aperag Helm chart
kubeblocksVerified publisherScored 14 Sept 2026
A Helm chart for Kubernetes
Latest 0.0.0-nightly 1 year agodeploys tag v0.0.0-nightly 0Artifact Hub
aperag 0.0.0-nightly deploys 3 container images: apecloud/aperag, apecloud/doc-ray and apecloud/aperag-frontend. Across the 2 measured, 699 findings — 3 critical, 7 high — 3 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.80.0, fixed in 1.84.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| apecloud/ | v0.0.0-nightly | 3498481 | 6,947 |
| apecloud/ | v0.2.0 | — | not yet scanned |
| apecloud/ | v0.0.0-nightly | 032585 | 1,458 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2025-66199 | openssl | 3.3.6-r0 |
| Low | DEBIAN-CVE-2025-66199 | openssl | 3.5.4-1~deb13u2 |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 15.5.24 |
| Low | GHSA-2c2j-9gv5-cj73 | starlette | 0.47.2 |
| Low | GHSA-7432-952r-cw78 | authlib | 1.6.9 |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | GHSA-69f9-5gxw-wvc2 | aiohttp | 3.13.3 |
| Low | DEBIAN-CVE-2025-15079 | curl | no fix listed |
| Low | GHSA-3gqm-fcw5-w839 | nltk | 3.10.0 |
| Low | GHSA-9548-qrrj-x5pj | aiohttp | 3.12.14 |
| Low | DEBIAN-CVE-2026-6429 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-hpj7-wq8m-9hgp | aiohttp | 3.14.1 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | DEBIAN-CVE-2026-22796 | openssl | 3.5.4-1~deb13u2 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-gfwx-w7gr-fvh7 | nltk | 3.9.4 |
| Low | GHSA-8qcx-xf44-272x | django | 5.2.16 |
| Low | GHSA-68g3-v927-f742 | next | 15.5.21 |
| Low | GHSA-mf9w-mj56-hr94 | python-dotenv | 1.2.2 |
| Low | GHSA-c427-h43c-vf67 | aiohttp | 3.13.4 |
| Low | GHSA-fv5p-p927-qmxr | langchain-text-splitters | 1.1.2 |
| Low | GHSA-3644-q5cj-c5c7 | langchain | 0.3.30 |
| Low | GHSA-3644-q5cj-c5c7 | langsmith | 0.8.0 |
| Low | DEBIAN-CVE-2026-1965 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-4878 | libcap2 | 1:2.75-10+deb13u1 |
| Low | GHSA-7833-fr7j-v32q | gitpython | 3.1.59 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | DEBIAN-CVE-2026-7168 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GHSA-x8wg-4xgc-vr54 | banks | 2.4.5 |
| Low | PYSEC-2026-2104 | aiohttp | 3.14.0 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | DEBIAN-CVE-2026-3783 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2026-4873 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-j884-q54q-mmx3 | datamodel-code-generator | 0.60.1 |
| Low | GHSA-wjv6-jcfj-mf9r | datamodel-code-generator | 0.60.2 |
| Low | DEBIAN-CVE-2026-34743 | xz-utils | 5.8.1-1+deb13u1 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GHSA-rg9h-vx28-xxp5 | llama-index | 0.13.0 |
| Low | GHSA-3wxw-xv34-2frg | gitpython | 3.1.59 |
| Low | GHSA-6hr6-w5qg-qmwg | h2 | 4.4.1 |
| Low | GHSA-pq67-6m6q-mj2v | urllib3 | 2.5.0 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | GHSA-69x8-hrgq-fjj8 | litellm | 1.83.0 |
| Low | GHSA-qvv7-cg9c-w4x3 | nltk | 3.10.0 |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | GHSA-3crg-w4f6-42mx | pypdf | 6.10.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.0.0-nightlylatest | 1 year ago | v0.0.0-nightly | 37123566 | 8,405 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.