arlas-aias 28.9.0 Helm chart

Name: arlas-aias Helm chart 28.9.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

arlas-stack

Scored 20 Sept 2026

A Helm Chart to deploy the ARLAS Exploration Stack with AIAS services

Version 28.9.0 2 days agodeploys tag 0.19.0 0Artifact Hub

arlas-aias 28.9.0 deploys 22 container images: gisaia/agate, gisaia/airs, gisaia/aproc-proc, gisaia/aproc-service and 17 more. Across the 20 measured, 3,616 findings — 5 critical, 12 high — 2 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-parser-pdf-module 2.9.3, fixed in 3.2.2.

Radar Score

39,9215126072,991

3,616 findings over 20 of 22 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images

Image	Tag	Vulnerabilities	Radar Score
gisaia/agate	0.19.0	0002	22
gisaia/airs	0.19.0	0002	22
gisaia/aproc-proc	0.19.0	—	not yet scanned
gisaia/aproc-service	0.19.0	0004	41
gisaia/fam	0.19.0	0003	31
gisaia/arlas-permissions-server	28.0.0	00938	539
gisaia/arlas-persistence-server	28.0.0	00939	549
gisaia/arlas-server	28.0.0	00938	539
gisaia/arlas-wui-builder	28.0.1	001447	750
gisaia/arlas-wui-hub	28.0.2	002056	953
gisaia/arlas-wui	28.0.3	001447	750
gisaia/arlas-fam-wui	0.19.0	0000	0
bitnamilegacy/kibana×2	9.0.0-debian-12-r0	—	not yet scanned
bitnamilegacy/minio	2024.12.18-debian-12-r1	0167347	4,513
ghcr.io/developmentseed/titiler	0.22.4	1372372	5,033
bitnamilegacy/os-shell×2	12-debian-12-r43	0150274	3,392
bitnamilegacy/elasticsearch×2	9.0.1-debian-12-r0	3168383	5,022
bitnamilegacy/postgresql	17.6.0-debian-12-r0	0253221	3,166
bitnamilegacy/keycloak×2	26.3.3-debian-12-r0	0167410	4,979
bitnamilegacy/rabbitmq×2	4.1.2-debian-12-r0	0149184	2,727
bitnamilegacy/redis	8.0.3-debian-12-r1	1145192	2,659
bitnamilegacy/minio	2025.4.22-debian-12-r1	0161332	4,234

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,126 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.118.Final	4.1.132.Final
Low	GHSA-7f5h-v6xp-fcq8	starlette@0.46.2	0.49.1
Low	BIT-postgresql-2026-6477	postgresql@17.6.0-0	14.23.0
Low	BIT-java-2026-34282	java@21.0.7-9-0	1.8.0
Low	BIT-jre-2026-34282	jre@21.0.8-12-0	1.8.0
Low	BIT-python-2026-3298	python@3.12.8-0	3.11.16
Low	GHSA-rc95-pcm8-65v9	quarkus-vertx-http@3.20.2.1	3.20.6.1
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	DEBIAN-CVE-2026-32316	jq@1.6-2.1	1.6-2.1+deb12u2
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.118.Final	4.1.133.Final
Low	DEBIAN-CVE-2026-40469	gawk@1:5.2.1-2+b1	no fix listed
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.124.Final	4.1.135.Final
Low	GHSA-rp95-xpg9-c2cq	keycloak-services@26.3.3	26.6.2
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u9	2.36-9+deb12u11
Low	DEBIAN-CVE-2023-50495	ncurses@6.4-4	no fix listed
Low	ALPINE-CVE-2026-13608	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-13608	curl@7.88.1-10+deb12u8	no fix listed
Low	ALPINE-CVE-2026-5773	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2026-5773	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
Low	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.124.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-40355	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5
Low	GHSA-574f-3g2m-x479	bcprov-jdk18on@1.78.1	1.80.2
Low	ALPINE-CVE-2026-11586	curl@8.19.0-r0	8.22.0-r0
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.21.0	0.24.0
Low	DEBIAN-CVE-2026-40356	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u5
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.118.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	BIT-postgresql-2026-6637	postgresql@17.6.0-0	14.23.0
Low	DEBIAN-CVE-2021-31879	wget@1.21.3-1+deb12u1	no fix listed
Low	BIT-python-2025-4435	python@3.12.8-0	3.9.23
Low	BIT-postgresql-2026-18408	postgresql@17.6.0-0	14.24.0
Low	DEBIAN-CVE-2023-1972	binutils@2.40-2	no fix listed
Low	BIT-python-2026-11972	python@3.12.8-0	3.10.21
Low	GHSA-hcvw-475w-8g7p	keycloak-services@26.3.3	26.4.9
Low	GHSA-hf67-5vvq-fm3r	keycloak-services@26.3.3	26.6.2
Low	DEBIAN-CVE-2025-1179	binutils@2.40-2	no fix listed
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.118.Final	4.1.137.Final
Low	ALPINE-CVE-2026-80230	curl@8.19.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2026-80230	curl@7.88.1-10+deb12u8	no fix listed
Low	BIT-minio-2026-41145	minio@2024.12.18-1	no fix listed
Low	BIT-postgresql-2026-15741	postgresql@17.6.0-0	14.24.0
Low	DEBIAN-CVE-2025-69419	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-42013	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2017-13716	binutils@2.40-2	no fix listed
Low	BIT-python-2026-3087	python@3.12.8-0	3.10.21
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-58469	wget@1.21.3-1+deb12u1	no fix listed
Low	GHSA-9c4q-hq6p-c237	github.com/minio/minio@v0.0.0-20241218131544-16f8cf1c52f0	no fix listed
Low	DEBIAN-CVE-2026-3833	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
28.9.0latest	2 days ago	0.19.0	5126072,991	39,921
28.8.0	18 days ago	0.18.1	5126373,071	41,314

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/arlas-stack/arlas-aias.svg)](https://charts.stackradar.io/charts/arlas-stack/arlas-aias)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.