superset Helm chart

Name: superset Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

inseefrlab

Scored 14 Sept 2026

Apache Superset is a modern data exploration and visualization platform.

Latest 1.4.0 3 years agodeploys tag 9cdaa280429ec297db16d56c94fd77b5d2aff107 1Artifact Hub

superset 1.4.0 deploys 4 container images: jwilder/dockerize, apache/superset, bitnami/postgresql and bitnami/redis. Across the 2 measured, 517 findings — 3 critical, 12 high — 8 on CISA KEV. The highest contribution is GHSA-5cx2-vq3h-x52c in apache-superset 0.0.0.dev0, fixed in 2.1.0.

Radar Score

7,129312129372

517 findings over 2 of 4 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
jwilder/dockerize×3	latest	00554	502
apache/superset×3	9cdaa280429ec297db16d56c94fd77b5d2aff107	312124318	6,627
bitnami/postgresql	14.2.0-debian-10-r70	—	unmeasured
bitnami/redis	6.2.6-debian-10-r120	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

372 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-4026-1	tiff@4.2.0-1	4.2.0-1+deb11u6
Low	GHSA-29vq-49wr-vm6x	werkzeug@2.0.3	3.1.6
Low	GO-2026-4341	stdlib@go1.25.5	1.24.12
Low	DSA-5346-1	libde265@1.0.8-1	1.0.11-0+deb11u1
Low	GHSA-hc74-9vjm-c9xv	apache-superset@0.0.0.dev0	3.0.0
Low	GHSA-hgf8-39gv-g3f2	werkzeug@2.0.3	3.1.4
Low	PYSEC-2026-1187	apache-superset@0.0.0.dev0	2.1.1
Low	PYSEC-2026-2106	aiohttp@3.7.4	3.14.0
Low	GHSA-3wq7-rqq7-wx6j	aiohttp@3.7.4	3.13.4
Low	GHSA-mwf2-qr4v-94h2	apache-superset@0.0.0.dev0	6.0.0
Low	DLA-4127-1	subversion@1.14.1-3	1.14.1-3+deb11u2
Low	GHSA-fh55-r93g-j68g	aiohttp@3.7.4	3.13.3
Low	DSA-5228-1	gdk-pixbuf@2.42.2+dfsg-1	2.42.2+dfsg-1+deb11u1
Low	DSA-5203-1	gnutls28@3.7.1-5	3.7.1-5+deb11u2
Low	DSA-5726-1	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u5
Low	PYSEC-2026-2113	aiohttp@3.7.4	3.14.1
Low	GHSA-54jq-c3m8-4m76	aiohttp@3.7.4	3.13.3
Low	GHSA-prg7-hcfm-mfcr	sqlparse@0.3.0	0.6.0
Low	PYSEC-2026-2112	aiohttp@3.7.4	3.14.1
Low	DSA-5686-1	dav1d@0.7.1-3	0.7.1-3+deb11u1
Low	GHSA-2cx9-54hp-r698	apache-superset@0.0.0.dev0	4.1.0
Low	DLA-3893-1	expat@2.2.10-2+deb11u2	2.2.10-2+deb11u6
Low	DSA-5622-1	postgresql-13@13.7-0+deb11u1	13.14-0+deb11u1
Low	GHSA-752w-5fwx-jx9f	pyjwt@2.2.0	2.12.0
Low	DSA-5299-1	openexr@2.5.4-2	2.5.4-2+deb11u1
Low	PYSEC-2026-237	aiohttp@3.7.4	3.14.1
Low	DSA-5333-1	tiff@4.2.0-1	4.2.0-1+deb11u3
Low	GHSA-765j-9r45-w2q2	flask-appbuilder@4.0.0	4.8.1
Low	DSA-5365-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u7
Low	DSA-5587-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u11
Low	GHSA-mfx4-hv73-q22v	aiohttp@3.7.4	3.14.2
Low	GHSA-cq5v-8q36-5273	aiohttp@3.7.4	3.14.3
Low	DSA-5433-1	libx11@2:1.7.2-1	2:1.7.2-1+deb11u1
Low	PYSEC-2026-3554	cryptography@3.4.7	49.0.0
Low	DSA-5255-1	libksba@1.5.0-3	1.5.0-3+deb11u1
Low	GHSA-2vrm-gr82-f7m5	aiohttp@3.7.4	3.13.4
Low	GHSA-fxgf-3xh6-m2pp	apache-superset@0.0.0.dev0	5.0.0
Low	GHSA-43qf-4rqw-9q2g	flask-cors@3.0.10	6.0.0
Low	GHSA-748r-5r8q-273m	apache-superset@0.0.0.dev0	1.5.1
Low	GHSA-fj97-2v9x-w5m4	apache-superset@0.0.0.dev0	5.0.0
Low	DSA-5746-1	postgresql-13@13.7-0+deb11u1	13.16-0+deb11u1
Low	DLA-4107-1	openjpeg2@2.4.0-3	2.4.0-3+deb11u1
Low	DLA-4321-1	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u4
Low	GHSA-mq44-7p77-q5h7	aiohttp@3.7.4	3.14.2
Low	DSA-5305-1	libksba@1.5.0-3	1.5.0-3+deb11u2
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	GHSA-hg6j-4rv6-33pg	aiohttp@3.7.4	3.14.0
Low	DSA-5108-1	tiff@4.2.0-1	4.2.0-1+deb11u1
Low	DSA-5276-1	pixman@0.40.0-1	0.40.0-1.1~deb11u1
Low	GHSA-34jh-p97f-mpxf	urllib3@1.26.6	1.26.19

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	3 years ago	9cdaa280429ec297db16d56c94fd77b5d2aff107	312129372	7,129

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/inseefrlab/superset.svg)](https://charts.stackradar.io/charts/inseefrlab/superset)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.