jupyterhub Helm chart

Name: jupyterhub Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubeblocks

Scored 14 Sept 2026

Multi-user Jupyter installation

Latest 0.1.0 3 years agodeploys tag 3.9 0Artifact Hub

jupyterhub 0.1.0 deploys 7 container images: jupyterhub/k8s-network-tools, jupyterhub/k8s-singleuser-sample, registry.k8s.io/pause, jupyterhub/k8s-hub and 3 more. Across the 6 measured, 616 findings — 2 critical, 13 high — 7 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.2.1-r0, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >=1.23.0-0; rendered for Kubernetes 1.23.0.

Radar Score

7,35621391508

616 findings over 6 of 7 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
jupyterhub/k8s-network-tools×2	3.0.1-0.dev.git.6287.hbfb05cd6	0287	349
jupyterhub/k8s-singleuser-sample×2	3.0.1-0.dev.git.6287.hbfb05cd6	0332139	2,114
registry.k8s.io/pause×3	3.9	—	not yet scanned
jupyterhub/k8s-hub	3.0.1-0.dev.git.6287.hbfb05cd6	0433157	2,444
jupyterhub/configurable-http-proxy	4.5.6	241518	906
registry.k8s.io/kube-scheduler	v1.23.14	00298	812
jupyterhub/k8s-image-awaiter	3.0.1-0.dev.git.6287.hbfb05cd6	00189	731

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

380 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4869	stdlib@go1.17.13	1.25.9
Low	GO-2026-4340	stdlib@go1.17.13	1.24.12
Low	GO-2025-4175	stdlib@go1.17.13	1.24.11
Low	GHSA-fhv5-28vv-h8m8	pyjwt@2.8.0	2.13.0
Low	GHSA-cx3h-4qpv-8hc9	tornado@6.3.2	6.5.6
Low	GHSA-h4gh-qq45-vh27	cryptography@41.0.3	43.0.1
Low	GHSA-pjjw-qhg8-p2p9	aiohttp@3.8.5	3.8.6
Low	GHSA-qppv-j76h-2rpx	tornado@6.3.2	6.3.3
Low	GHSA-993g-76c3-p5m4	pyjwt@2.8.0	2.13.0
Low	GO-2026-4403	stdlib@go1.17.13	1.23.9
Low	GHSA-2hm2-hc3v-44h9	mistune@3.0.1	3.3.0
Low	GHSA-753j-mpmx-qq6g	tornado@6.3.2	6.4.1
Low	GO-2026-4970	stdlib@go1.17.13	1.25.12
Low	GHSA-58qw-9mgm-455v	pip@23.1.2	26.1
Low	GO-2026-4602	stdlib@go1.17.13	1.25.8
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	DLA-3954-2	postgresql-13@13.11-0+deb11u1	13.18-0+deb11u1
Low	DLA-3972-1	tzdata@2021a-1+deb11u10	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u10	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	GHSA-5239-wwwm-4pmq	pygments@2.16.1	2.20.0
Low	GHSA-6vgw-5pg2-w6jp	pip@23.1.2	26.0
Low	GHSA-vvfj-2jqx-52jm	jupyterlab@4.0.4	4.4.8
Low	GHSA-v8gr-m533-ghj9	cryptography@41.0.3	41.0.4
None	GHSA-8rfp-98v4-mmr6	bleach@6.0.0	6.4.0
None	GHSA-whvh-wf3x-g77j	jupyterlab@4.0.4	4.5.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	3 years ago	3.9	21391508	7,356

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubeblocks/jupyterhub.svg)](https://charts.stackradar.io/charts/kubeblocks/jupyterhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.