kestra-starter 1.3.37 Helm chart

Name: kestra-starter Helm chart 1.3.37: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kestra

Scored 14 Sept 2026

Infinitely scalable, event-driven, language-agnostic orchestration and scheduling platform to manage millions of workflows declaratively in code.

Version 1.3.37 11 days agoapp version v1.3.37 0Artifact Hub

kestra-starter 1.3.37 deploys 5 container images: amazon/aws-cli, kestra/kestra, library/docker, library/postgres and 1 more. Across the 4 measured, 537 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

5,4550278457

537 findings over 4 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
amazon/aws-cli	2.15.57	0000	0
kestra/kestra	v1.3.37	—	not yet scanned
library/docker	dind-rootless	00235	285
library/postgres×2	17.5	0153328	3,891
versity/versitygw	v1.1.0	012394	1,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

409 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-66199	openssl@3.5.1-1	3.5.4-1~deb13u2
Low	DSA-6133-1	postgresql-17@17.5-1.pgdg130+1	17.8-0+deb13u1
Low	GO-2023-2375	stdlib@go1.18.2	1.20.0
Low	GO-2023-1569	stdlib@go1.18.2	1.19.6
Low	DSA-5979-1	libxslt@1.1.35-1.2	1.1.35-1.2+deb13u1
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.80.0	1.83.1
Low	GO-2023-2382	stdlib@go1.18.2	1.20.12
Low	GO-2022-1143	stdlib@go1.18.2	1.18.9
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.47.0	0.52.0
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-22796	openssl@3.5.1-1	3.5.4-1~deb13u2
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.47.0	0.52.0
Low	GO-2024-2599	stdlib@go1.18.2	1.21.8
Low	GO-2022-1038	stdlib@go1.18.2	1.18.7
Low	GO-2024-3106	stdlib@go1.18.2	1.22.7
Low	GO-2023-1570	stdlib@go1.18.2	1.19.6
Low	DEBIAN-CVE-2022-0563	util-linux@2.41-5	no fix listed
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.75-10+b1	1:2.75-10+deb13u1
Low	DEBIAN-CVE-2026-11979	libxml2@2.12.7+dfsg+really2.9.14-2.1	no fix listed
Low	DEBIAN-CVE-2025-12818	postgresql-17@17.5-1.pgdg130+1	17.7-0+deb13u1
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1	no fix listed
Low	GO-2022-0531	stdlib@go1.18.2	1.17.11
Low	GO-2024-2600	stdlib@go1.18.2	1.21.8
Low	GHSA-gcfq-8gqf-4876	github.com/gofiber/fiber/v2@v2.52.10	2.52.14
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.80.0	1.82.1
Low	GO-2024-2609	stdlib@go1.18.2	1.21.8
Low	DEBIAN-CVE-2026-34743	xz-utils@5.8.1-1	5.8.1-1+deb13u1
Low	GO-2024-3107	stdlib@go1.18.2	1.22.7
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	GO-2023-1751	stdlib@go1.18.2	1.19.9
Low	GO-2023-1753	stdlib@go1.18.2	1.19.9
Low	DEBIAN-CVE-2026-3184	util-linux@2.41-5	no fix listed
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1	1.97.3
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-19487	perl@5.40.1-6	no fix listed
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.47.0	0.52.0
Low	DEBIAN-CVE-2026-89158	pcre2@10.45-1	10.46-1~deb13u2
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2023-2041	stdlib@go1.18.2	1.20.8
Low	ALPINE-CVE-2026-42769	openssl@3.5.4-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42769	openssl@3.5.1-1	3.5.6-1~deb13u2
Low	GO-2023-2043	stdlib@go1.18.2	1.20.8
Low	DEBIAN-CVE-2013-4392	systemd@257.7-1	no fix listed
Low	GO-2022-0515	stdlib@go1.18.2	1.17.12
Low	GO-2023-2186	stdlib@go1.18.2	1.20.11
Low	ALPINE-CVE-2026-78408	util-linux@2.42.1-r0	2.42.3-r1
Low	DEBIAN-CVE-2026-78408	util-linux@2.41-5	no fix listed
Low	DEBIAN-CVE-2026-41989	libgcrypt20@1.11.0-7	1.11.0-7+deb13u1
Low	GO-2024-3105	stdlib@go1.18.2	1.22.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.1latest	3 days ago	v2.0.1	0278457	5,455
2.0.0	7 days ago	v2.0.0	0278457	5,455
1.3.37	11 days ago	v1.3.37	0278457	5,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kestra/kestra-starter.svg)](https://charts.stackradar.io/charts/kestra/kestra-starter)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.