daskhub Helm chart

Name: daskhub Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dask

Scored 14 Sept 2026

Multi-user JupyterHub and Dask deployment.

Latest 2024.1.1 2 years agodeploys tag 3.9 3Artifact Hub

daskhub 2024.1.1 deploys 9 container images: quay.io/jupyterhub/k8s-network-tools, pangeo/base-notebook, registry.k8s.io/pause, ghcr.io/dask/dask-gateway-server and 5 more. Across the 8 measured, 1,215 findings — 1 critical, 21 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2024-2961 in glibc 2.35-0ubuntu3.5, fixed in 2.35-0ubuntu3.7.

Radar Score

14,094121198993

1,215 findings over 8 of 9 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jupyterhub/k8s-network-tools×2	3.2.1	0287	349
pangeo/base-notebook×2	2024.01.15	1582329	5,086
registry.k8s.io/pause×3	3.9	—	not yet scanned
ghcr.io/dask/dask-gateway-server×2	2024.1.0	011584	1,185
library/traefik	2.10.6	0536201	2,591
quay.io/jupyterhub/k8s-hub	3.2.1	0329148	2,218
quay.io/jupyterhub/configurable-http-proxy	4.6.1	031317	621
registry.k8s.io/kube-scheduler	v1.26.11	0214118	1,313
quay.io/jupyterhub/k8s-image-awaiter	3.2.1	00189	731

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

618 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2023-2043	stdlib@go1.18.10	1.20.8
Low	GO-2023-2186	stdlib@go1.18.10	1.20.11
Low	PYSEC-2025-183	pyjwt@2.8.0	no fix listed
Low	GHSA-jfmj-5v4g-7637	zipp@3.17.0	3.19.1
Low	DLA-4490-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u5
Low	GO-2024-3333	golang.org/x/net@v0.17.0	0.33.0
Low	UBUNTU-CVE-2026-78408	util-linux@2.37.2-4ubuntu3	no fix listed
Low	GHSA-q58r-hwc8-rm9j	bootstrap@3.4.1	no fix listed
Low	GHSA-w7vc-732c-9m39	pyjwt@2.8.0	2.13.0
Low	GHSA-3q9r-p662-5j8m	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.51
Low	UBUNTU-CVE-2026-54369	acl@2.3.1-1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.2
Low	PYSEC-2025-265	tornado@6.3.3	6.5.3
Low	PYSEC-2026-169	distributed@2024.1.0	2026.1.0
Low	GHSA-g754-hx8w-x2g6	github.com/quic-go/quic-go@v0.39.1	0.57.0
Low	ALPINE-CVE-2024-11053	curl@8.4.0-r0	8.11.1-r0
Low	GO-2024-3105	stdlib@go1.18.10	1.22.7
Low	UBUNTU-CVE-2026-13595	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	GO-2023-1621	stdlib@go1.18.10	1.19.7
Low	UBUNTU-CVE-2026-54371	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
Low	GO-2026-4981	stdlib@go1.18.10	1.25.10
Low	GO-2025-3563	stdlib@go1.18.10	1.23.8
Low	GHSA-v87v-83h2-53w7	mistune@3.0.2	3.2.1
Low	PYSEC-2026-2206	mistune@3.0.2	3.2.1
Low	PYSEC-2026-2208	mistune@3.0.2	3.2.1
Low	PYSEC-2026-2209	mistune@3.0.2	3.2.1
Low	GO-2026-4977	stdlib@go1.18.10	1.25.10
Low	GO-2024-2610	stdlib@go1.18.10	1.21.8
Low	UBUNTU-CVE-2026-16599	wget@1.21.2-2ubuntu1	no fix listed
Low	GO-2026-4986	stdlib@go1.18.10	1.25.10
Low	GHSA-966j-vmvw-g2g9	aiohttp@3.9.1	3.13.4
Low	UBUNTU-CVE-2026-5704	tar@1.34+dfsg-1ubuntu0.1.22.04.2	1.34+dfsg-1ubuntu0.1.22.04.6
Low	GO-2026-4918	golang.org/x/net@v0.17.0	0.53.0
Low	GO-2026-4918	stdlib@go1.18.10	1.25.10
Low	GO-2026-4337	stdlib@go1.18.10	1.24.13
Low	GHSA-w853-jp5j-5j7f	filelock@3.13.1	3.20.1
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.1.0	2.7.0
Low	UBUNTU-CVE-2024-28835	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.5
Low	GHSA-46wh-3698-f2cx	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.42
Low	DLA-4273-1	postgresql-13@13.13-0+deb11u1	13.22-0+deb11u1
Low	GHSA-3vff-hjqv-m7h8	jupyterhub@4.0.2	5.4.4
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u10	7.74.0-1.3+deb11u14
Low	GO-2026-4601	stdlib@go1.18.10	1.25.8
Low	DLA-4159-1	postgresql-13@13.13-0+deb11u1	13.21-0+deb11u1
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u6
Low	GHSA-q82r-2j7m-9rv4	github.com/go-acme/lego/v4@v4.14.0	4.25.2
Low	GO-2026-4484	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	no fix listed
Low	GHSA-4hjq-9h5c-252j	github.com/traefik/traefik/v2@v0.0.0-20231128144610-dae0491b612a	2.11.40
Low	UBUNTU-CVE-2026-78410	util-linux@2.37.2-4ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-58471	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2024.1.1latest	2 years ago	3.9	121198993	14,094

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dask/daskhub.svg)](https://charts.stackradar.io/charts/dask/daskhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.