csgship Helm chart

Name: csgship Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

csghub

Scored 15 Sept 2026

AI-based code intelligent generation

Latest 0.4.6 7 days agoapp version v0.4.0 0Artifact Hub

csgship 0.4.6 deploys 10 container images: envoyproxy/gateway, opencsghq/stakater-reloader, opencsghq/csgship-agentic, opencsghq/psql and 6 more. Across them, 1,042 findings — 3 critical, 9 high — 5 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.60.4, fixed in 1.84.0.

Radar Score

11,40239156874

1,042 findings over 10 of 10 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
envoyproxy/gateway×2	v1.7.5	00946	520
opencsghq/stakater-reloader	v1.4.19	00012	81
opencsghq/csgship-agentic	v0.4.0	1318100	1,551
opencsghq/psql×4	latest	111759	1,018
casbin/casdoor	3.62.1	0026152	1,798
opencsghq/csgship-portal	v1.2.1	011659	840
opencsghq/csgship-web×4	v0.4.0	1438193	2,936
library/busybox×3	latest	0000	0
opencsghq/postgres	15.19	0018160	1,597
library/redis	7.4.11	001493	1,061

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

757 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r9	1.2.5-r10
Low	GHSA-qhmc-3mvr-f2j4	django-allauth@0.61.0	65.13.0
Low	GO-2026-5892	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	GHSA-8m3c-c723-h4p4	django-allauth@0.61.0	65.13.0
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.8	3.5.33
Low	ALPINE-CVE-2026-6472	postgresql17@17.2-r0	17.10-r0
Low	DEBIAN-CVE-2026-13595	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.26.0	0.29.0
Low	GO-2026-4976	stdlib@go1.24.6	1.25.10
Low	GO-2026-5031	golang.org/x/image@v0.18.0	0.41.0
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-5856	stdlib@go1.24.6	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.3.3-r0	3.3.6-r0
Low	GO-2025-4007	stdlib@go1.24.6	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.47.0	0.56.0
Low	GO-2026-4980	stdlib@go1.24.6	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GO-2026-5039	stdlib@go1.24.6	1.25.11
Low	GO-2026-5894	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	ALPINE-CVE-2026-2003	postgresql17@17.2-r0	17.8-r0
Low	GHSA-m959-cc7f-wv43	cryptography@45.0.6	46.0.6
Low	GO-2025-4013	stdlib@go1.24.6	1.24.8
Low	ALPINE-CVE-2025-8961	tiff@4.7.0-r0	4.7.1-r0
Low	GO-2026-4946	stdlib@go1.24.6	1.25.9
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.45.5	no fix listed
Low	GHSA-5xmw-vc9v-4wf2	pillow@11.3.0	12.2.0
Low	GO-2026-5066	golang.org/x/image@v0.18.0	0.43.0
Low	DLA-4420-1	postgresql-13@13.21-0+deb11u1	13.23-0+deb11u1
Low	GO-2026-4961	golang.org/x/image@v0.18.0	0.42.0
Low	ALPINE-CVE-2026-4367	libxpm@3.5.17-r0	3.5.19-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.0-r0	2.8.2-r0
Low	DEBIAN-CVE-2025-15649	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GO-2026-5899	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	GO-2026-4603	stdlib@go1.24.6	1.25.8
Low	GHSA-r73j-pqj5-w3x7	pillow@11.3.0	12.2.0
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u3	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.47.0	0.55.0
Low	GO-2026-5509	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	GO-2026-5896	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed
Low	GHSA-jp4c-xjxw-mgf9	pip@25.2	26.1
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	GO-2026-6354	golang.org/x/crypto@v0.47.0	0.56.0
Low	GO-2026-4982	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2025-30258	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	GO-2026-6091	stdlib@go1.24.6	1.25.13
Low	DEBIAN-CVE-2026-15059	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-41991	gzip@1.13-1	1.13-1+deb13u1
Low	GO-2026-5535	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.6latest	7 days ago	v0.4.0	39156874	11,402
0.4.5	11 days ago	v0.4.0	39157880	11,478

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/csghub/csgship.svg)](https://charts.stackradar.io/charts/csghub/csgship)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.