StackRadar

authf Helm chart

cryptexlabsVerified publisher

Scored 14 Sept 2026

Forward authentication service

Latest 0.12.13 11 months agoapp version 0.12.11 0Artifact Hub

authf 0.12.13 deploys 4 container images: cryptexlabs/authf, docker.elastic.co/elasticsearch/elasticsearch and bitnami/kubectl. Across the 3 measured, 285 findings0 critical, 5 high. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.4-r5, fixed in 3.1.7-r0.

Radar Score

3,7690573207

285 findings over 3 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
cryptexlabs/authf0.12.1105732053,756
docker.elastic.co/elasticsearch/elasticsearch×27.14.0unmeasured
bitnami/kubectllatest000213
bitnami/kubectl×2latest000213

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

207 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-p88m-4jfj-68fvundici@6.19.86.27.0
LowGHSA-vmf3-w455-68vhtar@6.2.07.5.16
LowGHSA-8988-4f7v-96qf@opentelemetry/core@1.26.02.8.0
LowGHSA-5c9x-8gcm-mpgxaxios@1.7.71.15.1
LowGHSA-vf2m-468p-8v99axios@1.7.71.15.1
LowGHSA-w2qp-rph6-63g4fastify@3.20.15.12.1
LowGHSA-3787-6prv-h9w3undici@5.0.05.28.3
LowGHSA-q6x5-8v7m-xcrfprotobufjs@7.4.07.5.6
LowGHSA-q6x5-8v7m-xcrf@protobufjs/utf8@1.1.01.1.1
LowGHSA-445q-vr5w-6q77axios@1.7.71.15.1
LowGHSA-m4v8-wqvr-p9f7undici@5.0.05.28.4
LowALPINE-CVE-2024-13176openssl@3.1.4-r53.1.8-r0
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.14.13.15.1
LowGHSA-fx83-v9x8-x52wprotobufjs@7.4.07.5.6
LowGHSA-jggg-4jg4-v7c6protobufjs@7.4.07.5.8
LowGHSA-4mjr-xmp4-gh2gqs@6.13.06.16.0
LowGHSA-48c2-rrv3-qjmpyaml@1.10.21.10.3
LowGHSA-q768-x9m6-m9qpundici@5.0.05.8.0
LowGHSA-xx6v-rp6x-q39caxios@1.7.71.15.1
LowGO-2025-3521k8s.io/kubernetes@v1.37.0no fix listed
LowGHSA-898c-q2cr-xwhgaxios@1.7.71.16.0
LowALPINE-CVE-2025-5025curl@8.9.1-r18.14.0-r0
LowGHSA-848j-6mx2-7j84elliptic@6.6.0no fix listed
LowGHSA-3fjj-p79j-c9hhfastify@3.20.13.29.4
LowGHSA-444r-cwp2-x5xffastify@3.20.15.8.3
LowALPINE-CVE-2025-0167curl@8.9.1-r18.12.0-r0
LowGHSA-4992-7rv2-5pvqundici@6.19.86.24.0
LowALPINE-CVE-2026-6042musl@1.2.4_git20230717-r41.2.4_git20230717-r6
LowGHSA-mrq3-vjjr-p77cfastify@3.20.15.7.3
LowGHSA-w7fw-mjwx-w883qs@6.13.06.14.2
LowALPINE-CVE-2025-27613git@2.43.5-r02.43.7-r0
LowGHSA-6rw7-vpxm-498pqs@6.13.06.14.1
LowGHSA-v3r7-h72x-cjcmundici@6.19.86.28.0
LowGHSA-v422-hmwv-36x6body-parser@1.20.01.20.6
LowGHSA-rgwj-5xj2-c3m3mysql2@2.3.33.23.1
LowGO-2025-3547k8s.io/kubernetes@v1.37.0no fix listed
LowGHSA-8xcm-r25x-g524undici@6.19.86.28.0
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@1.1.111.1.12
LowGHSA-xx4c-jj58-r7x6validator@12.0.013.7.0
LowGHSA-m8rv-5g2x-5cg5undici@6.19.86.28.0
LowGHSA-9qxr-qj54-h672undici@5.0.05.28.4
LowGHSA-gg4h-3hg2-grpcjoi@17.13.317.13.5
LowGHSA-6w3j-5fw6-r9vrjoi@17.13.317.13.6
LowGHSA-78xj-cgh5-2h22ip@2.0.02.0.1
LowGHSA-4x5v-gmq8-25chsemver-regex@2.0.03.1.4
LowGHSA-g8m3-5g58-fq7mundici@6.19.86.27.0
LowGHSA-35p6-xmwp-9g52undici@6.19.86.27.0
LowGHSA-xhjh-pmcv-23jwaxios@1.7.71.15.1
LowGHSA-cxrh-j4jr-qwg3undici@6.19.86.21.2
LowGHSA-qvfw-j98x-7q72multer@1.4.4-lts.12.3.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.12.13latest11 months ago0.12.1105732073,769

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cryptexlabs/authf.svg)](https://charts.stackradar.io/charts/cryptexlabs/authf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.