StackRadar

artifact-hub Helm chart

artifact-hubVerified publisher

Scored 19 Oct 2026

Artifact Hub is a web-based application that enables finding, installing, and publishing Cloud Native packages.

Latest 1.23.0 3 months agoapp version 1.23.0 96Artifact Hub

artifact-hub 1.23.0 deploys 7 container images: artifacthub/postgres, bitnamilegacy/kubectl, artifacthub/hub, aquasec/trivy and 3 more. Across them, 1,267 findings — 8 critical, 5 high — 4 on CISA KEV. The highest contribution is DSA-5169-1 in openssl 1.1.1d-0+deb10u7, fixed in 1.1.1n-0+deb10u3. Chart.yaml declares kubeVersion >= 1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

15,198852241,030

1,267 findings over 7 of 7 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
artifacthub/postgres×5latest10522603,486
bitnamilegacy/kubectl1.194423191,273
artifacthub/hubv1.23.0101264998
aquasec/trivy0.69.300492162,992
artifacthub/db-migratorv1.23.00125431,017
artifacthub/scannerv1.23.010261552,089
artifacthub/trackerv1.23.010372733,343

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

629 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalDSA-5169-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u3
CriticalGO-2026-4919KEVgithub.com/aquasecurity/trivy@v0.72.0no fix listed
CriticalDSA-5139-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u2
CriticalDSA-5140-1openldap@2.4.47+dfsg-3+deb10u62.4.47+dfsg-3+deb10u7
CriticalDEBIAN-CVE-2025-15467openssl@3.5.1-13.5.4-1~deb13u2
CriticalDLA-3807-1glibc@2.28-102.28-10+deb10u3
HighDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb830.0.0-20231218163308-9d2ee975ef9f
HighDLA-3103-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u2
HighDLA-3804-1nghttp2@1.36.0-2+deb10u11.36.0-2+deb10u3
HighDLA-3621-1KEVnghttp2@1.36.0-2+deb10u11.36.0-2+deb10u2
MediumDLA-3449-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u5
MediumDSA-5103-1openssl@1.1.1d-0+deb10u71.1.1d-0+deb10u8
MediumDLA-3325-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u4
MediumDLA-3213-1krb5@1.17-3+deb10u31.17-3+deb10u5
MediumDSA-5122-1gzip@1.9-31.9-3+deb10u1
MediumDSA-5123-1xz-utils@5.2.4-15.2.4-1+deb10u1
MediumDSA-6113-1openssl@3.5.1-13.5.4-1~deb13u2
MediumDSA-5087-1cyrus-sasl2@2.1.27+dfsg-1+deb10u12.1.27+dfsg-1+deb10u2
MediumDEBIAN-CVE-2019-1010022glibc@2.41-12+deb13u3no fix listed
MediumDSA-5147-1dpkg@1.19.71.19.8
MediumDEBIAN-CVE-2017-17740openldap@2.6.10+dfsg-1no fix listed
MediumALPINE-CVE-2026-45447openssl@3.5.5-r03.5.7-r0
MediumDEBIAN-CVE-2026-45447openssl@3.5.1-13.5.6-1~deb13u2
MediumDEBIAN-CVE-2018-20796glibc@2.41-12+deb13u3no fix listed
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb830.31.0
MediumDLA-3085-1curl@7.64.0-4+deb10u27.64.0-4+deb10u3
MediumDEBIAN-CVE-2015-3276openldap@2.6.10+dfsg-1no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.41-12+deb13u3no fix listed
MediumDLA-3263-1libtasn1-6@4.13-34.13-3+deb10u1
MediumDLA-3763-1curl@7.64.0-4+deb10u27.64.0-4+deb10u9
MediumGHSA-8c26-wmh5-6g9vgolang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb830.0.0-20220314234659-1baeb1ce4c0b
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.78.01.79.3
MediumDEBIAN-CVE-2025-11187openssl@3.5.1-13.5.4-1~deb13u2
MediumALPINE-CVE-2026-63073openssl@3.5.7-r03.5.8-r0
MediumDEBIAN-CVE-2026-63073openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
MediumGHSA-7jwh-3vrq-q3m8github.com/jackc/pgproto3/v2@v2.0.22.3.3
MediumGHSA-mrww-27vc-gghvgithub.com/jackc/pgx/v4@v4.7.14.18.2
MediumDEBIAN-CVE-2019-9192glibc@2.41-12+deb13u3no fix listed
MediumGO-2022-0411github.com/Masterminds/goutils@v1.1.01.1.1
MediumALPINE-CVE-2026-8925curl@8.17.0-r18.22.0-r0
MediumGO-2026-4341stdlib@go1.24.41.24.12
MediumDEBIAN-CVE-2026-42010gnutls28@3.8.9-33.8.9-3+deb13u4
MediumDEBIAN-CVE-2018-5709krb5@1.21.3-5no fix listed
MediumALPINE-CVE-2026-34182openssl@3.5.5-r03.5.7-r0
MediumDEBIAN-CVE-2026-34182openssl@3.5.1-13.5.6-1~deb13u2
MediumDSA-5174-1gnupg2@2.2.12-1+deb10u12.2.12-1+deb10u2
MediumGHSA-69ch-w2m2-3vjpgolang.org/x/text@v0.3.30.3.8
MediumDLA-3626-1krb5@1.17-3+deb10u31.17-3+deb10u6
MediumDEBIAN-CVE-2018-6829libgcrypt20@1.11.0-7no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.23.0latest3 months ago1.23.0852241,03015,198

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/artifact-hub/artifact-hub.svg)](https://charts.stackradar.io/charts/artifact-hub/artifact-hub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Oct 2026 · scanned 19 Oct 2026 · advisories as of 19 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.