aperag Helm chart
kubeblocksVerified publisherScored 14 Sept 2026
A Helm chart for Kubernetes
Latest 0.0.0-nightly 1 year agodeploys tag v0.0.0-nightly 0Artifact Hub
aperag 0.0.0-nightly deploys 3 container images: apecloud/aperag, apecloud/doc-ray and apecloud/aperag-frontend. Across the 2 measured, 699 findings — 3 critical, 7 high — 3 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.80.0, fixed in 1.84.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| apecloud/ | v0.0.0-nightly | 3498481 | 6,947 |
| apecloud/ | v0.2.0 | — | not yet scanned |
| apecloud/ | v0.0.0-nightly | 032585 | 1,458 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-8qcx-xf44-272x | django | 5.2.16 |
| Low | GHSA-68g3-v927-f742 | next | 15.5.21 |
| Low | GHSA-mf9w-mj56-hr94 | python-dotenv | 1.2.2 |
| Low | GHSA-c427-h43c-vf67 | aiohttp | 3.13.4 |
| Low | GHSA-fv5p-p927-qmxr | langchain-text-splitters | 1.1.2 |
| Low | GHSA-3644-q5cj-c5c7 | langsmith | 0.8.0 |
| Low | GHSA-3644-q5cj-c5c7 | langchain | 0.3.30 |
| Low | DEBIAN-CVE-2026-1965 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-4878 | libcap2 | 1:2.75-10+deb13u1 |
| Low | GHSA-7833-fr7j-v32q | gitpython | 3.1.59 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | DEBIAN-CVE-2026-7168 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GHSA-x8wg-4xgc-vr54 | banks | 2.4.5 |
| Low | PYSEC-2026-2104 | aiohttp | 3.14.0 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | DEBIAN-CVE-2026-3783 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2026-4873 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-j884-q54q-mmx3 | datamodel-code-generator | 0.60.1 |
| Low | GHSA-wjv6-jcfj-mf9r | datamodel-code-generator | 0.60.2 |
| Low | DEBIAN-CVE-2026-34743 | xz-utils | 5.8.1-1+deb13u1 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GHSA-rg9h-vx28-xxp5 | llama-index | 0.13.0 |
| Low | GHSA-3wxw-xv34-2frg | gitpython | 3.1.59 |
| Low | GHSA-6hr6-w5qg-qmwg | h2 | 4.4.1 |
| Low | GHSA-pq67-6m6q-mj2v | urllib3 | 2.5.0 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | GHSA-69x8-hrgq-fjj8 | litellm | 1.83.0 |
| Low | GHSA-qvv7-cg9c-w4x3 | nltk | 3.10.0 |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | GHSA-3crg-w4f6-42mx | pypdf | 6.10.0 |
| Low | DEBIAN-CVE-2026-7010 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | GHSA-7gw9-cf7v-778f | pypdf | 6.10.2 |
| Low | GHSA-x284-j5p8-9c5p | pypdf | 6.10.2 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | GHSA-65pc-fj4g-8rjx | idna | 3.15 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.46-1~deb13u2 |
| Low | DEBIAN-CVE-2026-42769 | openssl | 3.5.6-1~deb13u2 |
| Low | GHSA-4pxv-j86v-mhcw | pypdf | 6.10.2 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | GHSA-xvp8-3mhv-424c | lxml-html-clean | 0.4.4 |
| Low | PYSEC-2025-183 | pyjwt | no fix listed |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 4.2.0 |
| Low | GHSA-488g-hw5f-x29p | llama-index-core | 0.12.41 |
| Low | GHSA-8mpw-7fpc-4gqj | nltk | 3.10.3 |
| Low | GHSA-cr7q-2w66-hjcm | llama-index-core | 0.13.0 |
| Low | GHSA-52x6-gq3r-vpf4 | pypdf | 6.13.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.0.0-nightlylatest | 1 year ago | v0.0.0-nightly | 37123566 | 8,405 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.