core Helm chart

Name: core Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

instill-ai

Scored 14 Sept 2026

The Helm chart of Instill Core

Latest 0.1.75 4 months agodeploys tag v1.9.2 2Artifact Hub

core 0.1.75 deploys 15 container images: groundnuty/k8s-wait-for, openfga/openfga, curlimages/curl, instill/api-gateway and 11 more. Across the 14 measured, 2,920 findings — 3 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r4, fixed in 8.4.0-r0.

Radar Score

30,8163224252,464

2,920 findings over 14 of 15 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
groundnuty/k8s-wait-for	v2.0	2839144	2,617
openfga/openfga×2	v1.9.2	009105	958
curlimages/curl×6	8.00.1	1243	307
instill/api-gateway	9bfdc88	01984	898
library/postgres×9	15-alpine	00456	493
instill/artifact-backend×4	b28766a	01101596	7,113
instill/console	0.68.5	0234178	2,384
temporalio/admin-tools×3	1.28	0045226	2,866
instill/mgmt-backend×4	d0933d4	0169406	4,877
instill/model-backend×4	611f0f2	0272416	5,100
instill/pipeline-backend×4	af347e7	—	not yet scanned
library/redis×2	8.4-alpine3.22	00410	180
library/registry×2	2.8.3	00170	550
library/influxdb	2.3.0-alpine	0534168	2,460
bitnamisecure/kubectl	latest	0002	13

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,274 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2025-69647	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-50813	sqlite3@3.46.1-7	no fix listed
Low	ALPINE-CVE-2026-32777	expat@2.7.4-r0	2.7.5-r0
Low	DEBIAN-CVE-2026-32777	expat@2.7.1-2	2.8.2-1~deb13u1
Low	GHSA-xx6v-rp6x-q39c	axios@1.11.0	1.15.1
Low	GO-2026-5038	stdlib@go1.25.6	1.25.11
Low	DEBIAN-CVE-2017-18018	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2025-66442	mbedtls@3.6.5-0.1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-11494	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-16768	gdk-pixbuf@2.42.12+dfsg-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.25.5-3	no fix listed
Low	GO-2026-5942	golang.org/x/net@v0.47.0	0.56.0
Low	GO-2026-5942	stdlib@go1.26.1	1.26.6
Low	DEBIAN-CVE-2026-66037	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-82522	jpeg-xl@0.11.1-4	no fix listed
Low	GHSA-f88m-g3jw-g9cj	sharp@0.34.3	0.35.0
Low	GHSA-898c-q2cr-xwhg	axios@1.11.0	1.16.0
Low	GHSA-qxp5-gwg8-xv66	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd	0.36.0
Low	DEBIAN-CVE-2025-11412	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-11414	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-11850	krb5@1.21.3-5	no fix listed
Low	DEBIAN-CVE-2026-52295	ffmpeg@7:7.1.3-0+deb13u1	7:7.1.4-0+deb13u1
Low	ALPINE-CVE-2026-56132	expat@2.7.4-r0	2.8.2-r0
Low	DEBIAN-CVE-2026-56132	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2025-11081	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.7.1-2	no fix listed
Low	GO-2025-4012	stdlib@go1.23.10	1.24.8
Low	DEBIAN-CVE-2026-15146	wget@1.25.0-2	no fix listed
Low	GO-2025-3956	stdlib@go1.23.10	1.23.12
Low	DEBIAN-CVE-2026-15588	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u4
Low	GO-2026-4440	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd	0.45.0
Low	GO-2025-4011	stdlib@go1.23.10	1.24.8
Low	GO-2025-4015	stdlib@go1.23.10	1.24.8
Low	GO-2026-6218	stdlib@go1.25.6	1.25.13
Low	DEBIAN-CVE-2026-56392	coreutils@9.7-3	no fix listed
Low	GHSA-w67g-5rqw-f597	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	DEBIAN-CVE-2026-54370	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2025-1376	elfutils@0.192-4	no fix listed
Low	GO-2026-4441	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd	0.45.0
Low	GO-2026-4559	golang.org/x/net@v0.50.0	0.51.0
Low	DEBIAN-CVE-2005-2541	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2025-10966	curl@8.14.1-2+deb13u2	no fix listed
Low	DEBIAN-CVE-2025-1152	binutils@2.44-3	no fix listed
Low	GO-2024-2689	go.temporal.io/server@v0.0.0-20260410203332-d155094229c0	1.20.5
Low	DEBIAN-CVE-2026-15534	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-23679	libusb-1.0@2:1.0.28-1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.75latest	4 months ago	v1.9.2	3224252,464	30,816

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/instill-ai/core.svg)](https://charts.stackradar.io/charts/instill-ai/core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.