core Helm chart

Name: core Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

instill-ai

Scored 14 Sept 2026

The Helm chart of Instill Core

Latest 0.1.75 4 months agodeploys tag v1.9.2 2Artifact Hub

core 0.1.75 deploys 15 container images: groundnuty/k8s-wait-for, openfga/openfga, curlimages/curl, instill/api-gateway and 11 more. Across the 14 measured, 2,920 findings — 3 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r4, fixed in 8.4.0-r0.

Radar Score

30,8163224252,464

2,920 findings over 14 of 15 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
groundnuty/k8s-wait-for	v2.0	2839144	2,617
openfga/openfga×2	v1.9.2	009105	958
curlimages/curl×6	8.00.1	1243	307
instill/api-gateway	9bfdc88	01984	898
library/postgres×9	15-alpine	00456	493
instill/artifact-backend×4	b28766a	01101596	7,113
instill/console	0.68.5	0234178	2,384
temporalio/admin-tools×3	1.28	0045226	2,866
instill/mgmt-backend×4	d0933d4	0169406	4,877
instill/model-backend×4	611f0f2	0272416	5,100
instill/pipeline-backend×4	af347e7	—	not yet scanned
library/redis×2	8.4-alpine3.22	00410	180
library/registry×2	2.8.3	00170	550
library/influxdb	2.3.0-alpine	0534168	2,460
bitnamisecure/kubectl	latest	0002	13

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

208 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-xgrm-4fwx-7qm8	github.com/jackc/pgx/v5@v5.7.6	5.9.0
Medium	DEBIAN-CVE-2026-42009	gnutls28@3.8.9-3+deb13u1	3.8.9-3+deb13u4
Medium	ALPINE-CVE-2026-48165	mariadb@11.4.9-r0	11.4.12-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.1-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-63076	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2025-59375	expat@2.7.1-2	2.8.2-1~deb13u1
Medium	ALPINE-CVE-2023-28320	curl@7.83.1-r4	8.1.0-r0
Medium	ALPINE-CVE-2023-35945	nghttp2@1.47.0-r0	1.47.0-r1
Medium	DEBIAN-CVE-2023-45929	slang2@2.3.3-5+b2	no fix listed
Medium	DEBIAN-CVE-2026-33846	gnutls28@3.8.9-3+deb13u1	3.8.9-3+deb13u4
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.27.1	1.33.0
Medium	DEBIAN-CVE-2018-15919	openssh@1:10.0p1-7	no fix listed
Medium	GHSA-9jj7-4m8r-rfcm	github.com/jackc/pgx/v5@v5.7.6	5.9.0
Medium	ALPINE-CVE-2022-43552	curl@7.83.1-r4	7.83.1-r5
Medium	DEBIAN-CVE-2022-1210	tiff@4.7.0-3+deb13u2	no fix listed
Medium	DEBIAN-CVE-2018-10126	tiff@4.7.0-3+deb13u2	no fix listed
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.45.0	0.52.0
Medium	GHSA-89xv-2m56-2m9x	next@15.4.7	15.5.21
Medium	ALPINE-CVE-2026-42764	openssl@3.5.1-r0	3.5.7-r0
Medium	DEBIAN-CVE-2026-42764	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2
Medium	GHSA-wf45-q9ch-q8gh	github.com/apache/thrift@v0.17.0	0.23.0
Medium	DEBIAN-CVE-2025-13151	libtasn1-6@4.20.0-2	4.20.0-2+deb13u1
Medium	GHSA-4hjh-wcwx-xvwj	axios@1.11.0	1.12.0
Medium	GHSA-p9j2-gv94-2wf4	next@15.4.7	15.5.21
Medium	DEBIAN-CVE-2024-26461	krb5@1.21.3-5	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-6988	openjpeg2@2.5.3-2.1~deb13u1	no fix listed
Medium	DEBIAN-CVE-2026-5450	glibc@2.41-12+deb13u1	2.41-12+deb13u4
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.45.0	0.52.0
Medium	ALPINE-CVE-2023-23916	curl@7.83.1-r4	7.83.1-r6
Medium	ALPINE-CVE-2023-46218	curl@7.83.1-r4	8.5.0-r0
Medium	ALPINE-CVE-2026-14669	postgresql18@18.2-r0	18.5-r0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.1-r0	3.5.7-r0
Medium	DEBIAN-CVE-2026-34182	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.45.0	0.52.0
Medium	DEBIAN-CVE-2021-36691	jpeg-xl@0.11.1-4	no fix listed
Medium	ALPINE-CVE-2026-44172	mariadb@11.4.9-r0	11.4.11-r0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.1-r0	3.5.7-r0
Medium	DEBIAN-CVE-2026-34183	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20220319134239-a9b59b0215f8	0.0.0-20220412211240-33da011f77ad
Medium	ALPINE-CVE-2026-6100	python3@3.12.12-r0	3.12.14-r0
Medium	DEBIAN-CVE-2026-6100	python3.13@3.13.5-2	3.13.5-2+deb13u2
Medium	DEBIAN-CVE-2023-45931	mesa@25.0.7-2	no fix listed
Medium	ALPINE-CVE-2026-31790	openssl@3.5.1-r0	3.5.6-r0
Medium	DEBIAN-CVE-2026-31790	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2
Medium	ALPINE-CVE-2026-34180	openssl@3.5.1-r0	3.5.7-r0
Medium	DEBIAN-CVE-2026-34180	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	ALPINE-CVE-2026-7383	openssl@3.5.1-r0	3.5.7-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.75latest	4 months ago	v1.9.2	3224252,464	30,816

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/instill-ai/core.svg)](https://charts.stackradar.io/charts/instill-ai/core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.