core Helm chart

Name: core Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

instill-ai

Scored 15 Sept 2026

The Helm chart of Instill Core

Latest 0.1.75 4 months agodeploys tag v1.9.2 2Artifact Hub

core 0.1.75 deploys 15 container images: groundnuty/k8s-wait-for, openfga/openfga, curlimages/curl, instill/api-gateway and 11 more. Across the 14 measured, 2,934 findings — 3 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r4, fixed in 8.4.0-r0.

Radar Score

30,9203224252,478

2,934 findings over 14 of 15 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
groundnuty/k8s-wait-for	v2.0	2839144	2,619
openfga/openfga×2	v1.9.2	009105	958
curlimages/curl×6	8.00.1	1243	307
instill/api-gateway	9bfdc88	01984	898
library/postgres×9	15-alpine	00456	494
instill/artifact-backend×4	b28766a	01101602	7,149
instill/console	0.68.5	0234178	2,385
temporalio/admin-tools×3	1.28	0045226	2,866
instill/mgmt-backend×4	d0933d4	0169410	4,909
instill/model-backend×4	611f0f2	0272420	5,132
instill/pipeline-backend×4	af347e7	—	not yet scanned
library/redis×2	8.4-alpine3.22	00410	180
library/registry×2	2.8.3	00170	550
library/influxdb	2.3.0-alpine	0534168	2,460
bitnamisecure/kubectl	latest	0002	13

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,280 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.2.2+incompatible	no fix listed
Low	ALPINE-CVE-2026-47770	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5856	stdlib@go1.25.6	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.5.1-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-22795	openssl@3.5.4-1~deb13u1	3.5.4-1~deb13u2
Low	GO-2025-4007	stdlib@go1.23.10	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.45.0	0.56.0
Low	GO-2025-3749	stdlib@go1.24.2	1.24.4
Low	GO-2026-4980	stdlib@go1.25.6	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.1-r0	3.5.7-r0
Low	DEBIAN-CVE-2024-7883	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	DEBIAN-CVE-2026-42770	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2
Low	GO-2026-5039	stdlib@go1.25.6	1.25.11
Low	ALPINE-CVE-2026-41257	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-6114	go.etcd.io/etcd/server/v3@v3.5.5	3.5.33
Low	DEBIAN-CVE-2025-6075	python3.13@3.13.5-2	3.13.5-2+deb13u1
Low	GHSA-ffhc-5mcf-pf4q	next@15.4.7	15.5.16
Low	DEBIAN-CVE-2026-1484	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u3
Low	DEBIAN-CVE-2025-8732	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	GO-2025-4013	stdlib@go1.23.10	1.24.8
Low	GO-2025-3849	stdlib@go1.23.10	1.23.12
Low	GO-2026-4946	stdlib@go1.25.6	1.25.9
Low	GO-2025-3460	github.com/distribution/distribution@v2.8.3+incompatible	no fix listed
Low	GHSA-xc8m-28vv-4pjc	k8s.io/kubernetes@v1.25.4	1.25.10
Low	GO-2026-5066	golang.org/x/image@v0.27.0	0.43.0
Low	DEBIAN-CVE-2026-12003	python3.13@3.13.5-2	no fix listed
Low	GO-2026-4866	stdlib@go1.26.1	1.26.2
Low	GO-2026-4961	golang.org/x/image@v0.27.0	0.42.0
Low	DEBIAN-CVE-2026-47104	libusb-1.0@2:1.0.28-1	no fix listed
Low	DEBIAN-CVE-2026-55654	openssh@1:10.0p1-7	no fix listed
Low	ALPINE-CVE-2026-56131	expat@2.7.4-r0	2.8.2-r0
Low	DEBIAN-CVE-2026-56131	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2026-59845	libssh@0.11.2-1+deb13u1	0.11.5-0+deb13u1
Low	DEBIAN-CVE-2025-15649	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-f9jg-8p32-2f55	k8s.io/kubernetes@v1.25.4	1.26.0-alpha.3
Low	GO-2026-4603	stdlib@go1.25.6	1.25.8
Low	ALPINE-CVE-2026-0864	python3@3.12.12-r0	3.12.14-r0
Low	DEBIAN-CVE-2026-0864	python3.13@3.13.5-2	3.13.5-2+deb13u5
Low	GHSA-x4rx-4gw3-53p4	github.com/docker/docker@v28.2.2+incompatible	28.3.3
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-0988	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u3
Low	GO-2026-6303	golang.org/x/crypto@v0.45.0	0.55.0
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	GO-2026-6354	golang.org/x/crypto@v0.45.0	0.56.0
Low	DEBIAN-CVE-2026-29111	systemd@257.9-1~deb13u1	257.13-1~deb13u1
Low	GO-2025-3547	k8s.io/kubernetes@v1.25.4	no fix listed
Low	GO-2026-4982	stdlib@go1.25.6	1.25.10
Low	GO-2026-6091	stdlib@go1.25.6	1.25.13
Low	DEBIAN-CVE-2026-15059	systemd@257.9-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2007-2243	openssh@1:10.0p1-7	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.75latest	4 months ago	v1.9.2	3224252,478	30,920

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/instill-ai/core.svg)](https://charts.stackradar.io/charts/instill-ai/core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.