StackRadar

arlas-aias 28.10.0 Helm chart

arlas-stackVerified publisher

Scored 21 Oct 2026

A Helm Chart to deploy the ARLAS Exploration Stack with AIAS services

Version 28.10.0 2 days agodeploys tag 0.21.0 0Artifact Hub

arlas-aias 28.10.0 deploys 22 container images: gisaia/agate, gisaia/airs, gisaia/aproc-proc, gisaia/aproc-service and 17 more. Across the 20 measured, 4,207 findings — 14 critical, 3 high — 2 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2.

Radar Score

46,7211437023,487

4,207 findings over 20 of 22 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images
ImageTagVulnerabilitiesRadar Score
gisaia/agate0.21.0000333
gisaia/airs0.21.0000333
gisaia/aproc-proc0.21.0—not yet scanned
gisaia/aproc-service0.21.000014158
gisaia/fam0.21.000013148
gisaia/arlas-permissions-server28.0.000953690
gisaia/arlas-persistence-server28.0.000954701
gisaia/arlas-server28.0.000953690
gisaia/arlas-wui-builder28.0.1001555847
gisaia/arlas-wui-hub28.0.20020651,049
gisaia/arlas-wui28.0.3001555847
gisaia/arlas-fam-wui0.19.0000984
bitnamilegacy/kibana×29.0.0-debian-12-r0—not yet scanned
bitnamilegacy/minio2024.12.18-debian-12-r110923715,216
ghcr.io/developmentseed/titiler0.22.422724265,352
bitnamilegacy/os-shell×212-debian-12-r4310593224,136
bitnamilegacy/elasticsearch×29.0.1-debian-12-r040804586,122
bitnamilegacy/postgresql17.6.0-debian-12-r011532403,338
bitnamilegacy/keycloak×226.3.3-debian-12-r010854515,806
bitnamilegacy/rabbitmq×24.1.2-debian-12-r010492643,337
bitnamilegacy/redis8.0.3-debian-12-r120512203,207
bitnamilegacy/minio2025.4.22-debian-12-r110843584,927

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,070 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2023-4039gcc-12@12.2.0-1412.2.0-14+deb12u1
LowALPINE-CVE-2026-42767openssl@3.5.6-r03.5.7-r0
LowDEBIAN-CVE-2026-42767openssl@3.0.15-1~deb12u13.0.22-1~deb12u1
LowBIT-python-2024-12718python@3.12.8-03.9.23
LowBIT-python-2025-11468python@3.12.8-03.10.20
LowBIT-python-2026-15806python@3.12.8-03.10.22
LowBIT-rabbitmq-2026-67411rabbitmq@4.1.2-03.13.18
LowBIT-python-2026-0865python@3.12.8-03.10.20
LowALPINE-CVE-2026-5545curl@8.19.0-r08.20.0-r0
LowDEBIAN-CVE-2026-5545curl@7.88.1-10+deb12u8no fix listed
LowGHSA-4x37-hw65-52w8keycloak-services@26.3.326.6.2
LowALPINE-CVE-2026-89157pcre2@10.47-r010.48-r0
LowDEBIAN-CVE-2026-89157pcre2@10.42-110.42-1+deb12u1
LowBIT-elasticsearch-2026-103006elasticsearch@9.0.1-08.19.21
LowDEBIAN-CVE-2025-14819curl@7.88.1-10+deb12u87.88.1-10+deb12u15
LowBIT-keycloak-2026-17059keycloak@26.3.3-026.7.3
LowDEBIAN-CVE-2025-69649binutils@2.40-2no fix listed
LowGHSA-6cqp-g7gg-8hr5netty-codec-http@4.1.118.Final4.1.136.Final
LowBIT-python-2026-82049python@3.12.8-03.10.22
LowBIT-java-2025-30698java@21.0.7-9-01.8.0
LowGO-2026-4970stdlib@go1.22.111.25.12
LowGHSA-4mp9-239f-g9hgnetty-codec-http@4.1.118.Final4.1.136.Final
LowBIT-java-2025-53057java@21.0.7-9-01.8.0
LowBIT-jre-2025-53057jre@21.0.8-12-01.8.0
LowBIT-rabbitmq-2026-67235rabbitmq@4.1.2-03.13.15
LowDEBIAN-CVE-2026-11824sqlite3@3.40.1-2+deb12u1no fix listed
LowBIT-java-2026-47063java@21.0.7-9-01.8.0
LowBIT-jre-2026-47063jre@21.0.8-12-01.8.0
LowBIT-postgresql-2026-6476postgresql@17.6.0-017.10.0
LowBIT-keycloak-2026-18572keycloak@26.3.3-026.7.3
LowBIT-rabbitmq-2026-67233rabbitmq@4.1.2-03.13.15
LowGHSA-cpf7-j4cf-vqx4keycloak-services@26.3.3no fix listed
LowGHSA-5gvw-p9qm-jgwhjackson-databind@2.21.02.21.5
LowGHSA-f6r7-6w34-x2gpkeycloak-ldap-federation@26.3.326.6.3
LowGHSA-rwqx-fvqh-6wm4opentelemetry-javaagent@2.27.02.28.0-alpha
LowBIT-python-2026-1502python@3.12.8-03.10.21
LowBIT-rabbitmq-2026-67229rabbitmq@4.1.2-03.13.15
LowBIT-python-2026-0672python@3.12.8-03.10.20
LowDEBIAN-CVE-2025-40909perl@5.36.0-7+deb12u15.36.0-7+deb12u3
LowDEBIAN-CVE-2025-66864binutils@2.40-2no fix listed
LowGHSA-m6qj-3mpp-57v8keycloak-services@26.3.326.6.3
LowBIT-rabbitmq-2026-66071rabbitmq@4.1.2-03.13.15
LowBIT-rabbitmq-2026-67218rabbitmq@4.1.2-04.0.22
LowALPINE-CVE-2026-8458curl@8.19.0-r08.22.0-r0
LowDEBIAN-CVE-2026-8458curl@7.88.1-10+deb12u8no fix listed
LowBIT-keycloak-2026-16108keycloak@26.3.3-026.7.3
LowDEBIAN-CVE-2026-25210expat@2.5.0-1+deb12u12.5.0-1+deb12u4
LowDEBIAN-CVE-2025-14524curl@7.88.1-10+deb12u87.88.1-10+deb12u15
LowDEBIAN-CVE-2025-1147binutils@2.40-2no fix listed
LowGHSA-m4cv-j2px-7723netty-codec-http@4.1.118.Final4.1.133.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
28.10.0latest2 days ago0.21.01437023,48746,721
28.9.01 month ago0.19.01437023,56847,434
28.8.01 month ago0.18.11437323,53647,774

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/arlas-stack/arlas-aias.svg)](https://charts.stackradar.io/charts/arlas-stack/arlas-aias)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 20 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.