core Helm chart

Name: core Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

instill-ai

Scored 14 Sept 2026

The Helm chart of Instill Core

Latest 0.1.75 4 months agodeploys tag v1.9.2 2Artifact Hub

core 0.1.75 deploys 15 container images: groundnuty/k8s-wait-for, openfga/openfga, curlimages/curl, instill/api-gateway and 11 more. Across the 14 measured, 2,920 findings — 3 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r4, fixed in 8.4.0-r0.

Radar Score

30,8163224252,464

2,920 findings over 14 of 15 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
groundnuty/k8s-wait-for	v2.0	2839144	2,617
openfga/openfga×2	v1.9.2	009105	958
curlimages/curl×6	8.00.1	1243	307
instill/api-gateway	9bfdc88	01984	898
library/postgres×9	15-alpine	00456	493
instill/artifact-backend×4	b28766a	01101596	7,113
instill/console	0.68.5	0234178	2,384
temporalio/admin-tools×3	1.28	0045226	2,866
instill/mgmt-backend×4	d0933d4	0169406	4,877
instill/model-backend×4	611f0f2	0272416	5,100
instill/pipeline-backend×4	af347e7	—	not yet scanned
library/redis×2	8.4-alpine3.22	00410	180
library/registry×2	2.8.3	00170	550
library/influxdb	2.3.0-alpine	0534168	2,460
bitnamisecure/kubectl	latest	0002	13

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,274 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2021-0319	stdlib@go1.17.2	1.16.14
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.45.0	0.52.0
Low	DEBIAN-CVE-2025-15281	glibc@2.41-12+deb13u1	2.41-12+deb13u2
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	DEBIAN-CVE-2026-7774	python3.13@3.13.5-2	3.13.5-2+deb13u3
Low	DEBIAN-CVE-2026-58049	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	ALPINE-CVE-2026-45186	expat@2.7.4-r0	2.8.1-r0
Low	DEBIAN-CVE-2026-45186	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b1	no fix listed
Low	DEBIAN-CVE-2026-42011	gnutls28@3.8.9-3+deb13u1	3.8.9-3+deb13u4
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	GHSA-f2g3-hh2r-cwgc	github.com/distribution/distribution@v2.8.3+incompatible	no fix listed
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd	0.13.0
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	DEBIAN-CVE-2026-30999	ffmpeg@7:7.1.3-0+deb13u1	no fix listed
Low	ALPINE-CVE-2026-6464	postgresql18@18.2-r0	18.5-r0
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6	no fix listed
Low	GO-2022-0493	stdlib@go1.17.2	1.17.10
Low	DEBIAN-CVE-2026-58050	libssh2@1.11.1-1	1.11.1-1+deb13u2
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-60000	openssh@1:10.0p1-7	no fix listed
Low	GHSA-73wf-gq98-2v4g	browserslist@4.25.2	4.28.7
Low	DEBIAN-CVE-2026-56208	aom@3.12.1-1	3.12.1-1+deb13u1
Low	DEBIAN-CVE-2026-0990	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.0.6	3.1.4
Low	DEBIAN-CVE-2026-66034	libssh2@1.11.1-1	1.11.1-1+deb13u2
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-vfp3-v2gw-7wfq	github.com/labstack/echo/v4@v4.13.4	4.15.3
Low	DEBIAN-CVE-2026-34873	mbedtls@3.6.5-0.1~deb13u1	3.6.6-0.1~deb13u1
Low	GO-2021-0317	stdlib@go1.17.2	1.16.14
Low	DEBIAN-CVE-2026-67216	cjson@1.7.18-3.1+deb13u1	no fix listed
Low	ALPINE-CVE-2026-82208	curl@8.17.0-r1	8.22.0-r0
Low	DEBIAN-CVE-2026-82208	curl@8.14.1-2+deb13u2	no fix listed
Low	GHSA-hj3v-m684-v259	github.com/lestrrat-go/jwx/v2@v2.0.11	2.0.21
Low	DEBIAN-CVE-2025-15661	libssh2@1.11.1-1	1.11.1-1+deb13u1
Low	ALPINE-CVE-2026-14668	postgresql18@18.2-r0	18.5-r0
Low	GO-2023-2185	stdlib@go1.18.3	1.20.11
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-2219	dpkg@1.22.21	1.22.22
Low	DEBIAN-CVE-2026-42497	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-41992	gzip@1.13-1	1.13-1+deb13u1
Low	DEBIAN-CVE-2026-56211	aom@3.12.1-1	3.12.1-1+deb13u1
Low	DEBIAN-CVE-2026-29036	cjson@1.7.18-3.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-35386	openssh@1:10.0p1-7	1:10.0p1-7+deb13u3
Low	DEBIAN-CVE-2026-12912	tiff@4.7.0-3+deb13u2	4.7.0-3+deb13u3
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2+deb13u2	no fix listed
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2+deb13u2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.75latest	4 months ago	v1.9.2	3224252,464	30,816

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/instill-ai/core.svg)](https://charts.stackradar.io/charts/instill-ai/core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.