StackRadar

jupyterhub 0.1.0 Helm chart

kubeblocksVerified publisher

Scored 14 Sept 2026

Multi-user Jupyter installation

Version 0.1.0 3 years agodeploys tag 3.9 0Artifact Hub

jupyterhub 0.1.0 deploys 7 container images: jupyterhub/k8s-network-tools, jupyterhub/k8s-singleuser-sample, registry.k8s.io/pause, jupyterhub/k8s-hub and 3 more. Across the 6 measured, 616 findings2 critical, 13 high 7 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.2.1-r0, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >=1.23.0-0; rendered for Kubernetes 1.23.0.

Radar Score

7,35621391508

616 findings over 6 of 7 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
jupyterhub/k8s-network-tools×23.0.1-0.dev.git.6287.hbfb05cd60287349
jupyterhub/k8s-singleuser-sample×23.0.1-0.dev.git.6287.hbfb05cd603321392,114
registry.k8s.io/pause×33.9not yet scanned
jupyterhub/k8s-hub3.0.1-0.dev.git.6287.hbfb05cd604331572,444
jupyterhub/configurable-http-proxy4.5.6241518906
registry.k8s.io/kube-schedulerv1.23.1400298812
jupyterhub/k8s-image-awaiter3.0.1-0.dev.git.6287.hbfb05cd600189731

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

380 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDSA-5638-1libuv1@1.40.0-21.40.0-2+deb11u1
LowPYSEC-2026-2106aiohttp@3.8.53.14.0
LowGHSA-3wq7-rqq7-wx6jaiohttp@3.8.53.13.4
LowGO-2024-2887stdlib@go1.17.131.21.11
LowGHSA-fh55-r93g-j68gaiohttp@3.8.53.13.3
LowGO-2023-1704stdlib@go1.17.131.19.8
LowALPINE-CVE-2025-26519musl@1.2.4-r11.2.4-r3
LowDSA-5726-1krb5@1.18.3-6+deb11u31.18.3-6+deb11u5
LowPYSEC-2026-2113aiohttp@3.8.53.14.1
LowGHSA-54jq-c3m8-4m76aiohttp@3.8.53.13.3
LowPYSEC-2026-2112aiohttp@3.8.53.14.1
LowDLA-3893-1expat@2.2.10-2+deb11u52.2.10-2+deb11u6
LowGHSA-8rrh-rw8j-w5fxwheel@0.41.10.46.2
LowDSA-5622-1postgresql-13@13.11-0+deb11u113.14-0+deb11u1
LowGHSA-752w-5fwx-jx9fpyjwt@2.8.02.12.0
LowPYSEC-2026-237aiohttp@3.8.53.14.1
LowDSA-5587-1curl@7.74.0-1.3+deb11u77.74.0-1.3+deb11u11
LowGHSA-mfx4-hv73-q22vaiohttp@3.8.53.14.2
LowGO-2023-1568stdlib@go1.17.131.19.6
LowGHSA-cq5v-8q36-5273aiohttp@3.8.53.14.3
LowGO-2022-1037stdlib@go1.17.131.18.7
LowPYSEC-2026-3554cryptography@41.0.349.0.0
LowGHSA-2vrm-gr82-f7m5aiohttp@3.8.53.13.4
LowGO-2023-1987stdlib@go1.17.131.19.12
LowDSA-5746-1postgresql-13@13.11-0+deb11u113.16-0+deb11u1
LowGO-2023-1752stdlib@go1.17.131.19.9
LowDLA-4321-1openssl@1.1.1n-0+deb11u51.1.1w-0+deb11u4
LowGHSA-mq44-7p77-q5h7aiohttp@3.8.53.14.2
LowDLA-3926-1perl@5.32.1-4+deb11u25.32.1-4+deb11u4
LowGHSA-hg6j-4rv6-33pgaiohttp@3.8.53.14.0
LowGHSA-34jh-p97f-mpxfurllib3@2.0.42.2.2
LowGHSA-5mrq-x3x5-8v8fjupyter-server@2.7.02.18.0
LowGHSA-4xh5-x5gv-qwphpip@23.1.225.3
LowGHSA-mwh4-6h8g-pg8waiohttp@3.8.53.13.4
LowGHSA-r4rv-85jg-w4mfmistune@3.0.13.3.0
LowGO-2023-1705stdlib@go1.17.131.19.8
LowGO-2023-1878stdlib@go1.17.131.19.11
LowGHSA-h35f-9h28-mq5csetuptools@65.5.183.0.0
LowGO-2022-1039stdlib@go1.17.131.18.7
LowGHSA-mqqc-3gqh-h2x8aiohttp@3.8.53.13.3
LowGO-2024-2963stdlib@go1.17.131.21.12
LowGO-2023-1702stdlib@go1.17.131.19.8
LowDLA-4432-1curl@7.74.0-1.3+deb11u77.74.0-1.3+deb11u16
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowGHSA-fqwm-6jpj-5wxctornado@6.3.26.5.5
LowDLA-4064-1libxml2@2.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u6
LowGHSA-7jqv-fw35-gmx9nbconvert@7.7.37.17.1
LowDSA-5678-1glibc@2.31-13+deb11u62.31-13+deb11u10
LowDLA-4267-1gnutls28@3.7.1-5+deb11u33.7.1-5+deb11u8
LowDLA-4063-1gnutls28@3.7.1-5+deb11u33.7.1-5+deb11u7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.0latest3 years ago3.9213915087,356

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kubeblocks/jupyterhub.svg)](https://charts.stackradar.io/charts/kubeblocks/jupyterhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.