jupyterhub 1.0.7 Helm chart

Name: jupyterhub Helm chart 1.0.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

JupyterHub Helm Chart with configurable-http-proxy, KubeSpawner, Gateway API, and secure Kubernetes defaults

Version 1.0.7 todaydeploys tag 4.3.5 0Artifact Hub

jupyterhub 1.0.7 deploys 3 container images: curlimages/curl, quay.io/jupyterhub/k8s-hub and jupyterhub/configurable-http-proxy. Across them, 575 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2023-45853 in zlib 1:1.2.13.dfsg-1, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

6,2500086489

575 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	8.21.0	0067	194
quay.io/jupyterhub/k8s-hub	4.3.5	0065435	5,281
jupyterhub/configurable-http-proxy	5.3.0	001547	775

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

563 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-10723	bind9@1:9.18.47-1~deb12u1	1:9.18.49-1~deb12u2
Low	DEBIAN-CVE-2026-67693	gnutls28@3.7.9-2+deb12u6	no fix listed
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-85231	libtirpc@1.3.3+ds-1	no fix listed
Low	PYSEC-2026-3721	pip@25.0.1	26.2
Low	GHSA-w6j9-cwv2-h6wq	pyjwt@2.12.1	2.14.0
Low	PYSEC-2026-4183	pyjwt@2.12.1	2.15.0
Low	DEBIAN-CVE-2023-2609	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-95184	gnutls28@3.7.9-2+deb12u6	no fix listed
Low	ALPINE-CVE-2026-6429	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u14	no fix listed
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.13.5	3.14.1
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2026-86143	libxml2@2.9.14+dfsg-1.3~deb12u5	no fix listed
Low	DEBIAN-CVE-2023-1355	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3~deb12u5	no fix listed
Low	DEBIAN-CVE-2026-86142	libxml2@2.9.14+dfsg-1.3~deb12u5	no fix listed
Low	DEBIAN-CVE-2025-10148	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+deb12u3	no fix listed
Low	ALPINE-CVE-2026-4873	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-4p3w-j4w9-5jqw	moment@2.30.1	2.31.0
Low	GHSA-p4g4-x82p-q773	pyjwt@2.12.1	2.14.0
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-73073	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-102633	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-19668	bind9@1:9.18.47-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-75029	bind9@1:9.18.47-1~deb12u1	no fix listed
Low	GHSA-hj66-6f7g-4r5v	oauthlib@3.3.1	4.0.0
Low	DEBIAN-CVE-2023-1264	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3~deb12u5	no fix listed
Low	ALPINE-CVE-2026-7168	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2023-5441	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	GHSA-3hv7-mjh2-fv65	tornado@6.5.5	6.5.9
Low	DEBIAN-CVE-2026-57456	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-73077	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	GHSA-65pc-fj4g-8rjx	idna@3.13	3.15
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	GHSA-gvp8-978c-rx2q	pyjwt@2.12.1	no fix listed
Low	DEBIAN-CVE-2026-19033	bind9@1:9.18.47-1~deb12u1	no fix listed
Low	GHSA-2g87-pp6c-29x5	aiohttp@3.13.5	3.14.4
Low	GHSA-p43p-whwx-q52h	jupyterhub@5.4.6	5.5.0
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1+deb12u2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.7latest	today	4.3.5	0086489	6,250
1.0.6	2 days ago	4.3.5	0086489	6,250

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/jupyterhub.svg)](https://charts.stackradar.io/charts/helmforge/jupyterhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.