StackRadar

kodiak 1.1.4 Helm chart

fikaworks

Scored 14 Sept 2026

Self hosted Kodiak, a bot to automatically update and merge GitHub PRs

Version 1.1.4 3 years agoapp version 0.54.0 0Artifact Hub

kodiak 1.1.4 deploys 2 container images: cdignam/kodiak and bitnami/redis. Across the 1 measured, 268 findings0 critical, 5 high 4 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.20.4, fixed in 1.0.1.

Radar Score

3,8920577185

268 findings over 1 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
cdignam/kodiakv0.54.005771853,892
bitnami/redis×25.0-debian-10unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

268 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-j8r2-6x86-q33qrequests@2.28.12.31.0
MediumDSA-4944-1krb5@1.17-31.17-3+deb10u2
MediumDSA-4657-1git@1:2.20.1-21:2.20.1-2+deb10u2
MediumPYSEC-2023-192urllib3@1.26.92.0.6
MediumDSA-4881-1curl@7.64.0-47.64.0-4+deb10u2
MediumDSA-5119-1subversion@1.10.4-11.10.4-1+deb10u3
MediumPYSEC-2024-60idna@3.23.7
MediumDSA-4942-1systemd@241-5241-7~deb10u8
MediumGHSA-ffqj-6fqr-9h24pyjwt@1.7.12.4.0
MediumGHSA-74m5-2c7w-9w3xstarlette@0.20.40.25.0
MediumGHSA-9v9h-cgj8-h64pcryptography@3.4.842.0.2
MediumDSA-4591-1cyrus-sasl2@2.1.27+dfsg-12.1.27+dfsg-1+deb10u1
MediumGHSA-2xpw-w6gg-jr37urllib3@1.26.92.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.26.92.6.0
MediumGHSA-3ww4-gg4f-jr7fcryptography@3.4.842.0.0
MediumDSA-4807-1openssl@1.1.1c-11.1.1d-0+deb10u4
MediumPYSEC-2024-230certifi@2021.5.302024.7.4
MediumGHSA-vqfr-h8mv-ghfjh11@0.12.00.16.0
MediumPYSEC-2026-2120black@21.9b026.3.0
MediumDSA-4530-1expat@2.2.6-22.2.6-2+deb10u1
MediumDLA-3530-1openssl@1.1.1c-11.1.1n-0+deb10u6
MediumPYSEC-2023-254cryptography@3.4.841.0.6
MediumDLA-3213-1krb5@1.17-31.17-3+deb10u5
MediumPYSEC-2022-43178cleo@0.8.12.0.0
MediumDSA-4496-1pango1.0@1.42.4-61.42.4-7~deb10u1
MediumDLA-3613-1curl@7.64.0-47.64.0-4+deb10u7
MediumDLA-3175-1python3.7@3.7.3-23.7.3-2+deb10u4
MediumGHSA-pq7m-3gw7-gq5xipython@7.27.07.31.1
MediumGHSA-w7pp-m8wf-vj6rcryptography@3.4.839.0.1
MediumDSA-4776-1mariadb-10.3@1:10.3.15-11:10.3.25-0+deb10u1
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
MediumGHSA-5xp3-jfq3-5q8xpip@19.2.121.1
LowPYSEC-2026-2132click@8.0.18.3.3
LowDLA-3614-1python3.7@3.7.3-23.7.3-2+deb10u6
LowDSA-5122-1gzip@1.9-31.9-3+deb10u1
LowDSA-5123-1xz-utils@5.2.4-15.2.4-1+deb10u1
LowDSA-4882-1openjpeg2@2.3.0-22.3.0-2+deb10u2
LowDSA-5073-1expat@2.2.6-22.2.6-2+deb10u2
LowGHSA-mq66-vcfc-8246mercurial@4.8.24.9
LowDSA-4489-1patch@2.7.6-32.7.6-3+deb10u1
LowGHSA-29pr-6jr8-q5jmsentry-sdk@1.5.121.14.0
LowDSA-4666-1openldap@2.4.47+dfsg-32.4.47+dfsg-3+deb10u2
LowDSA-4795-1krb5@1.17-31.17-3+deb10u1
LowDSA-4712-1imagemagick@8:6.9.10.23+dfsg-2.18:6.9.10.23+dfsg-2.1+deb10u1
LowDLA-3288-1curl@7.64.0-47.64.0-4+deb10u4
LowDLA-3651-1postgresql-11@11.4-111.22-0+deb10u1
LowDSA-4608-1tiff@4.0.10-44.1.0+git191117-2~deb10u1
LowDSA-5087-1cyrus-sasl2@2.1.27+dfsg-12.1.27+dfsg-1+deb10u2
LowPYSEC-2026-2121black@21.9b026.3.1
LowDSA-4618-1libexif@0.6.21-5.10.6.21-5.1+deb10u1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.4latest3 years ago0.54.005771853,892

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fikaworks/kodiak.svg)](https://charts.stackradar.io/charts/fikaworks/kodiak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.