csgship Helm chart

Name: csgship Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

csghub

Scored 15 Sept 2026

AI-based code intelligent generation

Latest 0.4.6 7 days agoapp version v0.4.0 0Artifact Hub

csgship 0.4.6 deploys 10 container images: envoyproxy/gateway, opencsghq/stakater-reloader, opencsghq/csgship-agentic, opencsghq/psql and 6 more. Across them, 1,042 findings — 3 critical, 9 high — 5 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.60.4, fixed in 1.84.0.

Radar Score

11,40239156874

1,042 findings over 10 of 10 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
envoyproxy/gateway×2	v1.7.5	00946	520
opencsghq/stakater-reloader	v1.4.19	00012	81
opencsghq/csgship-agentic	v0.4.0	1318100	1,551
opencsghq/psql×4	latest	111759	1,018
casbin/casdoor	3.62.1	0026152	1,798
opencsghq/csgship-portal	v1.2.1	011659	840
opencsghq/csgship-web×4	v0.4.0	1438193	2,936
library/busybox×3	latest	0000	0
opencsghq/postgres	15.19	0018160	1,597
library/redis	7.4.11	001493	1,061

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

631 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2025-4155	stdlib@go1.24.6	1.24.11
Low	DEBIAN-CVE-2025-10911	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	GO-2024-3086	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	GHSA-gqgw-jghv-mxwx	tablib@3.8.0	3.10.0
Low	ALPINE-CVE-2026-32778	expat@2.7.0-r0	2.7.5-r0
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2025-4008	stdlib@go1.24.6	1.24.8
Low	GO-2025-4010	stdlib@go1.24.6	1.24.8
Low	PYSEC-2026-248	starlette@0.41.2	1.3.0
Low	DEBIAN-CVE-2024-10041	pam@1.5.2-6+deb12u2	no fix listed
Low	GHSA-cxpq-8v7q-cg56	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4
Low	GHSA-h7pq-86h8-rp5x	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4
Low	GHSA-m2v6-2jmh-4c68	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4
Low	GHSA-w5pp-99ch-qj29	github.com/go-git/go-git/v5@v5.16.3	5.19.1
Low	GHSA-g47c-3xmw-q6m2	djangorestframework@3.15.1	3.17.2
Low	ALPINE-CVE-2026-32776	expat@2.7.0-r0	2.7.5-r0
Low	DEBIAN-CVE-2024-56433	shadow@1:4.17.4-2	no fix listed
Low	GHSA-3xc5-wrhm-f963	github.com/go-git/go-git/v5@v5.16.3	5.18.0
Low	GO-2026-6222	golang.org/x/image@v0.18.0	0.45.0
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	GO-2025-4014	stdlib@go1.24.6	1.24.8
Low	DLA-4491-1	glib2.0@2.66.8-1+deb11u6	2.66.8-1+deb11u8
Low	ALPINE-CVE-2026-14663	postgresql17@17.2-r0	17.11-r0
Low	GHSA-fcrp-7gc2-93g7	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r9	1.2.5-r10
Low	GHSA-qhmc-3mvr-f2j4	django-allauth@0.61.0	65.13.0
Low	GO-2026-5892	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	GHSA-8m3c-c723-h4p4	django-allauth@0.61.0	65.13.0
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.8	3.5.33
Low	ALPINE-CVE-2026-6472	postgresql17@17.2-r0	17.10-r0
Low	DEBIAN-CVE-2026-13595	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.26.0	0.29.0
Low	GO-2026-4976	stdlib@go1.24.6	1.25.10
Low	GO-2026-5031	golang.org/x/image@v0.18.0	0.41.0
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-5856	stdlib@go1.24.6	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.3.3-r0	3.3.6-r0
Low	GO-2025-4007	stdlib@go1.24.6	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.47.0	0.56.0
Low	GO-2026-4980	stdlib@go1.24.6	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GO-2026-5039	stdlib@go1.24.6	1.25.11
Low	GO-2026-5894	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	ALPINE-CVE-2026-2003	postgresql17@17.2-r0	17.8-r0
Low	GHSA-m959-cc7f-wv43	cryptography@45.0.6	46.0.6
Low	GO-2025-4013	stdlib@go1.24.6	1.24.8
Low	ALPINE-CVE-2025-8961	tiff@4.7.0-r0	4.7.1-r0
Low	GO-2026-4946	stdlib@go1.24.6	1.25.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.6latest	7 days ago	v0.4.0	39156874	11,402
0.4.5	11 days ago	v0.4.0	39157880	11,478

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/csghub/csgship.svg)](https://charts.stackradar.io/charts/csghub/csgship)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.