arlas-aias 28.10.0 Helm chart

Name: arlas-aias Helm chart 28.10.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

arlas-stack

Scored 21 Oct 2026

A Helm Chart to deploy the ARLAS Exploration Stack with AIAS services

Version 28.10.0 yesterdaydeploys tag 0.21.0 0Artifact Hub

arlas-aias 28.10.0 deploys 22 container images: gisaia/agate, gisaia/airs, gisaia/aproc-proc, gisaia/aproc-service and 17 more. Across the 20 measured, 4,207 findings — 14 critical, 3 high — 2 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2.

Radar Score

46,7211437023,487

4,207 findings over 20 of 22 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images

Image	Tag	Vulnerabilities	Radar Score
gisaia/agate	0.21.0	0003	33
gisaia/airs	0.21.0	0003	33
gisaia/aproc-proc	0.21.0	—	not yet scanned
gisaia/aproc-service	0.21.0	00014	158
gisaia/fam	0.21.0	00013	148
gisaia/arlas-permissions-server	28.0.0	00953	690
gisaia/arlas-persistence-server	28.0.0	00954	701
gisaia/arlas-server	28.0.0	00953	690
gisaia/arlas-wui-builder	28.0.1	001555	847
gisaia/arlas-wui-hub	28.0.2	002065	1,049
gisaia/arlas-wui	28.0.3	001555	847
gisaia/arlas-fam-wui	0.19.0	0009	84
bitnamilegacy/kibana×2	9.0.0-debian-12-r0	—	not yet scanned
bitnamilegacy/minio	2024.12.18-debian-12-r1	1092371	5,216
ghcr.io/developmentseed/titiler	0.22.4	2272426	5,352
bitnamilegacy/os-shell×2	12-debian-12-r43	1059322	4,136
bitnamilegacy/elasticsearch×2	9.0.1-debian-12-r0	4080458	6,122
bitnamilegacy/postgresql	17.6.0-debian-12-r0	1153240	3,338
bitnamilegacy/keycloak×2	26.3.3-debian-12-r0	1085451	5,806
bitnamilegacy/rabbitmq×2	4.1.2-debian-12-r0	1049264	3,337
bitnamilegacy/redis	8.0.3-debian-12-r1	2051220	3,207
bitnamilegacy/minio	2025.4.22-debian-12-r1	1084358	4,927

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,283 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Medium	DSA-6138-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u3
Medium	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Medium	GHSA-jv87-32hw-hh99	github.com/minio/minio@v0.0.0-20241218131544-16f8cf1c52f0	no fix listed
Medium	GO-2026-5437	github.com/minio/minio@v0.0.0-20241218131544-16f8cf1c52f0	no fix listed
Medium	DEBIAN-CVE-2025-69421	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.67.1	1.83.1
Medium	BIT-java-2025-50106	java@21.0.7-9-0	1.8.0
Medium	BIT-jre-2025-50106	jre@21.0.8-12-0	1.8.0
Medium	GHSA-x4p7-7chp-64hq	keycloak-server-spi-private@26.3.3	26.5.5
Medium	GHSA-x4p7-7chp-64hq	keycloak-services@26.3.3	26.5.5
Medium	BIT-python-2025-4330	python@3.12.8-0	3.9.23
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.27.0	0.35.0
Medium	GHSA-j497-x9hr-x34x	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	BIT-python-2026-11972	python@3.12.8-0	3.10.21
Medium	BIT-java-2025-50059	java@21.0.7-9-0	11.0.28
Medium	BIT-jre-2025-50059	jre@21.0.8-12-0	11.0.28
Medium	DEBIAN-CVE-2026-27135	nghttp2@1.52.0-1+deb12u2	1.52.0-1+deb12u3
Medium	GHSA-m494-w24q-6f7w	mssql-jdbc@12.8.1	12.8.2.jre11
Medium	GHSA-3pxv-7cmr-fjr4	log4j-core@2.12.4	2.25.4
Medium	BIT-python-2025-0938	python@3.12.8-0	3.9.22
Medium	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-63072	openssl@3.0.15-1~deb12u1	3.0.22-1~deb12u1
Medium	BIT-redis-2025-46819	redis@8.0.3-1	6.2.20
Medium	DEBIAN-CVE-2025-69420	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	ALPINE-CVE-2026-80231	curl@8.19.0-r0	8.22.0-r0
Medium	BIT-postgresql-2026-15742	postgresql@17.6.0-0	14.24.0
Medium	ALPINE-CVE-2026-8927	curl@8.19.0-r0	8.22.0-r0
Medium	DEBIAN-CVE-2026-8927	curl@7.88.1-10+deb12u8	no fix listed
Medium	DEBIAN-CVE-2025-46835	git@1:2.39.5-0+deb12u2	1:2.39.5-0+deb12u3
Medium	DEBIAN-CVE-2026-28388	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.124.Final	4.1.135.Final
Medium	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.124.Final	4.1.135.Final
Medium	GHSA-4v58-74mf-rjx3	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-r9c8-gcjp-xfwh	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	GHSA-xwwf-m8fg-p9q2	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u9	no fix listed
Medium	BIT-redis-2026-25588	redis@8.0.3-1	8.2.6
Medium	BIT-redis-2026-25589	redis@8.0.3-1	8.2.6
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.24.0	0.27.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.27.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.27.0	0.52.0
Medium	GHSA-h4wv-g838-66g3	keycloak-services@26.3.3	26.5.7
Medium	DEBIAN-CVE-2026-3833	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Medium	DEBIAN-CVE-2026-40355	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.118.Final	4.1.133.Final
Medium	DEBIAN-CVE-2026-28387	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1+deb12u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
28.10.0latest	yesterday	0.21.0	1437023,487	46,721
28.9.0	1 month ago	0.19.0	1437023,568	47,434
28.8.0	1 month ago	0.18.1	1437323,536	47,774

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/arlas-stack/arlas-aias.svg)](https://charts.stackradar.io/charts/arlas-stack/arlas-aias)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.