StackRadar

authf Helm chart

cryptexlabsVerified publisher

Scored 14 Sept 2026

Forward authentication service

Latest 0.12.13 11 months agoapp version 0.12.11 0Artifact Hub

authf 0.12.13 deploys 4 container images: cryptexlabs/authf, docker.elastic.co/elasticsearch/elasticsearch and bitnami/kubectl. Across the 3 measured, 285 findings0 critical, 5 high. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.4-r5, fixed in 3.1.7-r0.

Radar Score

3,7690573207

285 findings over 3 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
cryptexlabs/authf0.12.1105732053,756
docker.elastic.co/elasticsearch/elasticsearch×27.14.0unmeasured
bitnami/kubectllatest000213
bitnami/kubectl×2latest000213

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

207 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-c96f-x56v-gq3hfind-my-way@4.5.19.7.0
LowGHSA-5r9g-qh6m-jxffundici@5.0.05.19.1
LowGHSA-42h9-826w-cgv3axios@1.7.71.18.0
LowGHSA-pmv8-rq9r-6j72axios@1.7.71.18.0
LowGHSA-4jpv-8r57-pv7j@nestjs/core@8.0.69.0.5
LowGHSA-83g3-92jg-28cxtar@6.2.07.5.8
LowGHSA-xfqm-j7pc-xrfcmessageformat@2.3.03.0.0-beta.0
LowGHSA-g9mf-h72j-4rw9undici@6.19.86.23.0
LowGHSA-jqff-g426-hqxpfast-uri@3.0.33.1.6
LowALPINE-CVE-2025-48386git@2.43.5-r02.43.7-r0
LowGHSA-w8wr-v893-vjvptar@6.2.07.5.18
LowGHSA-m7pr-hjqh-92cmaxios@1.7.71.15.1
LowGHSA-hjrf-2m68-5959jsonwebtoken@8.5.19.0.0
LowGHSA-7p8r-x3mc-p8w7fast-uri@3.0.33.1.5
LowGHSA-f65p-4m7j-42xcfast-uri@3.0.33.1.6
LowGHSA-jp2q-39xq-3w4gfast-xml-parser@4.4.14.5.5
LowGHSA-869p-cjfg-cm3xjws@3.2.23.2.3
LowGHSA-mmx7-hfxf-jppxaxios@1.7.71.18.0
LowALPINE-CVE-2026-40200musl@1.2.4_git20230717-r41.2.4_git20230717-r6
LowGHSA-52v5-jr5w-gjxrsigstore@2.1.04.1.1
LowGHSA-65ch-62r8-g69gnode-forge@1.3.11.3.2
LowALPINE-CVE-2025-4947curl@8.9.1-r18.14.0-r0
LowGHSA-cm22-4g7w-348pserve-static@1.15.01.16.0
LowGHSA-q7cg-457f-vx79joi@17.13.317.13.4
LowGHSA-gvwx-54wh-qm9jtar@6.2.07.5.17
LowGHSA-9965-vmph-33xxvalidator@13.12.013.15.20
LowGHSA-vjh7-7g9h-fjfhelliptic@6.6.06.6.1
LowGHSA-wqq4-5wpv-mx2gundici@5.0.05.26.2
LowALPINE-CVE-2023-42364busybox@1.36.1-r151.36.1-r19
LowALPINE-CVE-2023-42363busybox@1.36.1-r151.36.1-r17
LowGHSA-378v-28hj-76wfbn.js@4.12.04.12.3
LowALPINE-CVE-2024-50349git@2.43.5-r02.43.6-r0
LowALPINE-CVE-2023-42366busybox@1.36.1-r151.36.1-r16
LowGHSA-m6fv-jmcg-4jfgsend@0.18.00.19.0
LowGHSA-w9j2-pvgh-6h63axios@1.7.71.15.1
LowALPINE-CVE-2023-42365busybox@1.36.1-r151.36.1-r19
LowGHSA-2pr8-phx7-x9h3protobufjs@7.4.07.5.6
LowGHSA-3v7f-55p6-f55ppicomatch@2.3.12.3.2
LowGHSA-qw6h-vgh9-j6wxexpress@4.17.14.20.0
LowGHSA-mh29-5h37-fv8mjs-yaml@3.14.13.14.2
LowGHSA-f38q-mgvj-vph7protobufjs@7.4.07.6.3
LowGHSA-7q8q-rj6j-mhjqaxios@1.7.71.18.0
LowGHSA-h67p-54hq-rp68js-yaml@3.14.13.15.0
LowGHSA-3f6p-5ww8-9rcrmysql2@2.3.33.22.0
LowGHSA-cj7v-w2c7-cp7c@nestjs/common@8.0.610.4.16
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowALPINE-CVE-2024-11053curl@8.9.1-r18.11.1-r0
LowGHSA-gh4j-gqv2-49f6fast-xml-parser@4.4.15.7.0
LowGHSA-q8mj-m7cp-5q26qs@6.13.06.15.2
LowGHSA-36xv-jgw5-4q75@nestjs/core@8.0.611.1.18

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.12.13latest11 months ago0.12.1105732073,769

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cryptexlabs/authf.svg)](https://charts.stackradar.io/charts/cryptexlabs/authf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.