lakefs 1.12.36 Helm chart

Name: lakefs Helm chart 1.12.36: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

lakefs

Scored 9 Oct 2026

A Helm chart for running LakeFS on Kubernetes

Version 1.12.36 10 days agodeploys tag 1.87.0 7Artifact Hub

lakefs 1.12.36 deploys 1 container image: treeverse/lakefs. Across them, 25 findings — 0 critical, 0 high. The highest contribution is GHSA-wf45-q9ch-q8gh in github.com/apache/thrift v0.19.0, fixed in 0.23.0.

Radar Score

22200619

25 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
treeverse/lakefs	1.87.0	00619	222

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

25 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-wf45-q9ch-q8gh	github.com/apache/thrift@v0.19.0	0.23.0
Medium	GHSA-r277-6w6q-xmqw	github.com/getkin/kin-openapi@v0.131.0	0.144.0
Medium	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.19.0	0.24.0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	GHSA-xhj3-7xw9-vr34	github.com/getkin/kin-openapi@v0.131.0	0.142.0
Low	GHSA-mmfr-pmjx-hw9w	github.com/getkin/kin-openapi@v0.131.0	0.141.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.1	1.83.1
Low	GHSA-jpcw-4wr7-c3vq	github.com/getkin/kin-openapi@v0.131.0	0.144.0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	GO-2026-6355	golang.org/x/crypto@v0.53.0	0.56.0
Low	GO-2026-5774	github.com/go-chi/chi/v5@v5.2.4	5.3.0
Low	GO-2026-5970	golang.org/x/text@v0.38.0	0.39.0
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.53.0	0.56.0
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.48.11	no fix listed
Low	GO-2026-6180	golang.org/x/mod@v0.36.0	0.40.0
Low	GO-2026-5777	github.com/go-chi/chi/v5@v5.2.4	5.3.0
Low	GO-2026-5775	github.com/go-chi/chi/v5@v5.2.4	5.3.0
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.48.11	no fix listed
Low	GO-2026-6179	golang.org/x/mod@v0.36.0	0.40.0
Low	GO-2026-5932	golang.org/x/crypto@v0.53.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.12.43latest	yesterday	1.88.0	00637	354
1.12.42	7 days ago	1.88.0	00637	354
1.12.38	10 days ago	1.87.0	00619	222
1.12.36	10 days ago	1.87.0	00619	222
1.12.35	13 days ago	1.87.0	00619	222
1.12.33	15 days ago	1.87.0	00619	222
1.12.32	16 days ago	1.87.0	00619	222
1.12.31	21 days ago	1.86.0	00538	407
1.12.30	23 days ago	1.86.0	00538	407
1.12.29	24 days ago	1.86.0	00538	407
1.12.28	30 days ago	1.86.0	00538	407
1.12.27	1 month ago	1.86.0	00538	407

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/lakefs/lakefs.svg)](https://charts.stackradar.io/charts/lakefs/lakefs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.