csgship 0.4.7 Helm chart

Name: csgship Helm chart 0.4.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

csghub

Scored 15 Oct 2026

AI-based code intelligent generation

Version 0.4.7 todayapp version v0.4.0 0Artifact Hub

csgship 0.4.7 deploys 10 container images: envoyproxy/gateway, opencsghq/stakater-reloader, opencsghq/csgship-agentic, opencsghq/psql and 6 more. Across them, 1,217 findings — 5 critical, 7 high — 5 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.60.4, fixed in 1.84.0.

Radar Score

14,44357224981

1,217 findings over 10 of 10 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
envoyproxy/gateway×2	v1.7.5	001563	899
opencsghq/stakater-reloader	v1.4.19	00426	360
opencsghq/csgship-agentic	v0.4.0	1226100	1,713
opencsghq/psql×4	latest	202370	1,247
casbin/casdoor	3.62.1	0041162	2,415
opencsghq/csgship-portal	v1.2.1	102470	1,078
opencsghq/csgship-web×4	v0.4.0	1552200	3,353
library/busybox×3	latest	0000	0
opencsghq/postgres	15.19	0027199	2,386
library/redis	7.4.11	001291	992

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

683 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-56406	expat@2.7.0-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.0-r0	2.8.2-r0
Low	GHSA-rcv9-qm8p-9p6j	transformers@4.44.0	4.53.0
Low	GO-2026-5856	stdlib@go1.24.6	1.25.12
Low	GHSA-p538-c434-8v24	gitpython@3.1.41	3.1.56
Low	ALPINE-CVE-2026-40930	libpng@1.6.47-r0	1.6.59-r0
Low	ALPINE-CVE-2026-56403	expat@2.7.0-r0	2.8.2-r0
Low	GHSA-q382-vc8q-7jhj	github.com/modelcontextprotocol/go-sdk@v1.4.0	1.4.1
Low	GHSA-389r-gv7p-r3rp	github.com/go-git/go-git/v5@v5.16.3	5.19.0
Low	GHSA-qmf3-4767-5fg3	litellm@1.60.4	no fix listed
Low	GHSA-mf9w-mj56-hr94	python-dotenv@1.1.1	1.2.2
Low	GHSA-42vr-xj54-vc7v	pyjwt@2.8.0	2.15.0
Low	GO-2026-5896	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	DLA-4412-1	glib2.0@2.66.8-1+deb11u6	2.66.8-1+deb11u7
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-75804	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	GHSA-crhj-59gh-8x96	github.com/go-git/go-git/v5@v5.16.3	5.19.1
Low	DEBIAN-CVE-2023-31439	systemd@252.39-1~deb12u2	no fix listed
Low	GHSA-x746-7m8f-x49c	starlette@0.41.2	1.1.0
Low	DEBIAN-CVE-2026-53615	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-8674	glibc@2.36-9+deb12u14	no fix listed
Low	ALPINE-CVE-2026-76957	expat@2.7.0-r0	2.8.4-r0
Low	DEBIAN-CVE-2023-31437	systemd@252.39-1~deb12u2	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.49.0	0.55.0
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.5.0	2.7.0
Low	GHSA-w853-jp5j-5j7f	filelock@3.18.0	3.20.1
Low	DEBIAN-CVE-2026-42772	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	GHSA-5p39-cfhj-2xmp	anyio@4.10.0	4.14.2
Low	GO-2026-4340	stdlib@go1.24.6	1.24.12
Low	DLA-4273-1	postgresql-13@13.21-0+deb11u1	13.22-0+deb11u1
Low	DEBIAN-CVE-2023-31438	systemd@252.39-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.24.1-2	no fix listed
Low	GHSA-7xr5-9hcq-chf9	django@5.0.3	5.1.10
Low	GHSA-rp9v-7xv3-r6g3	github.com/corazawaf/coraza/v3@v3.3.3	3.8.0
Low	DEBIAN-CVE-2026-15534	perl@5.36.0-7+deb12u4	no fix listed
Low	GHSA-gqgw-jghv-mxwx	tablib@3.8.0	3.10.0
Low	ALPINE-CVE-2026-7009	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-428g-f7cq-pgp5	marshmallow@3.14.0	3.26.2
Low	ALPINE-CVE-2025-64505	libpng@1.6.47-r0	1.6.53-r0
Low	GO-2026-5697	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	ALPINE-CVE-2026-56404	expat@2.7.0-r0	2.8.2-r0
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u7	3.7.1-5+deb11u9
Low	GHSA-mf24-chxh-hmvj	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.2.7
Low	ALPINE-CVE-2026-56410	expat@2.7.0-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.0-r0	2.8.2-r0
Low	ALPINE-CVE-2024-13176	openssl@3.3.2-r4	3.3.2-r5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.7latest	today	v0.4.0	57224981	14,443
0.4.6	2 days ago	v0.4.0	57224981	14,443
0.4.5	1 month ago	v0.4.0	57203940	13,210

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/csghub/csgship.svg)](https://charts.stackradar.io/charts/csghub/csgship)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.