StackRadar

superset 1.4.2 Helm chart

helmforgeVerified publisher

Scored 21 Oct 2026

Apache Superset BI platform with web, worker, and beat deployments backed by PostgreSQL and Redis

Version 1.4.2 yesterdayapp version 6.1.0 0Artifact Hub

superset 1.4.2 deploys 5 container images: library/busybox, helmforge/kubectl, apache/superset, library/postgres and 1 more. Across them, 667 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2023-45853 in zlib 1:1.2.13.dfsg-1, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

6,7460084583

667 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
library/busybox×81.3700000
helmforge/kubectl×31.35.30030891,474
apache/superset×46.1.000322712,920
library/postgres18.6-trixie00171591,748
library/redis8.10.200564604

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

461 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2026-6617golang.org/x/net@v0.47.00.60.0
LowGO-2026-6617stdlib@go1.24.61.26.9
LowGHSA-5x94-69rx-g8h2pillow@11.3.012.3.0
LowGHSA-phj9-mv4w-65pmpillow@11.3.012.3.0
LowALPINE-CVE-2026-75803openssl@3.5.5-r03.5.8-r0
LowDEBIAN-CVE-2026-75803openssl@3.0.20-1~deb12u23.0.22-1~deb12u1
LowGHSA-xgmm-8j9v-c9wxpyjwt@2.10.12.13.0
LowGHSA-8v84-f9pq-wr9xpillow@11.3.012.3.0
LowGO-2025-4007stdlib@go1.24.61.24.9
LowDEBIAN-CVE-2026-107708krb5@1.21.3-5+deb13u1no fix listed
LowGO-2026-6608stdlib@go1.24.61.26.9
LowDEBIAN-CVE-2026-12064curl@7.88.1-10+deb12u15no fix listed
LowDEBIAN-CVE-2026-8932curl@7.88.1-10+deb12u15no fix listed
LowGO-2026-6607stdlib@go1.24.61.26.9
LowGHSA-jwv3-5hgf-82wwcryptography@46.0.549.0.0
LowDEBIAN-CVE-2026-95619gcc-14@14.2.0-19no fix listed
LowDEBIAN-CVE-2026-95619gcc-12@12.2.0-14+deb12u1no fix listed
LowALPINE-CVE-2026-8286curl@8.14.1-r28.14.1-r4
LowDEBIAN-CVE-2026-8286curl@7.88.1-10+deb12u15no fix listed
LowGHSA-6r8x-57c9-28j4pillow@11.3.012.3.0
LowGHSA-9hw9-ch79-4vh6pillow@11.3.012.3.0
LowGHSA-jjj6-mw9f-p565pillow@11.3.012.3.0
LowGO-2025-4013stdlib@go1.24.61.24.8
LowDEBIAN-CVE-2026-6791glibc@2.41-12+deb13u4no fix listed
LowGO-2026-6609stdlib@go1.24.61.26.9
LowDEBIAN-CVE-2022-27943gcc-12@12.2.0-14+deb12u1no fix listed
LowDEBIAN-CVE-2026-80230curl@7.88.1-10+deb12u15no fix listed
LowDEBIAN-CVE-2026-5435glibc@2.41-12+deb13u4no fix listed
LowGHSA-ffc3-869f-jxw9pyjwt@2.10.12.14.0
LowDEBIAN-CVE-2026-107778krb5@1.21.3-5+deb13u1no fix listed
LowGHSA-g6cj-pr64-35w5cryptography@46.0.550.0.0
LowGO-2026-4946stdlib@go1.24.61.25.9
LowALPINE-CVE-2026-6253curl@8.14.1-r28.14.1-r4
LowDEBIAN-CVE-2026-6253curl@7.88.1-10+deb12u15no fix listed
LowALPINE-CVE-2026-6276curl@8.14.1-r28.14.1-r4
LowDEBIAN-CVE-2026-6276curl@7.88.1-10+deb12u15no fix listed
LowGO-2026-6629golang.org/x/text@v0.31.00.41.0
LowDEBIAN-CVE-2025-70873sqlite3@3.46.1-7+deb13u2no fix listed
LowGHSA-m2h6-j472-rp4ccryptography@46.0.549.0.0
LowALPINE-CVE-2026-2673openssl@3.5.5-r03.5.6-r0
LowGHSA-pwv6-vv43-88grpillow@11.3.012.2.0
LowDEBIAN-CVE-2026-19499glibc@2.41-12+deb13u4no fix listed
LowGO-2026-6613stdlib@go1.24.61.26.9
LowDEBIAN-CVE-2026-76642util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-9547curl@7.88.1-10+deb12u15no fix listed
LowDEBIAN-CVE-2025-8941pam@1.7.0-5no fix listed
LowGO-2026-6605stdlib@go1.24.61.26.9
LowDEBIAN-CVE-2021-45346sqlite3@3.46.1-7+deb13u2no fix listed
LowALPINE-CVE-2026-3784curl@8.14.1-r28.14.1-r4
LowGO-2026-6610stdlib@go1.24.61.26.9

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.4.2latestyesterday6.1.000845836,746
1.4.02 days ago6.1.000845836,746
1.3.105 days ago6.1.000845836,746
1.3.87 days ago6.1.000845836,746
1.3.720 days ago6.1.000876077,047
1.3.626 days ago6.1.000856016,868

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helmforge/superset.svg)](https://charts.stackradar.io/charts/helmforge/superset)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 20 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.