kubeflow 0.5.1 Helm chart

Name: kubeflow Helm chart 0.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kromanow94-kubeflow

Scored 16 Sept 2026

A Helm chart for Kubeflow

Version 0.5.1 1 year agodeploys tag v1.9.2 0Artifact Hub

kubeflow 0.5.1 deploys 30 container images: kubeflownotebookswg/poddefaults-webhook, kubeflownotebookswg/centraldashboard, bitnami/kubectl, kubeflowkatib/katib-controller and 25 more. Across the 26 measured, 6,191 findings — 19 critical, 80 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.23, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

70,96819801,1034,981

6,191 findings over 26 of 30 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

30 images

Image	Tag	Vulnerabilities	Radar Score
kubeflownotebookswg/poddefaults-webhook	v1.9.2	02379	688
kubeflownotebookswg/centraldashboard	v1.9.2	043499	1,909
bitnami/kubectl	latest	0002	13
kubeflowkatib/katib-controller	v0.17.0	0110103	1,025
kubeflowkatib/katib-db-manager	v0.17.0	00178	574
kubeflowkatib/katib-ui	v0.17.0	00278	590
kserve/models-web-app	v0.13.0	0457222	3,343
kubeflow/model-registry	v0.2.9	0313128	1,493
gcr.io/tfx-oss-public/ml_metadata_store_server×2	1.14.0	1033115	1,741
kubeflownotebookswg/notebook-controller	v1.9.2	0444167	2,549
kubeflownotebookswg/jupyter-web-app	v1.9.2	0249196	2,871
kubeflownotebookswg/pvcviewer-controller	v1.9.2	00177	552
gcr.io/kubebuilder/kube-rbac-proxy	v0.13.1	—	unmeasured
kubeflownotebookswg/volumes-web-app	v1.9.2	0249196	2,871
gcr.io/ml-pipeline/cache-server	2.3.0	0431147	2,084
gcr.io/ml-pipeline/api-server	2.3.0	0468300	4,190
gcr.io/ml-pipeline/metadata-envoy	2.3.0	4855165	3,340
gcr.io/ml-pipeline/metadata-writer	2.3.0	37196833	11,921
gcr.io/ml-pipeline/persistenceagent	2.3.0	0431147	2,084
gcr.io/ml-pipeline/scheduledworkflow	2.3.0	0431147	2,084
gcr.io/ml-pipeline/frontend	2.3.0	—	unmeasured
gcr.io/ml-pipeline/viewer-crd-controller	2.3.0	031598	1,168
gcr.io/ml-pipeline/visualization-server	2.3.0	—	not yet scanned
library/python	3.7	1113232871	14,105
kubeflownotebookswg/profile-controller	v1.9.2	0446175	2,659
kubeflownotebookswg/kfam	v1.9.2	0339168	2,382
kubeflownotebookswg/tensorboard-controller	v1.9.2	0212124	1,354
gcr.io/kubebuilder/kube-rbac-proxy	v0.8.0	—	unmeasured
kubeflownotebookswg/tensorboards-web-app	v1.9.2	0249196	2,871
kubeflow/training-operator	v1-04f9f13	00270	507

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,682 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-q6x5-8v7m-xcrf	protobufjs@7.3.0	7.5.6
Low	GHSA-q6x5-8v7m-xcrf	@protobufjs/utf8@1.1.0	1.1.1
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-4516	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u7
Low	GO-2026-5026	stdlib@go1.17.13	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
Low	DEBIAN-CVE-2026-80185	bluez@5.66-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-68950	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u5
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+deb12u1	no fix listed
Low	RHSA-2026:1852	util-linux@2.32.1-46.el8	0:2.32.1-48.el8_10
Low	GHSA-pxhw-596r-rwq5	k8s.io/kubernetes@v1.11.1	1.27.13
Low	DEBIAN-CVE-2025-64505	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-50593	graphite2@1.3.14-1	1.3.14-1+deb12u1
Low	DEBIAN-CVE-2025-6069	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u7
Low	DEBIAN-CVE-2026-86142	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-42014	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2025-48074	openexr@3.1.5-5	no fix listed
Low	DSA-6159-1	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u7
Low	GO-2025-3420	stdlib@go1.17.13	1.22.11
Low	DEBIAN-CVE-2026-47254	libheif@1.15.1-1	no fix listed
Low	GO-2026-4342	stdlib@go1.17.13	1.24.12
Low	DEBIAN-CVE-2026-4105	systemd@252.30-1~deb12u2	252.39-1~deb12u2
Low	GO-2024-2598	stdlib@go1.17.13	1.21.8
Low	GO-2025-3751	stdlib@go1.17.13	1.23.10
Low	DEBIAN-CVE-2025-11839	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-11840	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-78409	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-56365	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u12
Low	DEBIAN-CVE-2023-4641	shadow@1:4.13+dfsg1-1+b1	1:4.13+dfsg1-1+deb12u1
Low	DEBIAN-CVE-2024-57360	binutils@2.40-2	no fix listed
Low	ALPINE-CVE-2024-13176	openssl@3.3.1-r3	3.3.2-r2
Low	DEBIAN-CVE-2024-13176	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@4.1.0	4.3.1
Low	GHSA-74fp-r6jw-h4mp	k8s.io/apimachinery@v0.0.0-20190221084156-01f179d85dbc	0.0.0-20190927203648-9ce6eca90e73
Low	GHSA-m425-mq94-257g	google.golang.org/grpc@v1.42.0	1.56.3
Low	DEBIAN-CVE-2023-39327	openjpeg2@2.5.0-2	no fix listed
Low	DEBIAN-CVE-2025-69648	binutils@2.40-2	no fix listed
Low	GO-2026-4678	github.com/argoproj/argo-workflows/v3@v3.4.17	3.7.11
Low	DEBIAN-CVE-2026-45446	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
Low	DEBIAN-CVE-2025-69652	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-3494	mariadb@1:10.11.6-0+deb12u1	1:10.11.18-0+deb12u1
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e
Low	GHSA-vrw8-fxc6-2r93	github.com/go-chi/chi/v5@v5.1.0	5.2.2
Low	DEBIAN-CVE-2026-3446	python3.11@3.11.2-6+deb12u3	no fix listed
Low	DSA-5517-1	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.26.16	1.26.18
Low	DEBIAN-CVE-2023-39328	openjpeg2@2.5.0-2	no fix listed
Low	DEBIAN-CVE-2025-69651	binutils@2.40-2	no fix listed
Low	GO-2025-4116	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0
Low	RHSA-2026:55804	nghttp2@1.33.0-6.el8_10.1	0:1.33.0-6.el8_10.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.1latest	1 year ago	v1.9.2	19801,1034,981	70,968

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kromanow94-kubeflow/kubeflow.svg)](https://charts.stackradar.io/charts/kromanow94-kubeflow/kubeflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.