kestra-starter 2.0.0 Helm chart

Name: kestra-starter Helm chart 2.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kestra

Scored 14 Sept 2026

Infinitely scalable, event-driven, language-agnostic orchestration and scheduling platform to manage millions of workflows declaratively in code.

Version 2.0.0 7 days agoapp version v2.0.0 0Artifact Hub

kestra-starter 2.0.0 deploys 5 container images: amazon/aws-cli, kestra/kestra, library/docker, library/postgres and 1 more. Across the 4 measured, 537 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

5,4550278457

537 findings over 4 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
amazon/aws-cli	2.15.57	0000	0
kestra/kestra	v2.0.0	—	not yet scanned
library/docker	dind-rootless	00235	285
library/postgres×2	17.5	0153328	3,891
versity/versitygw	v1.1.0	012394	1,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

489 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2005-2541	tar@1.35+dfsg-3.1	no fix listed
Low	GHSA-qjv7-627w-8qjv	github.com/gofiber/fiber/v2@v2.52.10	2.52.13
Low	GHSA-7jxh-36q5-gcqv	github.com/containerd/containerd/v2@v2.3.4	2.3.5
Low	DEBIAN-CVE-2026-15534	perl@5.40.1-6	no fix listed
Low	GO-2025-3373	stdlib@go1.18.2	1.22.11
Low	ALPINE-CVE-2025-15469	openssl@3.5.4-r0	3.5.5-r0
Low	DEBIAN-CVE-2025-15469	openssl@3.5.1-1	3.5.4-1~deb13u2
Low	GO-2026-5970	golang.org/x/text@v0.38.0	0.39.0
Low	DEBIAN-CVE-2026-56391	coreutils@9.7-3	no fix listed
Low	ALPINE-CVE-2026-42768	openssl@3.5.4-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42768	openssl@3.5.1-1	3.5.6-1~deb13u2
Low	GO-2025-4155	stdlib@go1.18.2	1.24.11
Low	DEBIAN-CVE-2025-10911	libxslt@1.1.35-1.2	no fix listed
Low	GO-2024-2888	stdlib@go1.18.2	1.21.11
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1	no fix listed
Low	GO-2025-4008	stdlib@go1.18.2	1.24.8
Low	GO-2025-4010	stdlib@go1.18.2	1.24.8
Low	GO-2023-1840	stdlib@go1.18.2	1.19.10
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7	no fix listed
Low	GO-2025-4014	stdlib@go1.18.2	1.24.8
Low	DEBIAN-CVE-2026-14663	postgresql-17@17.5-1.pgdg130+1	17.11-0+deb13u1
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	DEBIAN-CVE-2025-9714	libxml2@2.12.7+dfsg+really2.9.14-2.1	2.12.7+dfsg+really2.9.14-2.1+deb13u2
Low	GO-2025-3503	stdlib@go1.18.2	1.23.7
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2026-0989	libxml2@2.12.7+dfsg+really2.9.14-2.1	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	DEBIAN-CVE-2026-6472	postgresql-17@17.5-1.pgdg130+1	17.10-0+deb13u1
Low	DEBIAN-CVE-2026-13595	util-linux@2.41-5	2.41.5-0+deb13u1
Low	GO-2026-4976	stdlib@go1.25.5	1.25.10
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	GO-2026-5856	stdlib@go1.25.5	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	DEBIAN-CVE-2026-22795	openssl@3.5.1-1	3.5.4-1~deb13u2
Low	GO-2025-4007	stdlib@go1.18.2	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-4980	stdlib@go1.25.5	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.4-r0	3.5.7-r0
Low	DEBIAN-CVE-2024-7883	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	DEBIAN-CVE-2026-42770	openssl@3.5.1-1	3.5.6-1~deb13u2
Low	GO-2026-5039	stdlib@go1.25.5	1.25.11
Low	DEBIAN-CVE-2026-2003	postgresql-17@17.5-1.pgdg130+1	17.8-0+deb13u1
Low	DSA-5990-1	libxml2@2.12.7+dfsg+really2.9.14-2.1	2.12.7+dfsg+really2.9.14-2.1+deb13u1
Low	DEBIAN-CVE-2025-8732	libxml2@2.12.7+dfsg+really2.9.14-2.1	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	GO-2025-4013	stdlib@go1.18.2	1.24.8
Low	GO-2025-3849	stdlib@go1.18.2	1.23.12
Low	GO-2026-4946	stdlib@go1.25.5	1.25.9
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	DEBIAN-CVE-2025-15649	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GO-2026-4603	stdlib@go1.25.5	1.25.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.1latest	3 days ago	v2.0.1	0278457	5,455
2.0.0	7 days ago	v2.0.0	0278457	5,455
1.3.37	11 days ago	v1.3.37	0278457	5,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kestra/kestra-starter.svg)](https://charts.stackradar.io/charts/kestra/kestra-starter)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.