superset 1.4.0 Helm chart
inseefrlabScored 14 Sept 2026
Apache Superset is a modern data exploration and visualization platform.
Version 1.4.0 3 years agodeploys tag 9cdaa280429ec297db16d56c94fd77b5d2aff107 1Artifact Hub
superset 1.4.0 deploys 4 container images: jwilder/dockerize, apache/superset, bitnami/postgresql and bitnami/redis. Across the 2 measured, 517 findings — 3 critical, 12 high — 8 on CISA KEV. The highest contribution is GHSA-5cx2-vq3h-x52c in apache-superset 0.0.0.dev0, fixed in 2.1.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| jwilder/ | latest | 00554 | 502 |
| apache/ | 9cdaa280429ec297db16d56c94fd77b5d2aff107 | 312124318 | 6,627 |
| bitnami/ | 14.2.0-debian-10-r70 | — | unmeasured |
| bitnami/ | 6.2.6-debian-10-r120 | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | PYSEC-2026-1187 | apache-superset | 2.1.1 |
| Low | PYSEC-2026-2106 | aiohttp | 3.14.0 |
| Low | GHSA-3wq7-rqq7-wx6j | aiohttp | 3.13.4 |
| Low | GHSA-mwf2-qr4v-94h2 | apache-superset | 6.0.0 |
| Low | DLA-4127-1 | subversion | 1.14.1-3+deb11u2 |
| Low | GHSA-fh55-r93g-j68g | aiohttp | 3.13.3 |
| Low | DSA-5228-1 | gdk-pixbuf | 2.42.2+dfsg-1+deb11u1 |
| Low | DSA-5203-1 | gnutls28 | 3.7.1-5+deb11u2 |
| Low | DSA-5726-1 | krb5 | 1.18.3-6+deb11u5 |
| Low | PYSEC-2026-2113 | aiohttp | 3.14.1 |
| Low | GHSA-54jq-c3m8-4m76 | aiohttp | 3.13.3 |
| Low | GHSA-prg7-hcfm-mfcr | sqlparse | 0.6.0 |
| Low | PYSEC-2026-2112 | aiohttp | 3.14.1 |
| Low | DSA-5686-1 | dav1d | 0.7.1-3+deb11u1 |
| Low | GHSA-2cx9-54hp-r698 | apache-superset | 4.1.0 |
| Low | DLA-3893-1 | expat | 2.2.10-2+deb11u6 |
| Low | DSA-5622-1 | postgresql-13 | 13.14-0+deb11u1 |
| Low | GHSA-752w-5fwx-jx9f | pyjwt | 2.12.0 |
| Low | DSA-5299-1 | openexr | 2.5.4-2+deb11u1 |
| Low | PYSEC-2026-237 | aiohttp | 3.14.1 |
| Low | DSA-5333-1 | tiff | 4.2.0-1+deb11u3 |
| Low | GHSA-765j-9r45-w2q2 | flask-appbuilder | 4.8.1 |
| Low | DSA-5365-1 | curl | 7.74.0-1.3+deb11u7 |
| Low | DSA-5587-1 | curl | 7.74.0-1.3+deb11u11 |
| Low | GHSA-mfx4-hv73-q22v | aiohttp | 3.14.2 |
| Low | GHSA-cq5v-8q36-5273 | aiohttp | 3.14.3 |
| Low | DSA-5433-1 | libx11 | 2:1.7.2-1+deb11u1 |
| Low | PYSEC-2026-3554 | cryptography | 49.0.0 |
| Low | DSA-5255-1 | libksba | 1.5.0-3+deb11u1 |
| Low | GHSA-2vrm-gr82-f7m5 | aiohttp | 3.13.4 |
| Low | GHSA-fxgf-3xh6-m2pp | apache-superset | 5.0.0 |
| Low | GHSA-43qf-4rqw-9q2g | flask-cors | 6.0.0 |
| Low | GHSA-748r-5r8q-273m | apache-superset | 1.5.1 |
| Low | GHSA-fj97-2v9x-w5m4 | apache-superset | 5.0.0 |
| Low | DSA-5746-1 | postgresql-13 | 13.16-0+deb11u1 |
| Low | DLA-4107-1 | openjpeg2 | 2.4.0-3+deb11u1 |
| Low | DLA-4321-1 | openssl | 1.1.1w-0+deb11u4 |
| Low | GHSA-mq44-7p77-q5h7 | aiohttp | 3.14.2 |
| Low | DSA-5305-1 | libksba | 1.5.0-3+deb11u2 |
| Low | DLA-3926-1 | perl | 5.32.1-4+deb11u4 |
| Low | GHSA-hg6j-4rv6-33pg | aiohttp | 3.14.0 |
| Low | DSA-5108-1 | tiff | 4.2.0-1+deb11u1 |
| Low | DSA-5276-1 | pixman | 0.40.0-1.1~deb11u1 |
| Low | GHSA-34jh-p97f-mpxf | urllib3 | 1.26.19 |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | PYSEC-2026-1170 | apache-superset | 2.1.1 |
| Low | GHSA-mwh4-6h8g-pg8w | aiohttp | 3.13.4 |
| Low | DSA-5370-1 | apr | 1.7.0-6+deb11u2 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.4.0latest | 3 years ago | 9cdaa280429ec297db16d56c94fd77b5d2aff107 | 312129372 | 7,129 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.