StackRadar

authf 0.12.13 Helm chart

cryptexlabsVerified publisher

Scored 14 Sept 2026

Forward authentication service

Version 0.12.13 11 months agoapp version 0.12.11 0Artifact Hub

authf 0.12.13 deploys 4 container images: cryptexlabs/authf, docker.elastic.co/elasticsearch/elasticsearch and bitnami/kubectl. Across the 3 measured, 285 findings0 critical, 5 high. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.4-r5, fixed in 3.1.7-r0.

Radar Score

3,7690573207

285 findings over 3 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
cryptexlabs/authf0.12.1105732053,756
docker.elastic.co/elasticsearch/elasticsearch×27.14.0unmeasured
bitnami/kubectllatest000213
bitnami/kubectl×2latest000213

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

285 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-cm22-4g7w-348pserve-static@1.15.01.16.0
LowGHSA-q7cg-457f-vx79joi@17.13.317.13.4
LowGHSA-gvwx-54wh-qm9jtar@6.2.07.5.17
LowGHSA-9965-vmph-33xxvalidator@13.12.013.15.20
LowGHSA-vjh7-7g9h-fjfhelliptic@6.6.06.6.1
LowGHSA-wqq4-5wpv-mx2gundici@5.0.05.26.2
LowALPINE-CVE-2023-42364busybox@1.36.1-r151.36.1-r19
LowALPINE-CVE-2023-42363busybox@1.36.1-r151.36.1-r17
LowGHSA-378v-28hj-76wfbn.js@4.12.04.12.3
LowALPINE-CVE-2024-50349git@2.43.5-r02.43.6-r0
LowALPINE-CVE-2023-42366busybox@1.36.1-r151.36.1-r16
LowGHSA-m6fv-jmcg-4jfgsend@0.18.00.19.0
LowGHSA-w9j2-pvgh-6h63axios@1.7.71.15.1
LowALPINE-CVE-2023-42365busybox@1.36.1-r151.36.1-r19
LowGHSA-2pr8-phx7-x9h3protobufjs@7.4.07.5.6
LowGHSA-3v7f-55p6-f55ppicomatch@2.3.12.3.2
LowGHSA-qw6h-vgh9-j6wxexpress@4.17.14.20.0
LowGHSA-mh29-5h37-fv8mjs-yaml@3.14.13.14.2
LowGHSA-f38q-mgvj-vph7protobufjs@7.4.07.6.3
LowGHSA-7q8q-rj6j-mhjqaxios@1.7.71.18.0
LowGHSA-h67p-54hq-rp68js-yaml@3.14.13.15.0
LowGHSA-3f6p-5ww8-9rcrmysql2@2.3.33.22.0
LowGHSA-cj7v-w2c7-cp7c@nestjs/common@8.0.610.4.16
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowALPINE-CVE-2024-11053curl@8.9.1-r18.11.1-r0
LowGHSA-gh4j-gqv2-49f6fast-xml-parser@4.4.15.7.0
LowGHSA-q8mj-m7cp-5q26qs@6.13.06.15.2
LowGHSA-36xv-jgw5-4q75@nestjs/core@8.0.611.1.18
LowGHSA-p88m-4jfj-68fvundici@6.19.86.27.0
LowGHSA-vmf3-w455-68vhtar@6.2.07.5.16
LowGHSA-8988-4f7v-96qf@opentelemetry/core@1.26.02.8.0
LowGHSA-5c9x-8gcm-mpgxaxios@1.7.71.15.1
LowGHSA-vf2m-468p-8v99axios@1.7.71.15.1
LowGHSA-w2qp-rph6-63g4fastify@3.20.15.12.1
LowGHSA-3787-6prv-h9w3undici@5.0.05.28.3
LowGHSA-q6x5-8v7m-xcrf@protobufjs/utf8@1.1.01.1.1
LowGHSA-q6x5-8v7m-xcrfprotobufjs@7.4.07.5.6
LowGHSA-445q-vr5w-6q77axios@1.7.71.15.1
LowGHSA-m4v8-wqvr-p9f7undici@5.0.05.28.4
LowALPINE-CVE-2024-13176openssl@3.1.4-r53.1.8-r0
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.14.13.15.1
LowGHSA-fx83-v9x8-x52wprotobufjs@7.4.07.5.6
LowGHSA-jggg-4jg4-v7c6protobufjs@7.4.07.5.8
LowGHSA-4mjr-xmp4-gh2gqs@6.13.06.16.0
LowGHSA-48c2-rrv3-qjmpyaml@1.10.21.10.3
LowGHSA-q768-x9m6-m9qpundici@5.0.05.8.0
LowGHSA-xx6v-rp6x-q39caxios@1.7.71.15.1
LowGO-2025-3521k8s.io/kubernetes@v1.37.0no fix listed
LowGHSA-898c-q2cr-xwhgaxios@1.7.71.16.0
LowALPINE-CVE-2025-5025curl@8.9.1-r18.14.0-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.12.13latest11 months ago0.12.1105732073,769

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cryptexlabs/authf.svg)](https://charts.stackradar.io/charts/cryptexlabs/authf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.