csgship 0.4.7 Helm chart
csghubVerified publisherScored 15 Oct 2026
AI-based code intelligent generation
Version 0.4.7 todayapp version v0.4.0 0Artifact Hub
csgship 0.4.7 deploys 10 container images: envoyproxy/gateway, opencsghq/stakater-reloader, opencsghq/csgship-agentic, opencsghq/psql and 6 more. Across them, 1,217 findings — 5 critical, 7 high — 5 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.60.4, fixed in 1.84.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| envoyproxy/ | v1.7.5 | 001563 | 899 |
| opencsghq/ | v1.4.19 | 00426 | 360 |
| opencsghq/ | v0.4.0 | 1226100 | 1,713 |
| opencsghq/ | latest | 202370 | 1,247 |
| casbin/ | 3.62.1 | 0041162 | 2,415 |
| opencsghq/ | v1.2.1 | 102470 | 1,078 |
| opencsghq/ | v0.4.0 | 1552200 | 3,353 |
| library/ | latest | 0000 | 0 |
| opencsghq/ | 15.19 | 0027199 | 2,386 |
| library/ | 7.4.11 | 001291 | 992 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-5062 | golang.org/ | 0.43.0 |
| Low | GO-2026-5066 | golang.org/ | 0.43.0 |
| Low | PYSEC-2026-2095 | aiohttp | 3.13.4 |
| Low | GHSA-vjc4-5qp5-m44j | pillow | 12.3.0 |
| Low | ALPINE-CVE-2026-6637 | postgresql17 | 17.10-r0 |
| Low | ALPINE-CVE-2026-6479 | postgresql17 | 17.10-r0 |
| Low | PYSEC-2026-3784 | gitpython | 3.1.58 |
| Low | ALPINE-CVE-2025-49795 | libxml2 | 2.13.9-r0 |
| Low | ALPINE-CVE-2025-69419 | openssl | 3.3.6-r0 |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GHSA-qw64-3x98-g7q2 | github.com/ | 5.9.0 |
| Low | GHSA-q2x7-8rv6-6q7h | jinja2 | 3.1.5 |
| Low | GHSA-6mq8-rvhq-8wgg | aiohttp | 3.13.3 |
| Low | PYSEC-2025-40 | transformers | 4.49.0 |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | GHSA-5m9m-j5p7-m7f9 | github.com/ | 2.63.0 |
| Low | ALPINE-CVE-2026-18408 | postgresql17 | 17.11-r0 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GHSA-gw2q-qw9j-rgv7 | litellm | 1.53.1.dev1 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GHSA-879v-fggm-vxw2 | litellm | no fix listed |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | GHSA-vxq7-64xx-v4gw | urllib3 | 2.8.0 |
| Low | GHSA-82r6-8w77-94w6 | anyio | 4.14.2 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
| Low | GO-2026-5942 | stdlib | 1.26.6 |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | ALPINE-CVE-2026-31789 | openssl | 3.3.7-r0 |
| Low | PYSEC-2026-2106 | aiohttp | 3.14.0 |
| Low | GHSA-9h52-p55h-vw2f | mcp | 1.23.0 |
| Low | ALPINE-CVE-2026-6475 | postgresql17 | 17.10-r0 |
| Low | GHSA-g5vv-9gxw-82hx | gitpython | 3.1.60 |
| Low | GHSA-pwgv-4x5q-6m9f | sqlparse | 0.6.0 |
| Low | GHSA-pjcq-xvwq-hhpj | github.com/ | 0.1.1 |
| Low | ALPINE-CVE-2026-42766 | openssl | 3.5.7-r0 |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.46-1~deb13u2 |
| Low | GHSA-27vj-qcqg-25rc | fsspec | 2026.6.0 |
| Low | ALPINE-CVE-2026-84782 | openssl | 3.3.7-r2 |
| Low | DEBIAN-CVE-2026-84782 | openssl | no fix listed |
| Low | GHSA-r6ph-v2qm-q3c2 | cryptography | 46.0.5 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.4.7latest | today | v0.4.0 | 57224981 | 14,443 |
| 0.4.6 | 2 days ago | v0.4.0 | 57224981 | 14,443 |
| 0.4.5 | 1 month ago | v0.4.0 | 57203940 | 13,210 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.