kestra-starter 1.3.37 Helm chart
kestraOfficialVerified publisherScored 14 Sept 2026
Infinitely scalable, event-driven, language-agnostic orchestration and scheduling platform to manage millions of workflows declaratively in code.
Version 1.3.37 11 days agoapp version v1.3.37 0Artifact Hub
kestra-starter 1.3.37 deploys 5 container images: amazon/aws-cli, kestra/kestra, library/docker, library/postgres and 1 more. Across the 4 measured, 537 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| amazon/ | 2.15.57 | 0000 | 0 |
| kestra/ | v1.3.37 | — | not yet scanned |
| library/ | dind-rootless | 00235 | 285 |
| library/ | 17.5 | 0153328 | 3,891 |
| versity/ | v1.1.0 | 012394 | 1,279 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2022-1095 | stdlib | 1.18.8 |
| Low | GO-2023-1621 | stdlib | 1.19.7 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | DEBIAN-CVE-2025-68973 | gnupg2 | 2.4.7-21+deb13u1 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | DEBIAN-CVE-2026-4438 | glibc | 2.41-12+deb13u3 |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-1757 | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | ALPINE-CVE-2026-78410 | util-linux | 2.42.3-r0 |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.46-1~deb13u2 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GO-2026-5026 | golang.org/ | 0.55.0 |
| Low | DEBIAN-CVE-2025-14104 | util-linux | 2.41.3-1 |
| Low | DEBIAN-CVE-2026-86142 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-42014 | gnutls28 | 3.8.9-3+deb13u4 |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2026-4105 | systemd | 257.13-1~deb13u1 |
| Low | GO-2024-2598 | stdlib | 1.21.8 |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
| Low | ALPINE-CVE-2026-78409 | util-linux | 2.42.3-r0 |
| Low | DEBIAN-CVE-2026-78409 | util-linux | no fix listed |
| Low | GHSA-2v4p-qf9q-27wj | google.golang.org/ | 1.82.2 |
| Low | ALPINE-CVE-2026-45446 | openssl | 3.5.7-r0 |
| Low | DEBIAN-CVE-2026-45446 | openssl | 3.5.6-1~deb13u2 |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GO-2022-0532 | stdlib | 1.17.11 |
| Low | GO-2025-4009 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-86138 | libxml2 | no fix listed |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | DEBIAN-CVE-2026-86143 | libxml2 | no fix listed |
| Low | GHSA-rg2x-37c3-w2rh | github.com/ | no fix listed |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | DEBIAN-CVE-2026-40225 | systemd | 257.13-1~deb13u1 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2026-14672 | postgresql-17 | 17.11-0+deb13u1 |
| Low | DEBIAN-CVE-2026-3832 | gnutls28 | 3.8.9-3+deb13u4 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.1latest | 3 days ago | v2.0.1 | 0278457 | 5,455 |
| 2.0.0 | 7 days ago | v2.0.0 | 0278457 | 5,455 |
| 1.3.37 | 11 days ago | v1.3.37 | 0278457 | 5,455 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.