kubeflow Helm chart

Name: kubeflow Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kromanow94-kubeflow

Scored 16 Sept 2026

A Helm chart for Kubeflow

Latest 0.5.1 1 year agodeploys tag v1.9.2 0Artifact Hub

kubeflow 0.5.1 deploys 30 container images: kubeflownotebookswg/poddefaults-webhook, kubeflownotebookswg/centraldashboard, bitnami/kubectl, kubeflowkatib/katib-controller and 25 more. Across the 26 measured, 6,191 findings — 19 critical, 80 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.23, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

70,96819801,1034,981

6,191 findings over 26 of 30 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

30 images

Image	Tag	Vulnerabilities	Radar Score
kubeflownotebookswg/poddefaults-webhook	v1.9.2	02379	688
kubeflownotebookswg/centraldashboard	v1.9.2	043499	1,909
bitnami/kubectl	latest	0002	13
kubeflowkatib/katib-controller	v0.17.0	0110103	1,025
kubeflowkatib/katib-db-manager	v0.17.0	00178	574
kubeflowkatib/katib-ui	v0.17.0	00278	590
kserve/models-web-app	v0.13.0	0457222	3,343
kubeflow/model-registry	v0.2.9	0313128	1,493
gcr.io/tfx-oss-public/ml_metadata_store_server×2	1.14.0	1033115	1,741
kubeflownotebookswg/notebook-controller	v1.9.2	0444167	2,549
kubeflownotebookswg/jupyter-web-app	v1.9.2	0249196	2,871
kubeflownotebookswg/pvcviewer-controller	v1.9.2	00177	552
gcr.io/kubebuilder/kube-rbac-proxy	v0.13.1	—	unmeasured
kubeflownotebookswg/volumes-web-app	v1.9.2	0249196	2,871
gcr.io/ml-pipeline/cache-server	2.3.0	0431147	2,084
gcr.io/ml-pipeline/api-server	2.3.0	0468300	4,190
gcr.io/ml-pipeline/metadata-envoy	2.3.0	4855165	3,340
gcr.io/ml-pipeline/metadata-writer	2.3.0	37196833	11,921
gcr.io/ml-pipeline/persistenceagent	2.3.0	0431147	2,084
gcr.io/ml-pipeline/scheduledworkflow	2.3.0	0431147	2,084
gcr.io/ml-pipeline/frontend	2.3.0	—	unmeasured
gcr.io/ml-pipeline/viewer-crd-controller	2.3.0	031598	1,168
gcr.io/ml-pipeline/visualization-server	2.3.0	—	not yet scanned
library/python	3.7	1113232871	14,105
kubeflownotebookswg/profile-controller	v1.9.2	0446175	2,659
kubeflownotebookswg/kfam	v1.9.2	0339168	2,382
kubeflownotebookswg/tensorboard-controller	v1.9.2	0212124	1,354
gcr.io/kubebuilder/kube-rbac-proxy	v0.8.0	—	unmeasured
kubeflownotebookswg/tensorboards-web-app	v1.9.2	0249196	2,871
kubeflow/training-operator	v1-04f9f13	00270	507

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,682 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-5+b1	no fix listed
Low	DEBIAN-CVE-2026-61859	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-90803	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-9820	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2025-61984	openssh@1:9.2p1-2+deb12u3	1:9.2p1-2+deb12u8
Low	DEBIAN-CVE-2026-33536	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8
Low	DEBIAN-CVE-2026-14666	postgresql-15@15.8-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2026-3949	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-90804	binutils@2.40-2	no fix listed
Low	GHSA-78xj-cgh5-2h22	ip@2.0.0	2.0.1
Low	GO-2026-4602	stdlib@go1.17.13	1.25.8
Low	DEBIAN-CVE-2026-55595	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u12
Low	RHBA-2026:47115	coreutils@8.30-15.el8	0:8.30-20.el8_10
Low	DEBIAN-CVE-2026-6192	openjpeg2@2.5.0-2	2.5.0-2+deb12u3
Low	DEBIAN-CVE-2026-27456	util-linux@2.38.1-5+deb12u1	no fix listed
Low	RHSA-2025:12980	glibc@2.28-251.el8_10.5	0:2.28-251.el8_10.25
Low	DEBIAN-CVE-2026-18508	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-81893	gdk-pixbuf@2.42.10+dfsg-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-62363	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-56376	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u12
Low	DEBIAN-CVE-2026-0992	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	DEBIAN-CVE-2026-89160	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2026-4519	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u8
Low	GHSA-xhjh-pmcv-23jw	axios@0.26.1	0.31.1
Low	DEBIAN-CVE-2026-16241	postgresql-15@15.8-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2025-32728	openssh@1:9.2p1-2+deb12u3	1:9.2p1-2+deb12u6
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-27799	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u7
Low	DEBIAN-CVE-2026-6469	postgresql-15@15.8-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2023-25815	git@1:2.39.2-1.1	1:2.39.5-0+deb12u1
Low	DEBIAN-CVE-2026-41080	expat@2.5.0-1	no fix listed
Low	DEBIAN-CVE-2026-48733	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u11
Low	GO-2026-5775	github.com/go-chi/chi/v5@v5.1.0	5.3.0
Low	DEBIAN-CVE-2026-14673	postgresql-15@15.8-0+deb12u1	15.19-0+deb12u1
Low	DEBIAN-CVE-2026-90802	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-62343	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-62946	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-4016	procps@2:4.0.2-3	no fix listed
Low	DEBIAN-CVE-2025-1181	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1180	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1	no fix listed
Low	DEBIAN-CVE-2023-51792	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2024-31047	openexr@3.1.5-5	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.3.1-r3	3.3.6-r0
Low	DEBIAN-CVE-2025-69418	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-47165	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2025-68469	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.1latest	1 year ago	v1.9.2	19801,1034,981	70,968

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kromanow94-kubeflow/kubeflow.svg)](https://charts.stackradar.io/charts/kromanow94-kubeflow/kubeflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.