kubeflow Helm chart

Name: kubeflow Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kromanow94-kubeflow

Scored 16 Sept 2026

A Helm chart for Kubeflow

Latest 0.5.1 1 year agodeploys tag v1.9.2 0Artifact Hub

kubeflow 0.5.1 deploys 30 container images: kubeflownotebookswg/poddefaults-webhook, kubeflownotebookswg/centraldashboard, bitnami/kubectl, kubeflowkatib/katib-controller and 25 more. Across the 26 measured, 6,191 findings — 19 critical, 80 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.23, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

70,96819801,1034,981

6,191 findings over 26 of 30 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

30 images

Image	Tag	Vulnerabilities	Radar Score
kubeflownotebookswg/poddefaults-webhook	v1.9.2	02379	688
kubeflownotebookswg/centraldashboard	v1.9.2	043499	1,909
bitnami/kubectl	latest	0002	13
kubeflowkatib/katib-controller	v0.17.0	0110103	1,025
kubeflowkatib/katib-db-manager	v0.17.0	00178	574
kubeflowkatib/katib-ui	v0.17.0	00278	590
kserve/models-web-app	v0.13.0	0457222	3,343
kubeflow/model-registry	v0.2.9	0313128	1,493
gcr.io/tfx-oss-public/ml_metadata_store_server×2	1.14.0	1033115	1,741
kubeflownotebookswg/notebook-controller	v1.9.2	0444167	2,549
kubeflownotebookswg/jupyter-web-app	v1.9.2	0249196	2,871
kubeflownotebookswg/pvcviewer-controller	v1.9.2	00177	552
gcr.io/kubebuilder/kube-rbac-proxy	v0.13.1	—	unmeasured
kubeflownotebookswg/volumes-web-app	v1.9.2	0249196	2,871
gcr.io/ml-pipeline/cache-server	2.3.0	0431147	2,084
gcr.io/ml-pipeline/api-server	2.3.0	0468300	4,190
gcr.io/ml-pipeline/metadata-envoy	2.3.0	4855165	3,340
gcr.io/ml-pipeline/metadata-writer	2.3.0	37196833	11,921
gcr.io/ml-pipeline/persistenceagent	2.3.0	0431147	2,084
gcr.io/ml-pipeline/scheduledworkflow	2.3.0	0431147	2,084
gcr.io/ml-pipeline/frontend	2.3.0	—	unmeasured
gcr.io/ml-pipeline/viewer-crd-controller	2.3.0	031598	1,168
gcr.io/ml-pipeline/visualization-server	2.3.0	—	not yet scanned
library/python	3.7	1113232871	14,105
kubeflownotebookswg/profile-controller	v1.9.2	0446175	2,659
kubeflownotebookswg/kfam	v1.9.2	0339168	2,382
kubeflownotebookswg/tensorboard-controller	v1.9.2	0212124	1,354
gcr.io/kubebuilder/kube-rbac-proxy	v0.8.0	—	unmeasured
kubeflownotebookswg/tensorboards-web-app	v1.9.2	0249196	2,871
kubeflow/training-operator	v1-04f9f13	00270	507

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,682 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-1795	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u6
Low	DEBIAN-CVE-2026-46559	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2025-1151	binutils@2.40-2	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8	0.44.0
Low	DEBIAN-CVE-2025-1182	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-6199	gdk-pixbuf@2.42.10+dfsg-1+deb12u1	2.42.10+dfsg-1+deb12u2
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-73281	openssh@1:9.2p1-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-12817	postgresql-15@15.8-0+deb12u1	15.15-0+deb12u1
Low	DEBIAN-CVE-2025-8713	postgresql-15@15.8-0+deb12u1	15.14-0+deb12u1
Low	DEBIAN-CVE-2026-36849	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-84450	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-84451	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-85218	bluez@5.66-1+deb12u2	no fix listed
Low	DLA-3134-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u7
Low	DLA-3161-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u8
Low	DLA-3366-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u10
Low	DLA-3412-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u11
Low	DLA-3684-1	tzdata@2019c-0+deb10u1	2021a-0+deb10u12
Low	DLA-3788-1	tzdata@2019c-0+deb10u1	2024a-0+deb10u1
Low	DSA-5682-2	glib2.0@2.74.6-2	2.74.6-2+deb12u2
Low	DSA-5812-2	postgresql-15@15.8-0+deb12u1	15.10-0+deb12u1
Low	DSA-5979-2	libxslt@1.1.35-1	1.1.35-1+deb12u3
Low	GO-2022-0965	k8s.io/apimachinery@v0.0.0-20190221084156-01f179d85dbc	0.0.0-20190927203648-9ce6eca90e73
Low	GO-2023-2153	google.golang.org/grpc@v1.42.0	1.56.3
Low	GO-2026-5841	github.com/klauspost/compress@v1.16.7	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.60.1	1.82.1
Low	GO-2026-6225	github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589	no fix listed
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	USN-6663-1	openssl@1.1.1f-1ubuntu2.21	1.1.1f-1ubuntu2.22
Low	USN-7034-1	ca-certificates@20230311ubuntu0.20.04.1	20240203~20.04.1
Low	USN-8091-1	util-linux@2.34-0.1ubuntu9.4	2.34-0.1ubuntu9.6+esm1
Low	USN-8688-1	pam@1.3.1-5ubuntu4.7	1.3.1-5ubuntu4.7+esm1
Low	DEBIAN-CVE-2026-46692	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u10
Low	ALPINE-CVE-2025-46394	busybox@1.36.1-r29	1.36.1-r31
Low	DEBIAN-CVE-2026-40228	systemd@252.30-1~deb12u2	no fix listed
Low	GHSA-pxg6-pf52-xh8x	cookie@0.6.0	0.7.0
Low	DEBIAN-CVE-2025-13462	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u8
Low	DEBIAN-CVE-2025-61985	openssh@1:9.2p1-2+deb12u3	1:9.2p1-2+deb12u8
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v24.0.9+incompatible	25.0.13
Low	DEBIAN-CVE-2026-46693	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u10
Low	GHSA-52f5-9888-hmc6	tmp@0.2.1	0.2.4
Low	DEBIAN-CVE-2025-50422	cairo@1.16.0-7	no fix listed
Low	DEBIAN-CVE-2026-61081	mariadb@1:10.11.6-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Low	RHSA-2026:36734	libxml2@2.9.7-18.el8_10.1	0:2.9.7-21.el8_10.6
Low	GHSA-vpq2-c234-7xj6	@tootallnate/once@2.0.0	2.0.1
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-66011	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.1latest	1 year ago	v1.9.2	19801,1034,981	70,968

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kromanow94-kubeflow/kubeflow.svg)](https://charts.stackradar.io/charts/kromanow94-kubeflow/kubeflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.