superset 1.4.0 Helm chart

Name: superset Helm chart 1.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

inseefrlab

Scored 14 Sept 2026

Apache Superset is a modern data exploration and visualization platform.

Version 1.4.0 3 years agodeploys tag 9cdaa280429ec297db16d56c94fd77b5d2aff107 1Artifact Hub

superset 1.4.0 deploys 4 container images: jwilder/dockerize, apache/superset, bitnami/postgresql and bitnami/redis. Across the 2 measured, 517 findings — 3 critical, 12 high — 8 on CISA KEV. The highest contribution is GHSA-5cx2-vq3h-x52c in apache-superset 0.0.0.dev0, fixed in 2.1.0.

Radar Score

7,129312129372

517 findings over 2 of 4 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
jwilder/dockerize×3	latest	00554	502
apache/superset×3	9cdaa280429ec297db16d56c94fd77b5d2aff107	312124318	6,627
bitnami/postgresql	14.2.0-debian-10-r70	—	unmeasured
bitnami/redis	6.2.6-debian-10-r120	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

517 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	PYSEC-2026-2104	aiohttp@3.7.4	3.14.0
Low	DSA-5391-1	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u4
Low	GHSA-3v9r-885j-762g	apache-superset@0.0.0.dev0	3.0.4
Low	GHSA-vv65-fjfj-4736	apache-superset@0.0.0.dev0	2.1.2
Low	DLA-4031-1	git@1:2.30.2-1	1:2.30.2-1+deb11u4
Low	DEBIAN-CVE-2021-46661	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.15-0+deb11u1
Low	DEBIAN-CVE-2021-46663	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.15-0+deb11u1
Low	DLA-4247-1	djvulibre@3.5.28-2	3.5.28-2.2~deb11u1
Low	DEBIAN-CVE-2021-46664	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.15-0+deb11u1
Low	DEBIAN-CVE-2021-46665	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.15-0+deb11u1
Low	DEBIAN-CVE-2021-46668	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.15-0+deb11u1
Low	DLA-4145-1	expat@2.2.10-2+deb11u2	2.2.10-2+deb11u7
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.6	2.5.0
Low	DEBIAN-CVE-2021-46662	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.15-0+deb11u1
Low	DLA-4208-1	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.29-0+deb11u1
Low	DLA-4481-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u2
Low	PYSEC-2026-1163	apache-superset@0.0.0.dev0	2.1.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.45.0	0.52.0
Low	DSA-5408-1	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u1
Low	GHSA-65pc-fj4g-8rjx	idna@3.2	3.15
Low	GHSA-9wx4-h78v-vm56	requests@2.26.0	2.32.0
Low	DLA-3945-1	libheif@1.11.0-1	1.11.0-1+deb11u2
Low	PYSEC-2025-183	pyjwt@2.2.0	no fix listed
Low	GHSA-7rxf-gvfg-47g4	flask-cors@3.0.10	6.0.0
Low	GHSA-jfmj-5v4g-7637	zipp@3.4.1	3.19.1
Low	DLA-4490-1	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u5
Low	GHSA-299q-3p96-5898	apache-superset@0.0.0.dev0	3.1.2
Low	DLA-4412-1	glib2.0@2.66.8-1	2.66.8-1+deb11u7
Low	GO-2026-4981	stdlib@go1.25.5	1.25.10
Low	DLA-3934-1	libheif@1.11.0-1	1.11.0-1+deb11u1
Low	DLA-4455-1	python3.9@3.9.2-1	3.9.2-1+deb11u5
Low	GO-2026-4977	stdlib@go1.25.5	1.25.10
Low	DLA-4315-1	tiff@4.2.0-1	4.2.0-1+deb11u7
Low	DLA-4259-1	systemd@247.3-6	247.3-7+deb11u7
Low	GO-2026-4986	stdlib@go1.25.5	1.25.10
Low	GHSA-966j-vmvw-g2g9	aiohttp@3.7.4	3.13.4
Low	GO-2026-4918	golang.org/x/net@v0.47.0	0.53.0
Low	GO-2026-4918	stdlib@go1.25.5	1.25.10
Low	DEBIAN-CVE-2023-52968	mariadb-10.5@1:10.5.12-0+deb11u1	1:10.5.26-0+deb11u1
Low	GO-2026-4337	stdlib@go1.25.5	1.24.13
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.6	2.7.0
Low	PYSEC-2025-15	flask-appbuilder@4.0.0	4.5.3
Low	DSA-5682-1	glib2.0@2.66.8-1	2.66.8-1+deb11u2
Low	DLA-4339-1	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u7
Low	DLA-4273-1	postgresql-13@13.7-0+deb11u1	13.22-0+deb11u1
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14
Low	GO-2026-4601	stdlib@go1.25.5	1.25.8
Low	DLA-4159-1	postgresql-13@13.7-0+deb11u1	13.21-0+deb11u1
Low	DLA-3875-1	gnutls28@3.7.1-5	3.7.1-5+deb11u6
Low	GHSA-8vgw-p6qm-5gr7	flask-cors@3.0.10	6.0.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	3 years ago	9cdaa280429ec297db16d56c94fd77b5d2aff107	312129372	7,129

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/inseefrlab/superset.svg)](https://charts.stackradar.io/charts/inseefrlab/superset)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.