daskhub 2024.1.1 Helm chart

Name: daskhub Helm chart 2024.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dask

Scored 14 Sept 2026

Multi-user JupyterHub and Dask deployment.

Version 2024.1.1 2 years agodeploys tag 3.9 3Artifact Hub

daskhub 2024.1.1 deploys 9 container images: quay.io/jupyterhub/k8s-network-tools, pangeo/base-notebook, registry.k8s.io/pause, ghcr.io/dask/dask-gateway-server and 5 more. Across the 8 measured, 1,215 findings — 1 critical, 21 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2024-2961 in glibc 2.35-0ubuntu3.5, fixed in 2.35-0ubuntu3.7.

Radar Score

14,094121198993

1,215 findings over 8 of 9 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jupyterhub/k8s-network-tools×2	3.2.1	0287	349
pangeo/base-notebook×2	2024.01.15	1582336	5,126
registry.k8s.io/pause×3	3.9	—	not yet scanned
ghcr.io/dask/dask-gateway-server×2	2024.1.0	011584	1,185
library/traefik	2.10.6	0536201	2,591
quay.io/jupyterhub/k8s-hub	3.2.1	0329148	2,218
quay.io/jupyterhub/configurable-http-proxy	4.6.1	031317	621
registry.k8s.io/kube-scheduler	v1.26.11	0214118	1,313
quay.io/jupyterhub/k8s-image-awaiter	3.2.1	00189	731

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

625 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-993g-76c3-p5m4	pyjwt@2.8.0	2.13.0
Low	UBUNTU-CVE-2025-68160	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	GHSA-4x4j-2g7c-83w6	pillow@10.2.0	12.3.0
Low	GO-2026-4403	stdlib@go1.18.10	1.23.9
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-2ubuntu2.1	no fix listed
Low	GHSA-2hm2-hc3v-44h9	mistune@3.0.2	3.3.0
Low	GHSA-29wx-vh33-7x7r	github.com/golang-jwt/jwt/v4@v4.5.0	4.5.1
Low	GO-2026-5025	golang.org/x/net@v0.17.0	0.55.0
Low	GHSA-753j-mpmx-qq6g	tornado@6.3.3	6.4.1
Low	GHSA-f7cq-5v43-8pwp	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.3
Low	GO-2026-4970	stdlib@go1.18.10	1.25.12
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.44.327	no fix listed
Low	GHSA-62fc-8686-hfmq	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.54
Low	GO-2026-5027	golang.org/x/net@v0.17.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.17.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.17.0	0.55.0
Low	GO-2025-4205	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	no fix listed
Low	GHSA-58qw-9mgm-455v	pip@23.3.2	26.1
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-5build1	1.0.8-5ubuntu0.1
Low	UBUNTU-CVE-2025-9820	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.8
Low	GO-2026-4602	stdlib@go1.18.10	1.25.8
Low	UBUNTU-CVE-2026-27456	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-18508	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed
Low	GO-2026-6192	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	no fix listed
Low	UBUNTU-CVE-2026-89160	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.27-3ubuntu2.1	no fix listed
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9
Low	GHSA-597g-3phw-6986	virtualenv@20.25.0	20.36.1
Low	UBUNTU-CVE-2025-69418	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	GO-2026-5024	golang.org/x/sys@v0.13.0	0.44.0
Low	GO-2026-6179	golang.org/x/mod@v0.12.0	0.40.0
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed
Low	UBUNTU-CVE-2025-6141	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3
Low	DLA-3954-2	postgresql-13@13.13-0+deb11u1	13.18-0+deb11u1
Low	DLA-3972-1	tzdata@2021a-1+deb11u10	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u10	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u10	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	GO-2023-2334	github.com/go-jose/go-jose/v3@v3.0.0	3.0.1
Low	GO-2024-2726	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.2
Low	GO-2024-2880	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.3
Low	GO-2024-2917	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.4
Low	GO-2024-2941	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.5
Low	GO-2024-3342	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.15
Low	GO-2025-3627	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.24
Low	GO-2026-4530	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.37
Low	GO-2026-4684	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.40
Low	GO-2026-4897	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.42

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2024.1.1latest	2 years ago	3.9	121198993	14,094

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dask/daskhub.svg)](https://charts.stackradar.io/charts/dask/daskhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.