StackRadar

superset Helm chart

cloudnativeapp

Scored 14 Sept 2026

Apache Superset (incubating) is a modern, enterprise-ready business intelligence web application

Latest 1.1.6 5 years agoapp version 0.28.1 0Artifact Hub

superset 1.1.6 deploys 1 container image: amancevice/superset. Across them, 324 findings0 critical, 7 high 2 on CISA KEV. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 1.9, fixed in 39.0.1.

Radar Score

5,06007122194

324 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
amancevice/superset0.28.1071221945,060

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

194 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDLA-2701-1openexr@2.2.0-11+b12.2.0-11+deb9u3
LowGHSA-prg7-hcfm-mfcrsqlparse@0.2.40.6.0
LowGHSA-gwvm-45gx-3cf8urllib3@1.221.24.2
LowGHSA-752w-5fwx-jx9fpyjwt@1.7.12.12.0
LowDLA-2732-1openexr@2.2.0-11+b12.2.0-11+deb9u4
LowDLA-2975-1openjpeg2@2.1.2-1.1+deb9u32.1.2-1.1+deb9u7
LowDLA-2897-1apr@1.5.2-51.5.2-5+deb9u1
LowGHSA-765j-9r45-w2q2flask-appbuilder@1.12.54.8.1
LowGHSA-vv2x-vrpj-qqpqbleach@2.1.23.3.0
LowPYSEC-2026-3554cryptography@1.949.0.0
LowGHSA-43qf-4rqw-9q2gflask-cors@3.0.36.0.0
LowGHSA-34jh-p97f-mpxfurllib3@1.221.26.19
LowGHSA-4xh5-x5gv-qwphpip@19.0.325.3
LowGHSA-h35f-9h28-mq5csetuptools@40.8.083.0.0
LowDLA-2691-1libgcrypt20@1.7.6-2+deb9u31.7.6-2+deb9u4
LowDLA-2602-1imagemagick@8:6.9.7.4+dfsg-11+deb9u68:6.9.7.4+dfsg-11+deb9u12
LowGHSA-fqwm-6jpj-5wxctornado@5.1.16.5.5
LowGHSA-84pr-m4jr-85g5flask-cors@3.0.34.0.1
LowDLA-2932-1tiff@4.0.8-2+deb9u44.0.8-2+deb9u8
LowDSA-4685-1apt@1.4.91.4.10
LowPYSEC-2026-3721pip@19.0.326.2
LowDLA-2295-1curl@7.52.1-5+deb9u97.52.1-5+deb9u11
LowGHSA-mq26-g339-26xfpip@19.0.323.3
LowGHSA-cpwx-vrp4-4pq7jinja2@2.103.1.6
LowDLA-2491-1openexr@2.2.0-11+b12.2.0-11+deb9u2
LowDLA-2784-1icu@57.1-6+deb9u257.1-6+deb9u5
LowDSA-4428-1systemd@232-25+deb9u9232-25+deb9u11
LowDSA-4622-1postgresql-9.6@9.6.11-0+deb9u19.6.17-0+deb9u1
LowGHSA-87hc-h4r5-73f7werkzeug@0.14.13.1.5
LowDSA-4535-1e2fsprogs@1.43.4-21.43.4-2+deb9u1
LowDLA-2518-1cairo@1.14.8-11.14.8-1+deb9u1
LowDSA-4439-1postgresql-9.6@9.6.11-0+deb9u19.6.13-0+deb9u1
LowDLA-2702-1djvulibre@3.5.27.1-73.5.27.1-7+deb9u2
LowDLA-2800-1cups@2.2.1-8+deb9u32.2.1-8+deb9u7
LowGHSA-pq67-6m6q-mj2vurllib3@1.222.5.0
LowDLA-2290-1e2fsprogs@1.43.4-21.43.4-2+deb9u2
LowGHSA-c33w-24p9-8m24configobj@5.0.65.0.9
LowGHSA-f7c7-j99h-c22fnumpy@1.15.21.19
LowGHSA-65pc-fj4g-8rjxidna@2.63.15
LowGHSA-9wx4-h78v-vm56requests@2.18.42.32.0
LowPYSEC-2025-183pyjwt@1.7.1no fix listed
LowGHSA-7rxf-gvfg-47g4flask-cors@3.0.36.0.0
LowPYSEC-2025-265tornado@5.1.16.5.3
LowPYSEC-2025-15flask-appbuilder@1.12.54.5.3
LowGHSA-8vgw-p6qm-5gr7flask-cors@3.0.36.0.0
LowGHSA-hwrj-9rr4-24xhthrift@0.11.00.24.0
LowGHSA-537c-gmf6-5ccfcryptography@1.948.0.1
LowGHSA-g4mx-q9vg-27p4urllib3@1.221.26.18
LowDLA-3029-1cups@2.2.1-8+deb9u32.2.1-8+deb9u8
LowDLA-2361-1libx11@2:1.6.4-3+deb9u12:1.6.4-3+deb9u3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.6latest5 years ago0.28.1071221945,060

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/superset.svg)](https://charts.stackradar.io/charts/cloudnativeapp/superset)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.