StackRadar

superset Helm chart

cloudnativeapp

Scored 14 Sept 2026

Apache Superset (incubating) is a modern, enterprise-ready business intelligence web application

Latest 1.1.6 5 years agoapp version 0.28.1 0Artifact Hub

superset 1.1.6 deploys 1 container image: amancevice/superset. Across them, 324 findings0 critical, 7 high 2 on CISA KEV. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 1.9, fixed in 39.0.1.

Radar Score

5,06007122194

324 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
amancevice/superset0.28.1071221945,060

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

324 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-rrm6-wvj7-cwh2sqlparse@0.2.40.4.4
LowGHSA-xgmm-8j9v-c9wxpyjwt@1.7.12.13.0
LowGHSA-6p56-wp2h-9hxrnumpy@1.15.21.21
LowGHSA-qjxf-f2mg-c6mctornado@5.1.16.5.5
LowDLA-3037-1libjpeg-turbo@1:1.5.1-21:1.5.1-2+deb9u2
LowDLA-2777-1tiff@4.0.8-2+deb9u44.0.8-2+deb9u7
LowGHSA-h75v-3vvj-5mfjjinja2@2.103.1.4
LowDLA-2672-1imagemagick@8:6.9.7.4+dfsg-11+deb9u68:6.9.7.4+dfsg-11+deb9u13
LowGHSA-v92g-xgxw-vvmmmako@1.0.71.3.11
LowGHSA-mpf4-983q-p7j4tornado@5.1.16.5.8
LowGHSA-m4p7-r5rc-7g4jpyasn1@0.4.50.6.4
LowGHSA-9hjg-9r4m-mvj7requests@2.18.42.32.4
LowGHSA-8qvm-5x2c-j2w7protobuf@3.7.14.25.8
LowGHSA-wfjw-w6pv-8p7fflask-appbuilder@1.12.53.4.4
LowDLA-2425-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u5
LowGHSA-8ppf-4f7h-5ppjpyasn1@0.4.50.6.4
LowGHSA-hm4w-wwcw-mr6rpyasn1@0.4.50.6.4
LowGHSA-h5c8-rqwp-cp95jinja2@2.103.1.3
LowDSA-4492-1postgresql-9.6@9.6.11-0+deb9u19.6.15-0+deb9u1
LowGHSA-29vq-49wr-vm6xwerkzeug@0.14.13.1.6
LowDLA-2285-1librsvg@2.40.16-1+b12.40.21-0+deb9u1
LowDLA-2550-1openjpeg2@2.1.2-1.1+deb9u32.1.2-1.1+deb9u6
LowGHSA-hgf8-39gv-g3f2werkzeug@0.14.13.1.4
LowDLA-2662-1postgresql-9.6@9.6.11-0+deb9u19.6.22-0+deb9u1
LowDLA-2669-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u5
LowDLA-2694-1tiff@4.0.8-2+deb9u44.0.8-2+deb9u6
LowDLA-2817-1postgresql-9.6@9.6.11-0+deb9u19.6.24-0+deb9u1
LowDLA-3007-1imagemagick@8:6.9.7.4+dfsg-11+deb9u68:6.9.7.4+dfsg-11+deb9u14
LowDSA-4550-1file@1:5.30-1+deb9u21:5.30-1+deb9u3
LowDLA-2701-1openexr@2.2.0-11+b12.2.0-11+deb9u3
LowGHSA-prg7-hcfm-mfcrsqlparse@0.2.40.6.0
LowGHSA-gwvm-45gx-3cf8urllib3@1.221.24.2
LowGHSA-752w-5fwx-jx9fpyjwt@1.7.12.12.0
LowDLA-2732-1openexr@2.2.0-11+b12.2.0-11+deb9u4
LowDLA-2975-1openjpeg2@2.1.2-1.1+deb9u32.1.2-1.1+deb9u7
LowDLA-2897-1apr@1.5.2-51.5.2-5+deb9u1
LowGHSA-765j-9r45-w2q2flask-appbuilder@1.12.54.8.1
LowGHSA-vv2x-vrpj-qqpqbleach@2.1.23.3.0
LowPYSEC-2026-3554cryptography@1.949.0.0
LowGHSA-43qf-4rqw-9q2gflask-cors@3.0.36.0.0
LowGHSA-34jh-p97f-mpxfurllib3@1.221.26.19
LowGHSA-4xh5-x5gv-qwphpip@19.0.325.3
LowGHSA-h35f-9h28-mq5csetuptools@40.8.083.0.0
LowDLA-2691-1libgcrypt20@1.7.6-2+deb9u31.7.6-2+deb9u4
LowDLA-2602-1imagemagick@8:6.9.7.4+dfsg-11+deb9u68:6.9.7.4+dfsg-11+deb9u12
LowGHSA-fqwm-6jpj-5wxctornado@5.1.16.5.5
LowGHSA-84pr-m4jr-85g5flask-cors@3.0.34.0.1
LowDLA-2932-1tiff@4.0.8-2+deb9u44.0.8-2+deb9u8
LowDSA-4685-1apt@1.4.91.4.10
LowPYSEC-2026-3721pip@19.0.326.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.6latest5 years ago0.28.1071221945,060

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/superset.svg)](https://charts.stackradar.io/charts/cloudnativeapp/superset)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.