arlas-aias 28.10.0 Helm chart

Name: arlas-aias Helm chart 28.10.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

arlas-stack

Scored 21 Oct 2026

A Helm Chart to deploy the ARLAS Exploration Stack with AIAS services

Version 28.10.0 2 days agodeploys tag 0.21.0 0Artifact Hub

arlas-aias 28.10.0 deploys 22 container images: gisaia/agate, gisaia/airs, gisaia/aproc-proc, gisaia/aproc-service and 17 more. Across the 20 measured, 4,207 findings — 14 critical, 3 high — 2 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2.

Radar Score

46,7211437023,487

4,207 findings over 20 of 22 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images

Image	Tag	Vulnerabilities	Radar Score
gisaia/agate	0.21.0	0003	33
gisaia/airs	0.21.0	0003	33
gisaia/aproc-proc	0.21.0	—	not yet scanned
gisaia/aproc-service	0.21.0	00014	158
gisaia/fam	0.21.0	00013	148
gisaia/arlas-permissions-server	28.0.0	00953	690
gisaia/arlas-persistence-server	28.0.0	00954	701
gisaia/arlas-server	28.0.0	00953	690
gisaia/arlas-wui-builder	28.0.1	001555	847
gisaia/arlas-wui-hub	28.0.2	002065	1,049
gisaia/arlas-wui	28.0.3	001555	847
gisaia/arlas-fam-wui	0.19.0	0009	84
bitnamilegacy/kibana×2	9.0.0-debian-12-r0	—	not yet scanned
bitnamilegacy/minio	2024.12.18-debian-12-r1	1092371	5,216
ghcr.io/developmentseed/titiler	0.22.4	2272426	5,352
bitnamilegacy/os-shell×2	12-debian-12-r43	1059322	4,136
bitnamilegacy/elasticsearch×2	9.0.1-debian-12-r0	4080458	6,122
bitnamilegacy/postgresql	17.6.0-debian-12-r0	1153240	3,338
bitnamilegacy/keycloak×2	26.3.3-debian-12-r0	1085451	5,806
bitnamilegacy/rabbitmq×2	4.1.2-debian-12-r0	1049264	3,337
bitnamilegacy/redis	8.0.3-debian-12-r1	2051220	3,207
bitnamilegacy/minio	2025.4.22-debian-12-r1	1084358	4,927

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,283 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	BIT-python-2026-11940	python@3.12.8-0	3.10.21
Medium	GO-2026-4601	stdlib@go1.22.11	1.25.8
Medium	GHSA-9342-92gg-6v29	jakarta.mail@1.6.4	1.6.8
Medium	DEBIAN-CVE-2024-52005	git@1:2.39.5-0+deb12u2	no fix listed
Medium	GHSA-rc95-pcm8-65v9	quarkus-vertx-http@3.20.2.1	3.20.6.1
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.54.1	0.305.2
Medium	GO-2026-4981	stdlib@go1.22.11	1.25.10
Medium	GHSA-37gf-gmxv-74wv	keycloak-services@26.3.3	26.4.9
Medium	DEBIAN-CVE-2026-28389	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-28390	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	BIT-java-2025-21587	java@21.0.7-9-0	1.8.0
Medium	GHSA-7f5h-v6xp-fcq8	starlette@0.46.2	0.49.1
Low	GO-2026-4977	stdlib@go1.22.11	1.25.10
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	ALPINE-CVE-2026-8926	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-6653	libxml2@2.9.14+dfsg-1.3~deb12u2	no fix listed
Low	BIT-python-2026-19445	python@3.12.8-0	3.10.22
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	DEBIAN-CVE-2026-32316	jq@1.6-2.1	1.6-2.1+deb12u3
Low	GO-2026-4986	stdlib@go1.22.11	1.25.10
Low	DEBIAN-CVE-2026-40356	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5
Low	GO-2026-4918	stdlib@go1.22.11	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.29.0	0.53.0
Low	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2026-58469	wget@1.21.3-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	GHSA-9pwp-9qqc-pr26	bc-fips@1.0.2.5	1.0.2.7
Low	GHSA-9pwp-9qqc-pr26	bcprov-jdk18on@1.78.1	1.85
Low	GO-2025-3495	github.com/minio/minio@v0.0.0-20241218131544-16f8cf1c52f0	0.0.0-20250227184332-4c71f1b4ec0f
Low	ALPINE-CVE-2026-11564	curl@8.19.0-r0	8.22.0-r0
Low	DSA-5902-1	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u2
Low	BIT-postgresql-2026-15741	postgresql@17.6.0-0	14.24.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.2.1	5.2.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.5.1	4.5.2
Low	DEBIAN-CVE-2025-0840	binutils@2.40-2	no fix listed
Low	ALPINE-CVE-2026-77214	expat@2.8.5-r0	2.9.0-r0
Low	DEBIAN-CVE-2026-77214	expat@2.5.0-1+deb12u1	no fix listed
Low	BIT-postgresql-2026-14662	postgresql@17.6.0-0	14.24.0
Low	DEBIAN-CVE-2026-42013	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	BIT-python-2026-3087	python@3.12.8-0	3.10.21
Low	GHSA-6v25-8wq6-xq4j	hazelcast@5.6.0	5.7.0
Low	BIT-postgresql-2026-6478	postgresql@17.6.0-0	14.23.0
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	BIT-python-2024-9287	python@3.12.8-0	3.9.21
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.21.1	2.21.4
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.118.Final	4.1.135.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.118.Final	4.1.136.Final
Low	ALPINE-CVE-2026-11352	curl@8.19.0-r0	8.22.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
28.10.0latest	2 days ago	0.21.0	1437023,487	46,721
28.9.0	1 month ago	0.19.0	1437023,568	47,434
28.8.0	1 month ago	0.18.1	1437323,536	47,774

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/arlas-stack/arlas-aias.svg)](https://charts.stackradar.io/charts/arlas-stack/arlas-aias)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.