core 0.1.75 Helm chart

Name: core Helm chart 0.1.75: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

instill-ai

Scored 15 Sept 2026

The Helm chart of Instill Core

Version 0.1.75 4 months agodeploys tag v1.9.2 2Artifact Hub

core 0.1.75 deploys 15 container images: groundnuty/k8s-wait-for, openfga/openfga, curlimages/curl, instill/api-gateway and 11 more. Across the 14 measured, 2,934 findings — 3 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r4, fixed in 8.4.0-r0.

Radar Score

30,9203224252,478

2,934 findings over 14 of 15 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
groundnuty/k8s-wait-for	v2.0	2839144	2,619
openfga/openfga×2	v1.9.2	009105	958
curlimages/curl×6	8.00.1	1243	307
instill/api-gateway	9bfdc88	01984	898
library/postgres×9	15-alpine	00456	494
instill/artifact-backend×4	b28766a	01101602	7,149
instill/console	0.68.5	0234178	2,385
temporalio/admin-tools×3	1.28	0045226	2,866
instill/mgmt-backend×4	d0933d4	0169410	4,909
instill/model-backend×4	611f0f2	0272420	5,132
instill/pipeline-backend×4	af347e7	—	not yet scanned
library/redis×2	8.4-alpine3.22	00410	180
library/registry×2	2.8.3	00170	550
library/influxdb	2.3.0-alpine	0534168	2,460
bitnamisecure/kubectl	latest	0002	13

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,280 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-58472	wget@1.25.0-2	no fix listed
Low	GHSA-68m9-983m-f3v5	github.com/openfga/openfga@v1.9.2	1.14.0
Low	DEBIAN-CVE-2025-15366	python3.13@3.13.5-2	no fix listed
Low	DEBIAN-CVE-2026-87910	python3.13@3.13.5-2	no fix listed
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.73.0	1.83.1
Low	DEBIAN-CVE-2026-25835	mbedtls@3.6.5-0.1~deb13u1	3.6.6-0.1~deb13u1
Low	GHSA-v6v8-xj6m-xwqh	github.com/hashicorp/go-retryablehttp@v0.6.4	0.7.7
Low	GO-2023-2382	stdlib@go1.18.3	1.20.12
Low	ALPINE-CVE-2026-6429	curl@8.17.0-r1	8.20.0-r0
Low	DEBIAN-CVE-2026-6429	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
Low	DEBIAN-CVE-2026-65706	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	GO-2022-1143	stdlib@go1.18.3	1.18.9
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.45.0	0.52.0
Low	ALPINE-CVE-2026-22796	openssl@3.5.1-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-22796	openssl@3.5.4-1~deb13u1	3.5.4-1~deb13u2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.9.0	0.45.0
Low	GHSA-r6j8-c6r2-37rr	k8s.io/kubernetes@v1.25.4	1.32.10
Low	DEBIAN-CVE-2026-64833	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.45.0	0.52.0
Low	GO-2024-2599	stdlib@go1.18.3	1.21.8
Low	GHSA-6pjf-3r9x-m592	github.com/distribution/distribution@v2.8.3+incompatible	no fix listed
Low	GO-2022-1038	stdlib@go1.18.3	1.18.7
Low	GHSA-68g3-v927-f742	next@15.4.7	15.5.21
Low	GO-2024-3106	stdlib@go1.18.3	1.22.7
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	DEBIAN-CVE-2026-1965	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
Low	GO-2023-1570	stdlib@go1.18.3	1.19.6
Low	DEBIAN-CVE-2022-0563	util-linux@2.41-5	no fix listed
Low	GHSA-82m2-cv7p-4m75	k8s.io/kubernetes@v1.25.4	1.27.16
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.75-10+b3	1:2.75-10+deb13u1
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.34.3	0.35.4
Low	DEBIAN-CVE-2026-11979	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	DEBIAN-CVE-2026-7168	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	GO-2022-0531	stdlib@go1.17.2	1.17.11
Low	GO-2024-2600	stdlib@go1.18.3	1.21.8
Low	DEBIAN-CVE-2007-2768	openssh@1:10.0p1-7	no fix listed
Low	GHSA-pvcr-v8j8-j5q3	github.com/lestrrat-go/jwx/v2@v2.0.11	2.0.19
Low	DEBIAN-CVE-2025-15367	python3.13@3.13.5-2	no fix listed
Low	ALPINE-CVE-2023-42366	busybox@1.35.0-r17	1.35.0-r18
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.73.0	1.82.1
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.3.11	3.3.16
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	DEBIAN-CVE-2026-3783	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4
Low	GHSA-w9j2-pvgh-6h63	axios@1.11.0	1.15.1
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	DEBIAN-CVE-2026-4873	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.75latest	4 months ago	v1.9.2	3224252,478	30,920

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/instill-ai/core.svg)](https://charts.stackradar.io/charts/instill-ai/core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.