kubefaas Helm chart

Name: kubefaas Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

hfoxy-helm-charts

Scored 22 Sept 2026

Helm Chart for installing Kubefaas, a Function as a Service platform for Kubernetes

Latest 0.1.6 2 years agodeploys tag main-2afc757 0Artifact Hub

kubefaas 0.1.6 deploys 4 container images: hfoxy4/kubefaas-builder, library/docker, hfoxy4/kubefaas-controller and bitnami/redis. Across the 3 measured, 564 findings — 2 critical, 12 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2024-6387 in openssh 9.7_p1-r3, fixed in 9.7_p1-r4.

Radar Score

6,11321289461

564 findings over 3 of 4 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
hfoxy4/kubefaas-builder	main-2afc757	0628165	2,136
library/docker	27.0.1-dind	2439183	2,556
hfoxy4/kubefaas-controller	main-2afc757	0222113	1,421
bitnami/redis	7.2.5-debian-12-r0	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

247 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-28389	openssl@3.3.1-r0	3.3.7-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.3.1-r0	3.3.7-r0
Low	ALPINE-CVE-2025-46835	git@2.45.2-r0	2.45.4-r0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.5	1.2.8
Low	GHSA-r277-6w6q-xmqw	github.com/getkin/kin-openapi@v0.123.0	0.144.0
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.24.0	0.52.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.5.0	4.5.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.2.1	5.2.2
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.24.0	0.52.0
Low	GHSA-4c29-8rgm-jvjj	github.com/moby/buildkit@v0.14.0	0.28.1
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.59.0	1.82.2
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.59.0	1.83.1
Low	ALPINE-CVE-2025-27614	git@2.45.2-r0	2.45.4-r0
Low	ALPINE-CVE-2025-69419	openssl@3.3.1-r0	3.3.6-r0
Low	ALPINE-CVE-2026-31789	openssl@3.3.1-r0	3.3.7-r0
Low	GHSA-wq9g-9vfc-cfq9	github.com/getkin/kin-openapi@v0.123.0	0.131.0
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.5	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.5	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/selinux@v1.10.0	1.13.0
Low	ALPINE-CVE-2024-50602	expat@2.6.2-r0	2.6.4-r0
Low	ALPINE-CVE-2025-46334	git@2.45.2-r0	2.45.4-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r1	1.3.2-r0
Low	ALPINE-CVE-2024-8096	curl@8.7.1-r0	8.10.0-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.24.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.24.0	0.52.0
Low	GHSA-4vrq-3vrq-g6gg	github.com/moby/buildkit@v0.14.0	0.28.1
Low	ALPINE-CVE-2026-45186	expat@2.6.2-r0	2.8.1-r0
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.8.0	0.13.0
Low	GHSA-mmfr-pmjx-hw9w	github.com/getkin/kin-openapi@v0.123.0	0.141.0
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v26.1.4+incompatible	29.2.0
Low	ALPINE-CVE-2025-15468	openssl@3.3.1-r0	3.3.6-r0
Low	GHSA-77fj-vx54-gvh7	github.com/gomarkdown/markdown@v0.0.0-20231222211730-1d6d20845b47	0.0.0-20260411013819-759bbc3e3207
Low	GO-2026-4341	stdlib@go1.21.11	1.24.12
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v26.1.4+incompatible	no fix listed
Low	ALPINE-CVE-2025-26519	musl@1.2.5-r0	1.2.5-r1
Low	GHSA-xhf5-7wjv-pqxp	github.com/containerd/containerd@v1.7.7	1.7.33
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.21.0	1.43.0
Low	ALPINE-CVE-2025-48386	git@2.45.2-r0	2.45.4-r0
Low	ALPINE-CVE-2026-25210	expat@2.6.2-r0	2.7.4-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.24.0	0.52.0
Low	GO-2024-2963	stdlib@go1.21.11	1.21.12
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.26.0	0.55.0
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r0	1.2.5-r3
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd@v1.7.7	1.7.33
Low	ALPINE-CVE-2025-66199	openssl@3.3.1-r0	3.3.6-r0
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v24.0.7+incompatible	24.0.9
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.24.0	0.45.0
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.26.0	0.38.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.59.0	1.83.1
Low	ALPINE-CVE-2026-22796	openssl@3.3.1-r0	3.3.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.6latest	2 years ago	main-2afc757	21289461	6,113

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/hfoxy-helm-charts/kubefaas.svg)](https://charts.stackradar.io/charts/hfoxy-helm-charts/kubefaas)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.