed
LowALPINE-CVE-2025-69420openssl@3.3.3-r03.3.6-r0
LowDEBIAN-CVE-2026-57433perl@5.36.0-7+deb12u3no fix listed
LowPYSEC-2026-2132click@8.1.88.3.3
LowGHSA-mw54-j2v2-42hrddtrace@3.16.04.8.2
LowGHSA-g3pr-3p32-fp23micrometer-core@1.15.41.15.12
LowRHSA-2026:2786glibc@2.34-83.el9_3.70:2.34-231.el9_7.10
LowALPINE-CVE-2025-31498c-ares@1.34.3-r01.34.5-r0
LowGHSA-jv87-32hw-hh99github.com/minio/minio@v0.0.0-20231120224007-f56a182b719cno fix listed
LowALPINE-CVE-2026-27135nghttp2@1.64.0-r01.68.1
LowDEBIAN-CVE-2026-13221perl@5.36.0-7+deb12u3no fix listed
LowGHSA-63vm-454h-vhhqpyasn1@0.6.10.6.2
LowDEBIAN-CVE-2026-42496perl@5.36.0-7+deb12u3no fix listed
LowGHSA-5cx5-wh4m-82fhgithub.com/minio/minio@v0.0.0-20231120224007-f56a182b719cno fix listed
LowGHSA-527x-5wrf-22m2github.com/coredns/coredns@v1.11.11.14.0
LowGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.14.00.52.0
LowGHSA-6g7g-w4f8-9c9xgithub.com/buger/jsonparser@v1.1.11.1.2
LowGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.14.00.52.0
LowALPINE-CVE-2026-14456openssl@3.5.4-r03.5.8-r0
LowGHSA-mh63-6h87-95cpgithub.com/golang-jwt/jwt@v3.2.2+incompatibleno fix listed
LowGHSA-mh63-6h87-95cpgithub.com/golang-jwt/jwt/v4@v4.5.04.5.2
LowRHSA-2025:12876ncurses@6.2-10.20210508.el90:6.2-10.20210508.el9_6.2
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.2.9.Final4.2.13.Final
LowALPINE-CVE-2026-9076openssl@3.5.4-r03.5.7-r0
LowDEBIAN-CVE-2026-82209curl@7.88.1-10+deb12u15no fix listed
LowDEBIAN-CVE-2026-66032libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowGHSA-vx9q-rhv9-3jvgaircompressor@2.0.22.0.3
LowGHSA-63cw-r7xf-jmwrgithub.com/coredns/coredns@v1.11.11.14.3
LowDEBIAN-CVE-2026-12087perl@5.36.0-7+deb12u3no fix listed
LowGHSA-78h2-9frx-2jm8github.com/go-jose/go-jose/v4@v4.0.54.1.4
LowGHSA-jjjj-jwhf-8rgrgithub.com/minio/minio@v0.0.0-20231120224007-f56a182b719c0.0.0-20251015170045-c1a49490c78e
LowGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.58.31.83.1
LowGHSA-pwqr-wmgm-9rr8netty-codec-http@4.2.9.Final4.2.10.Final
LowGHSA-7f5h-v6xp-fcq8starlette@0.47.30.49.1
LowALPINE-CVE-2026-6732libxml2@2.13.9-r02.13.9-r1
LowGHSA-45q3-82m4-75jrnetty-handler-proxy@4.2.9.Final4.2.13.Final
LowGHSA-w737-wx49-qj23micrometer-core@1.15.41.15.12

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.2.0latest1 month ago2.2.01819394312,473

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/airbyte-v2/airbyte.svg)](https://charts.stackradar.io/charts/airbyte-v2/airbyte)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.