jupyterhub 1.0.7 Helm chart

Name: jupyterhub Helm chart 1.0.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

JupyterHub Helm Chart with configurable-http-proxy, KubeSpawner, Gateway API, and secure Kubernetes defaults

Version 1.0.7 todaydeploys tag 4.3.5 0Artifact Hub

jupyterhub 1.0.7 deploys 3 container images: curlimages/curl, quay.io/jupyterhub/k8s-hub and jupyterhub/configurable-http-proxy. Across them, 575 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2023-45853 in zlib 1:1.2.13.dfsg-1, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

6,2500086489

575 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	8.21.0	00713	285
quay.io/jupyterhub/k8s-hub	4.3.5	0061445	5,111
jupyterhub/configurable-http-proxy	5.3.0	001549	797

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

578 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-28420	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2008-4677	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-14678	postgresql-15@15.16-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2026-18024	postgresql-15@15.16-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2026-22185	lmdb@0.9.24-1	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2026-97399	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2025-15224	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2018-6829	libgcrypt20@1.10.1-3	no fix listed
Low	DEBIAN-CVE-2026-112061	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed
Low	DEBIAN-CVE-2023-31486	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-54872	openssl@3.0.19-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-14666	postgresql-15@15.16-0+deb12u1	15.19-0+deb12u1
Low	ALPINE-CVE-2026-43895	jq@1.8.1-r0	1.8.2-r0
Low	DEBIAN-CVE-2026-77696	openssl@3.0.19-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-27456	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-41991	gzip@1.12-1	no fix listed
Low	DEBIAN-CVE-2026-18508	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-112060	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed
Low	DEBIAN-CVE-2026-0992	libxml2@2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6
Low	DEBIAN-CVE-2026-16241	postgresql-15@15.16-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-41080	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-14673	postgresql-15@15.16-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2026-102474	dash@0.5.12-2	no fix listed
Low	DEBIAN-CVE-2018-1000021	git@1:2.39.5-0+deb12u3	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-48233	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-48234	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-48235	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-48237	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-95818	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-105712	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-48236	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-48232	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-48231	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-40228	systemd@252.39-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2023-4735	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-4734	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-4751	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-48706	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-4733	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-4750	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-5535	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-2609	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-1355	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	GHSA-gx76-c99x-2c96	aiohttp@3.13.5	3.14.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.7latest	today	4.3.5	0086489	6,250
1.0.6	2 days ago	4.3.5	0086489	6,250

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/jupyterhub.svg)](https://charts.stackradar.io/charts/helmforge/jupyterhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.