core Helm chart

Name: core Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

instill-ai

Scored 14 Sept 2026

The Helm chart of Instill Core

Latest 0.1.75 4 months agodeploys tag v1.9.2 2Artifact Hub

core 0.1.75 deploys 15 container images: groundnuty/k8s-wait-for, openfga/openfga, curlimages/curl, instill/api-gateway and 11 more. Across the 14 measured, 2,920 findings — 3 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r4, fixed in 8.4.0-r0.

Radar Score

30,8163224252,464

2,920 findings over 14 of 15 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
groundnuty/k8s-wait-for	v2.0	2839144	2,617
openfga/openfga×2	v1.9.2	009105	958
curlimages/curl×6	8.00.1	1243	307
instill/api-gateway	9bfdc88	01984	898
library/postgres×9	15-alpine	00456	493
instill/artifact-backend×4	b28766a	01101596	7,113
instill/console	0.68.5	0234178	2,384
temporalio/admin-tools×3	1.28	0045226	2,866
instill/mgmt-backend×4	d0933d4	0169406	4,877
instill/model-backend×4	611f0f2	0272416	5,100
instill/pipeline-backend×4	af347e7	—	not yet scanned
library/redis×2	8.4-alpine3.22	00410	180
library/registry×2	2.8.3	00170	550
library/influxdb	2.3.0-alpine	0534168	2,460
bitnamisecure/kubectl	latest	0002	13

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,274 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-3494	mariadb@11.4.9-r0	11.4.10-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e
Low	DEBIAN-CVE-2026-3446	python3.13@3.13.5-2	3.13.5-2+deb13u2
Low	DEBIAN-CVE-2026-70629	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-70630	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2023-39328	openjpeg2@2.5.3-2.1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-18393	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-69651	binutils@2.44-3	no fix listed
Low	GO-2025-4116	golang.org/x/crypto@v0.9.0	0.43.0
Low	GO-2026-4870	stdlib@go1.25.6	1.25.9
Low	GO-2022-0532	stdlib@go1.17.2	1.17.11
Low	DEBIAN-CVE-2025-11495	binutils@2.44-3	no fix listed
Low	GO-2025-4009	stdlib@go1.23.10	1.24.8
Low	DEBIAN-CVE-2026-86138	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-59995	openssh@1:10.0p1-7	no fix listed
Low	DEBIAN-CVE-2026-59996	openssh@1:10.0p1-7	no fix listed
Low	GO-2026-4947	stdlib@go1.25.6	1.25.9
Low	ALPINE-CVE-2026-2297	python3@3.12.12-r0	3.12.14-r0
Low	DEBIAN-CVE-2026-2297	python3.13@3.13.5-2	3.13.5-2+deb13u1
Low	DEBIAN-CVE-2026-86143	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	GO-2026-5061	golang.org/x/image@v0.27.0	0.43.0
Low	GO-2026-5062	golang.org/x/image@v0.27.0	0.43.0
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-rg2x-37c3-w2rh	github.com/docker/docker@v28.2.2+incompatible	no fix listed
Low	DEBIAN-CVE-2025-1371	elfutils@0.192-4	no fix listed
Low	GO-2025-4006	stdlib@go1.23.10	1.24.8
Low	GHSA-6jvc-q2x7-pchv	github.com/aws/aws-sdk-go@v1.30.12	1.34.0
Low	ALPINE-CVE-2026-56412	expat@2.7.4-r0	2.8.2-r0
Low	DEBIAN-CVE-2026-56412	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2026-4647	binutils@2.44-3	no fix listed
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	DEBIAN-CVE-2026-18090	gdk-pixbuf@2.42.12+dfsg-4+deb13u1	no fix listed
Low	GO-2026-5037	stdlib@go1.25.6	1.25.11
Low	DEBIAN-CVE-2026-40225	systemd@257.9-1~deb13u1	257.13-1~deb13u1
Low	GO-2026-4971	stdlib@go1.25.6	1.25.10
Low	ALPINE-CVE-2026-14672	postgresql18@18.2-r0	18.5-r0
Low	DEBIAN-CVE-2026-3832	gnutls28@3.8.9-3+deb13u1	3.8.9-3+deb13u4
Low	ALPINE-CVE-2026-50219	expat@2.7.4-r0	2.8.2-r0
Low	DEBIAN-CVE-2026-50219	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2025-13837	python3.13@3.13.5-2	3.13.5-2+deb13u1
Low	DEBIAN-CVE-2026-0967	libssh@0.11.2-1+deb13u1	0.11.5-0+deb13u1
Low	DEBIAN-CVE-2026-25834	mbedtls@3.6.5-0.1~deb13u1	3.6.6-0.1~deb13u1
Low	ALPINE-CVE-2026-56409	expat@2.7.4-r0	2.8.2-r0
Low	DEBIAN-CVE-2026-56409	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2025-11413	binutils@2.44-3	no fix listed
Low	GO-2026-5972	stdlib@go1.25.6	1.25.13
Low	GO-2026-6088	stdlib@go1.25.6	1.25.13
Low	GO-2026-6089	stdlib@go1.25.6	1.25.13
Low	GO-2026-6090	stdlib@go1.25.6	1.25.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.75latest	4 months ago	v1.9.2	3224252,464	30,816

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/instill-ai/core.svg)](https://charts.stackradar.io/charts/instill-ai/core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.