arlas-aias 28.10.0 Helm chart

Name: arlas-aias Helm chart 28.10.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

arlas-stack

Scored 21 Oct 2026

A Helm Chart to deploy the ARLAS Exploration Stack with AIAS services

Version 28.10.0 2 days agodeploys tag 0.21.0 0Artifact Hub

arlas-aias 28.10.0 deploys 22 container images: gisaia/agate, gisaia/airs, gisaia/aproc-proc, gisaia/aproc-service and 17 more. Across the 20 measured, 4,207 findings — 14 critical, 3 high — 2 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2.

Radar Score

46,7211437023,487

4,207 findings over 20 of 22 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images

Image	Tag	Vulnerabilities	Radar Score
gisaia/agate	0.21.0	0003	33
gisaia/airs	0.21.0	0003	33
gisaia/aproc-proc	0.21.0	—	not yet scanned
gisaia/aproc-service	0.21.0	00014	158
gisaia/fam	0.21.0	00013	148
gisaia/arlas-permissions-server	28.0.0	00953	690
gisaia/arlas-persistence-server	28.0.0	00954	701
gisaia/arlas-server	28.0.0	00953	690
gisaia/arlas-wui-builder	28.0.1	001555	847
gisaia/arlas-wui-hub	28.0.2	002065	1,049
gisaia/arlas-wui	28.0.3	001555	847
gisaia/arlas-fam-wui	0.19.0	0009	84
bitnamilegacy/kibana×2	9.0.0-debian-12-r0	—	not yet scanned
bitnamilegacy/minio	2024.12.18-debian-12-r1	1092371	5,216
ghcr.io/developmentseed/titiler	0.22.4	2272426	5,352
bitnamilegacy/os-shell×2	12-debian-12-r43	1059322	4,136
bitnamilegacy/elasticsearch×2	9.0.1-debian-12-r0	4080458	6,122
bitnamilegacy/postgresql	17.6.0-debian-12-r0	1153240	3,338
bitnamilegacy/keycloak×2	26.3.3-debian-12-r0	1085451	5,806
bitnamilegacy/rabbitmq×2	4.1.2-debian-12-r0	1049264	3,337
bitnamilegacy/redis	8.0.3-debian-12-r1	2051220	3,207
bitnamilegacy/minio	2025.4.22-debian-12-r1	1084358	4,927

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,283 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-93990	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u4
Low	GHSA-rp95-xpg9-c2cq	keycloak-services@26.3.3	26.6.2
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.27.0	0.52.0
Low	GO-2025-3485	github.com/go-jose/go-jose/v4@v4.0.4	4.0.5
Low	GHSA-hcvw-475w-8g7p	keycloak-services@26.3.3	26.4.9
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-54874	openssl@3.0.15-1~deb12u1	3.0.22-1~deb12u1
Low	GO-2026-4870	stdlib@go1.22.11	1.25.9
Low	DEBIAN-CVE-2026-41992	gzip@1.12-1	no fix listed
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.27.0	0.52.0
Low	GO-2026-4971	stdlib@go1.22.11	1.25.10
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GO-2026-4947	stdlib@go1.22.11	1.25.9
Low	GHSA-m297-3jv9-m927	keycloak-services@26.3.3	26.5.5
Low	ALPINE-CVE-2026-11586	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	GHSA-f2hx-5fx3-hmcv	keycloak-services@26.3.3	26.5.7
Low	BIT-python-2026-7774	python@3.12.8-0	3.10.21
Low	GHSA-w294-6q5q-53p8	hazelcast@5.6.0	5.7.0
Low	BIT-postgresql-2026-6637	postgresql@17.6.0-0	14.23.0
Low	BIT-postgresql-2026-6479	postgresql@17.6.0-0	14.23.0
Low	DEBIAN-CVE-2021-31879	wget@1.21.3-1+deb12u1	no fix listed
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	DEBIAN-CVE-2026-40164	jq@1.6-2.1	1.6-2.1+deb12u2
Low	GHSA-8g5g-8vmr-9782	pillow@12.3.0	13.0.0
Low	DEBIAN-CVE-2025-69419	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	GO-2026-5037	stdlib@go1.22.11	1.25.11
Low	BIT-python-2025-4435	python@3.12.8-0	3.9.23
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.21.0	2.21.6
Low	BIT-postgresql-2026-18408	postgresql@17.6.0-0	14.24.0
Low	GO-2026-6603	stdlib@go1.22.11	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.29.0	0.60.0
Low	GO-2026-5972	stdlib@go1.22.11	1.25.13
Low	GO-2026-6088	stdlib@go1.22.11	1.25.13
Low	GO-2026-6089	stdlib@go1.22.11	1.25.13
Low	GO-2026-6090	stdlib@go1.22.11	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.29.0	0.60.0
Low	GO-2026-6611	stdlib@go1.22.11	1.26.9
Low	DEBIAN-CVE-2025-1179	binutils@2.40-2	no fix listed
Low	GHSA-wf93-45jw-7689	pip@25.1.1	26.1.2
Low	ALPINE-CVE-2026-80229	curl@8.19.0-r0	8.22.0-r0
Low	GO-2026-5038	stdlib@go1.22.11	1.25.11
Low	BIT-python-2026-9669	python@3.12.8-0	3.10.21
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.118.Final	4.1.135.Final
Low	DEBIAN-CVE-2025-48060	jq@1.6-2.1	1.6-2.1+deb12u1
Low	GHSA-33mj-cw25-m34h	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.10.1-3	no fix listed
Low	DEBIAN-CVE-2017-13716	binutils@2.40-2	no fix listed
Low	GHSA-82r6-8w77-94w6	anyio@4.9.0	4.14.2
Low	GO-2026-6218	stdlib@go1.22.11	1.25.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
28.10.0latest	2 days ago	0.21.0	1437023,487	46,721
28.9.0	1 month ago	0.19.0	1437023,568	47,434
28.8.0	1 month ago	0.18.1	1437323,536	47,774

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/arlas-stack/arlas-aias.svg)](https://charts.stackradar.io/charts/arlas-stack/arlas-aias)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.