core Helm chart

Name: core Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

instill-ai

Scored 15 Sept 2026

The Helm chart of Instill Core

Latest 0.1.75 4 months agodeploys tag v1.9.2 2Artifact Hub

core 0.1.75 deploys 15 container images: groundnuty/k8s-wait-for, openfga/openfga, curlimages/curl, instill/api-gateway and 11 more. Across the 14 measured, 2,934 findings — 3 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r4, fixed in 8.4.0-r0.

Radar Score

30,9203224252,478

2,934 findings over 14 of 15 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
groundnuty/k8s-wait-for	v2.0	2839144	2,619
openfga/openfga×2	v1.9.2	009105	958
curlimages/curl×6	8.00.1	1243	307
instill/api-gateway	9bfdc88	01984	898
library/postgres×9	15-alpine	00456	494
instill/artifact-backend×4	b28766a	01101602	7,149
instill/console	0.68.5	0234178	2,385
temporalio/admin-tools×3	1.28	0045226	2,866
instill/mgmt-backend×4	d0933d4	0169410	4,909
instill/model-backend×4	611f0f2	0272420	5,132
instill/pipeline-backend×4	af347e7	—	not yet scanned
library/redis×2	8.4-alpine3.22	00410	180
library/registry×2	2.8.3	00170	550
library/influxdb	2.3.0-alpine	0534168	2,460
bitnamisecure/kubectl	latest	0002	13

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,280 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-0965	libssh@0.11.2-1+deb13u1	0.11.5-0+deb13u1
Low	DEBIAN-CVE-2025-50422	cairo@1.18.4-1+b1	no fix listed
Low	ALPINE-CVE-2026-14681	postgresql18@18.2-r0	18.5-r0
Low	GHSA-gm2g-2xr9-pxxj	go.temporal.io/server@v0.0.0-20260410203332-d155094229c0	1.20.0
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v5@v5.7.6	5.9.2
Low	DEBIAN-CVE-2026-52296	ffmpeg@7:7.1.3-0+deb13u1	7:7.1.5-0+deb13u1
Low	DEBIAN-CVE-2026-57062	gnupg2@2.4.7-21+deb13u1+b1	no fix listed
Low	DEBIAN-CVE-2026-15310	python3.13@3.13.5-2	no fix listed
Low	DEBIAN-CVE-2026-1485	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u3
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.10-4	no fix listed
Low	GHSA-xpg8-3hhp-p7w8	go.temporal.io/server@v0.0.0-20260410203332-d155094229c0	1.29.5
Low	DEBIAN-CVE-2026-52295	ffmpeg@7:7.1.3-0+deb13u1	7:7.1.4-0+deb13u1
Low	DEBIAN-CVE-2026-6879	python3.13@3.13.5-2	3.13.5-2+deb13u5
Low	DEBIAN-CVE-2026-52297	ffmpeg@7:7.1.3-0+deb13u1	7:7.1.5-0+deb13u1
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.7.1-2	2.8.2-1~deb13u1
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r18	1.37.0-r20
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-89156	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2025-66861	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-35388	openssh@1:10.0p1-7	1:10.0p1-7+deb13u3
Low	DEBIAN-CVE-2026-18503	python3.13@3.13.5-2	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.7.0-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-73283	openssh@1:10.0p1-7	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-2	4.9-2+deb13u1
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u1	no fix listed
Low	GHSA-q9w6-cwj4-gf4p	go.temporal.io/api@v1.18.1	1.44.1
None	DEBIAN-CVE-2026-19582	binutils@2.44-3	no fix listed
None	DEBIAN-CVE-2026-3479	python3.13@3.13.5-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.75latest	4 months ago	v1.9.2	3224252,478	30,920

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/instill-ai/core.svg)](https://charts.stackradar.io/charts/instill-ai/core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.