csgship 0.4.7 Helm chart

Name: csgship Helm chart 0.4.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

csghub

Scored 15 Oct 2026

AI-based code intelligent generation

Version 0.4.7 todayapp version v0.4.0 0Artifact Hub

csgship 0.4.7 deploys 10 container images: envoyproxy/gateway, opencsghq/stakater-reloader, opencsghq/csgship-agentic, opencsghq/psql and 6 more. Across them, 1,217 findings — 5 critical, 7 high — 5 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.60.4, fixed in 1.84.0.

Radar Score

14,44357224981

1,217 findings over 10 of 10 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
envoyproxy/gateway×2	v1.7.5	001563	899
opencsghq/stakater-reloader	v1.4.19	00426	360
opencsghq/csgship-agentic	v0.4.0	1226100	1,713
opencsghq/psql×4	latest	202370	1,247
casbin/casdoor	3.62.1	0041162	2,415
opencsghq/csgship-portal	v1.2.1	102470	1,078
opencsghq/csgship-web×4	v0.4.0	1552200	3,353
library/busybox×3	latest	0000	0
opencsghq/postgres	15.19	0027199	2,386
library/redis	7.4.11	001291	992

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

683 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-62408	c-ares@1.34.5-r0	1.34.6-r0
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	GHSA-fj7v-r99m-22gq	pillow@11.3.0	12.3.0
Low	ALPINE-CVE-2026-22796	openssl@3.3.3-r0	3.3.6-r0
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2026-102010	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	GHSA-2m8g-3cmr-wg3w	djangorestframework@3.15.1	3.17.2
Low	GO-2025-4011	stdlib@go1.24.6	1.24.8
Low	GO-2025-4015	stdlib@go1.24.6	1.24.8
Low	GHSA-69f9-5gxw-wvc2	aiohttp@3.12.15	3.13.3
Low	DEBIAN-CVE-2026-67693	gnutls28@3.7.9-2+deb12u7	no fix listed
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.40.0	1.43.0
Low	PYSEC-2026-3721	pip@25.2	26.2
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.1.5	3.1.6
Low	GHSA-3c6w-j9xm-8h2h	github.com/corazawaf/coraza/v3@v3.3.3	3.8.0
Low	ALPINE-CVE-2025-4947	curl@8.12.1-r1	8.14.0-r0
Low	PYSEC-2026-4183	pyjwt@2.8.0	2.15.0
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-59p9-h35m-wg4g	transformers@4.44.0	4.53.0
Low	GO-2026-4603	stdlib@go1.24.6	1.25.8
Low	GHSA-pc5q-qfxp-ggqv	github.com/corazawaf/coraza/v3@v3.3.3	3.8.0
Low	GO-2026-5031	golang.org/x/image@v0.18.0	0.41.0
Low	GO-2025-4175	stdlib@go1.24.6	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.47.0	0.52.0
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.12.15	3.14.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.47.0	0.52.0
Low	GO-2026-4864	stdlib@go1.24.6	1.25.9
Low	ALPINE-CVE-2026-34743	xz@5.6.3-r1	5.8.3-r0
Low	GHSA-prpw-wwv7-xjjr	github.com/corazawaf/coraza/v3@v3.3.3	3.8.0
Low	ALPINE-CVE-2026-6429	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-4w7r-h757-3r74	transformers@4.44.0	4.53.0
Low	GHSA-89xv-2j6f-qhc8	github.com/modelcontextprotocol/go-sdk@v1.4.0	1.4.1
Low	GO-2026-4982	stdlib@go1.24.6	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.49.0	0.55.0
Low	DEBIAN-CVE-2026-86143	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-8v8h-hg4w-mvq2	hpack@4.1.0	4.2.0
Low	GO-2026-5535	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.47.0	0.52.0
Low	ALPINE-CVE-2025-12818	postgresql17@17.2-r0	17.7-r0
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-86142	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	ALPINE-CVE-2025-10148	curl@8.12.1-r1	8.14.1-r2
Low	GHSA-8qcx-xf44-272x	django@5.0.3	5.2.16
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-37mw-44qp-f5jm	transformers@4.44.0	4.52.1
Low	GHSA-jjph-296x-mrcr	transformers@4.44.0	4.51.0
Low	GHSA-q2wp-rjmx-x6x9	transformers@4.44.0	4.51.0
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4873	curl@8.19.0-r0	8.20.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.7latest	today	v0.4.0	57224981	14,443
0.4.6	2 days ago	v0.4.0	57224981	14,443
0.4.5	1 month ago	v0.4.0	57203940	13,210

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/csghub/csgship.svg)](https://charts.stackradar.io/charts/csghub/csgship)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.