jupyterhub 1.0.7 Helm chart

Name: jupyterhub Helm chart 1.0.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

JupyterHub Helm Chart with configurable-http-proxy, KubeSpawner, Gateway API, and secure Kubernetes defaults

Version 1.0.7 todaydeploys tag 4.3.5 0Artifact Hub

jupyterhub 1.0.7 deploys 3 container images: curlimages/curl, quay.io/jupyterhub/k8s-hub and jupyterhub/configurable-http-proxy. Across them, 575 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2023-45853 in zlib 1:1.2.13.dfsg-1, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

6,2500086489

575 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	8.21.0	0067	194
quay.io/jupyterhub/k8s-hub	4.3.5	0065435	5,281
jupyterhub/configurable-http-proxy	5.3.0	001547	775

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

563 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2024-43790	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-76957	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2023-31437	systemd@252.39-1~deb12u1	no fix listed
Low	GHSA-qccp-gfcp-xxvc	urllib3@2.6.3	2.7.0
Low	DEBIAN-CVE-2023-31438	systemd@252.39-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4+deb12u2+b2	1:2.66-4+deb12u3
Low	DEBIAN-CVE-2026-13757	p11-kit@0.24.1-2	no fix listed
Low	DEBIAN-CVE-2026-15534	perl@5.36.0-7+deb12u3	no fix listed
Low	ALPINE-CVE-2026-7009	curl@8.19.0-r0	8.20.0-r0
Low	DEBIAN-CVE-2026-8674	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-4105	systemd@252.39-1~deb12u1	252.39-1~deb12u2
Low	DEBIAN-CVE-2025-24014	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-19941	bind9@1:9.18.47-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-77119	bind9@1:9.18.47-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-72522	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-73072	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	GHSA-54p9-h82j-f925	multidict@6.7.1	6.9.1
Low	DEBIAN-CVE-2026-53613	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-56404	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56410	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56411	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56392	coreutils@9.1-1	no fix listed
Low	GHSA-537c-gmf6-5ccf	cryptography@48.0.0	48.0.1
Low	DEBIAN-CVE-2026-85977	libtirpc@1.3.3+ds-1	no fix listed
Low	DEBIAN-CVE-2026-56405	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56408	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-78301	bind9@1:9.18.47-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-35189	openssl@3.0.19-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-19542	glibc@2.36-9+deb12u13	no fix listed
Low	DEBIAN-CVE-2026-56391	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-28418	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-50219	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56412	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-32777	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	DEBIAN-CVE-2024-43374	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-18938	p11-kit@0.24.1-2	no fix listed
Low	DEBIAN-CVE-2025-29088	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-50813	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2017-18018	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2025-10966	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-11850	krb5@1.20.1-2+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-56132	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-29768	vim@2:9.0.1378-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-75805	openssl@3.0.19-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-54370	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2026-45130	vim@2:9.0.1378-2+deb12u2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.7latest	today	4.3.5	0086489	6,250
1.0.6	2 days ago	4.3.5	0086489	6,250

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/jupyterhub.svg)](https://charts.stackradar.io/charts/helmforge/jupyterhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.