kubefaas 0.1.6 Helm chart

Name: kubefaas Helm chart 0.1.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

hfoxy-helm-charts

Scored 22 Sept 2026

Helm Chart for installing Kubefaas, a Function as a Service platform for Kubernetes

Version 0.1.6 2 years agodeploys tag main-2afc757 0Artifact Hub

kubefaas 0.1.6 deploys 4 container images: hfoxy4/kubefaas-builder, library/docker, hfoxy4/kubefaas-controller and bitnami/redis. Across the 3 measured, 564 findings — 2 critical, 12 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2024-6387 in openssh 9.7_p1-r3, fixed in 9.7_p1-r4.

Radar Score

6,11321289461

564 findings over 3 of 4 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
hfoxy4/kubefaas-builder	main-2afc757	0628165	2,136
library/docker	27.0.1-dind	2439183	2,556
hfoxy4/kubefaas-controller	main-2afc757	0222113	1,421
bitnami/redis	7.2.5-debian-12-r0	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

247 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2024-6387	openssh@9.7_p1-r3	9.7_p1-r4
Critical	ALPINE-CVE-2025-48384KEV	git@2.45.2-r0	2.45.4-r0
High	ALPINE-CVE-2025-15467	openssl@3.3.1-r0	3.3.6-r0
High	ALPINE-CVE-2024-6119	openssl@3.3.1-r0	3.3.2-r0
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v26.1.4+incompatible	26.1.5
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.8.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.8.0	0.23.0
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.5	1.1.12
High	ALPINE-CVE-2025-26466	openssh@9.7_p1-r3	9.7_p1-r5
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.24.0	0.52.0
Medium	ALPINE-CVE-2024-7264	curl@8.7.1-r0	8.9.1-r0
Medium	ALPINE-CVE-2024-5535	openssl@3.3.1-r0	3.3.1-r1
Medium	ALPINE-CVE-2025-26465	openssh@9.7_p1-r3	9.7_p1-r5
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.24.0	0.31.0
Medium	ALPINE-CVE-2024-6197	curl@8.7.1-r0	8.9.0-r0
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.8.0	0.17.0
Medium	ALPINE-CVE-2024-45492	expat@2.6.2-r0	2.6.3-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.59.0	1.79.3
Medium	ALPINE-CVE-2024-45491	expat@2.6.2-r0	2.6.3-r0
Medium	GO-2025-4077	github.com/docker/compose/v2@v0.0.0-20240624125819-f79c28168bf6	2.40.2
Medium	ALPINE-CVE-2024-45490	expat@2.6.2-r0	2.6.3-r0
Medium	ALPINE-CVE-2025-9230	openssl@3.3.1-r0	3.3.5-r0
Medium	ALPINE-CVE-2024-12797	openssl@3.3.1-r0	3.3.3-r0
Medium	ALPINE-CVE-2025-9231	openssl@3.3.1-r0	3.3.5-r0
Medium	ALPINE-CVE-2025-48385	git@2.45.2-r0	2.45.4-r0
Medium	GO-2026-4887	github.com/docker/docker@v26.1.4+incompatible	no fix listed
Medium	ALPINE-CVE-2024-8176	expat@2.6.2-r0	2.7.0-r0
Medium	ALPINE-CVE-2025-59375	expat@2.6.2-r0	2.7.2-r0
Medium	ALPINE-CVE-2024-9681	curl@8.7.1-r0	8.11.0-r0
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.27.1	1.33.0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.24.0	0.52.0
Medium	ALPINE-CVE-2025-0725	curl@8.7.1-r0	8.12.0-r0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.24.0	0.52.0
Medium	GHSA-3669-72x9-r9p3	github.com/gorilla/schema@v1.2.1	1.4.1
Medium	ALPINE-CVE-2024-9143	openssl@3.3.1-r0	3.3.2-r1
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.24.0	0.52.0
Medium	ALPINE-CVE-2024-52006	git@2.45.2-r0	2.45.3-r0
Medium	ALPINE-CVE-2025-0665	curl@8.7.1-r0	8.12.0-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.3.1-r0	3.3.7-r0
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	ALPINE-CVE-2025-31115	xz@5.6.1-r3	5.6.2-r1
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.8.1	1.8.3
Medium	ALPINE-CVE-2025-9232	openssl@3.3.1-r0	3.3.5-r0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.24.0	0.35.0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.24.0	0.52.0
Medium	ALPINE-CVE-2025-69421	openssl@3.3.1-r0	3.3.6-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.3.1-r0	3.3.7-r0
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.11.0	0.27.0
Medium	ALPINE-CVE-2026-28387	openssl@3.3.1-r0	3.3.7-r0
Medium	ALPINE-CVE-2025-69420	openssl@3.3.1-r0	3.3.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.6latest	2 years ago	main-2afc757	21289461	6,113

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/hfoxy-helm-charts/kubefaas.svg)](https://charts.stackradar.io/charts/hfoxy-helm-charts/kubefaas)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.