StackRadar

daskhub 2024.1.1 Helm chart

dask

Scored 14 Sept 2026

Multi-user JupyterHub and Dask deployment.

Version 2024.1.1 2 years agodeploys tag 3.9 3Artifact Hub

daskhub 2024.1.1 deploys 9 container images: quay.io/jupyterhub/k8s-network-tools, pangeo/base-notebook, registry.k8s.io/pause, ghcr.io/dask/dask-gateway-server and 5 more. Across the 8 measured, 1,215 findings1 critical, 21 high 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2024-2961 in glibc 2.35-0ubuntu3.5, fixed in 2.35-0ubuntu3.7.

Radar Score

14,094121198993

1,215 findings over 8 of 9 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
quay.io/jupyterhub/k8s-network-tools×23.2.10287349
pangeo/base-notebook×22024.01.1515823295,086
registry.k8s.io/pause×33.9not yet scanned
ghcr.io/dask/dask-gateway-server×22024.1.00115841,185
library/traefik2.10.605362012,591
quay.io/jupyterhub/k8s-hub3.2.103291482,218
quay.io/jupyterhub/configurable-http-proxy4.6.1031317621
registry.k8s.io/kube-schedulerv1.26.1102141181,313
quay.io/jupyterhub/k8s-image-awaiter3.2.100189731

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

141 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDLA-3859-1systemd@247.3-7+deb11u4247.3-7+deb11u6
MediumDSA-5621-1bind9@1:9.16.44-1~deb11u11:9.16.48-1
MediumGO-2024-2687stdlib@go1.18.101.21.9
MediumDLA-4052-1postgresql-13@13.13-0+deb11u113.19-0+deb11u1
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.14.00.52.0
MediumDLA-3898-1nghttp2@1.43.0-11.43.0-1+deb11u2
MediumALPINE-CVE-2024-7264curl@8.4.0-r08.9.1-r0
MediumALPINE-CVE-2024-5535openssl@3.1.3-r03.1.6-r0
MediumUBUNTU-CVE-2024-5535openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.17
MediumUBUNTU-CVE-2018-13410zip@3.0-12build2no fix listed
MediumDLA-3942-2openssl@1.1.1w-0+deb11u11.1.1w-0+deb11u2
MediumDLA-3867-1git@1:2.30.2-1+deb11u21:2.30.2-1+deb11u3
MediumUBUNTU-CVE-2026-45447openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.25
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.14.00.31.0
MediumGHSA-6qq8-5wq3-86rpgithub.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a2.3.0-rc6
MediumALPINE-CVE-2024-6197curl@8.4.0-r08.9.0-r0
MediumDLA-4097-1vim@2:8.2.2434-3+deb11u12:8.2.2434-3+deb11u2
MediumUBUNTU-CVE-2021-46848libtasn1-6@4.18.0-4build14.18.0-4ubuntu0.2
MediumGHSA-27wf-5967-98gxk8s.io/kubernetes@v1.26.111.28.12
MediumPYSEC-2024-187virtualenv@20.25.020.26.6
MediumALPINE-CVE-2023-5363openssl@3.1.3-r03.1.4-r0
MediumUBUNTU-CVE-2023-5363openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.12+Fips1
MediumUBUNTU-CVE-2024-37371krb5@1.19.2-2ubuntu0.31.19.2-2ubuntu0.4
MediumGHSA-cx63-2mw6-8hw5setuptools@69.0.370.0.0
MediumUBUNTU-CVE-2017-11164pcre3@2:8.39-13ubuntu0.22.04.1no fix listed
MediumGHSA-2f96-g7mh-g2hxgitpython@3.1.413.1.51
MediumGHSA-38jv-5279-wg99urllib3@2.1.02.6.3
MediumALPINE-CVE-2024-4741openssl@3.1.3-r03.1.6-r0
MediumUBUNTU-CVE-2024-4741openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.17
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.56.31.79.3
MediumGHSA-232p-vwff-86mpgithub.com/docker/docker@v20.10.21+incompatible20.10.24
MediumDLA-4050-1bind9@1:9.16.44-1~deb11u11:9.16.50-1~deb11u3
MediumPYSEC-2025-49setuptools@69.0.378.1.1
MediumUBUNTU-CVE-2022-40735openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.16
MediumUBUNTU-CVE-2023-3446openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.12+Fips1
MediumPYSEC-2024-322jupyterlab@4.0.104.3.0
MediumPYSEC-2024-234jupyter-server-proxy@4.1.03.2.3
MediumUBUNTU-CVE-2016-20013glibc@2.35-0ubuntu3.5no fix listed
MediumUBUNTU-CVE-2023-31486perl@5.34.0-3ubuntu1.3no fix listed
MediumUBUNTU-CVE-2018-5709krb5@1.19.2-2ubuntu0.3no fix listed
MediumGHSA-xf64-8mw2-4gr2github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a2.11.48
MediumGHSA-x3m3-4wpv-5vgcrequirejs@2.3.62.3.7
MediumDLA-4364-1bind9@1:9.16.44-1~deb11u11:9.16.50-1~deb11u4
MediumGHSA-6p68-w45g-48j7github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a2.11.23
MediumUBUNTU-CVE-2024-33599glibc@2.35-0ubuntu3.52.35-0ubuntu3.8
MediumGHSA-hrhx-6h34-j5hcgithub.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a2.6.1
MediumUBUNTU-CVE-2024-0553gnutls28@3.7.3-4ubuntu1.33.7.3-4ubuntu1.4
MediumUBUNTU-CVE-2022-4899libzstd@1.4.8+dfsg-3build1no fix listed
MediumALPINE-CVE-2023-5678openssl@3.1.3-r03.1.4-r1
MediumUBUNTU-CVE-2023-5678openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.14

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2024.1.1latest2 years ago3.912119899314,094

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/dask/daskhub.svg)](https://charts.stackradar.io/charts/dask/daskhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.