StackRadar

local-ai Helm chart

localai

Scored 14 Sept 2026

A Helm chart for deploying LocalAI to a Kubernetes cluster

Latest 3.4.2 1 year agodeploys tag latest 3Artifact Hub

local-ai 3.4.2 deploys 1 container image: quay.io/go-skynet/local-ai. Across them, 432 findings0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.51.0, fixed in 0.52.0.

Radar Score

3,9970038394

432 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
quay.io/go-skynet/local-ailatest00383943,997

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

432 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-56410expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-56411expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-78410util-linux@2.39.3-9ubuntu6.5no fix listed
LowUBUNTU-CVE-2025-27810mbedtls@2.28.8-12.28.8-1ubuntu0.1~esm1
LowUBUNTU-CVE-2025-10256ffmpeg@7:6.1.1-3ubuntu57:6.1.1-3ubuntu5+esm6
LowUBUNTU-CVE-2026-67217cjson@1.7.17-1no fix listed
LowGO-2026-5026stdlib@go1.26.01.25.13
LowUBUNTU-CVE-2026-86142libxml2@2.9.14+dfsg-1.3ubuntu3.8no fix listed
LowUBUNTU-CVE-2026-75147ffmpeg@7:6.1.1-3ubuntu5no fix listed
LowUBUNTU-CVE-2026-42014gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowUBUNTU-CVE-2026-78409util-linux@2.39.3-9ubuntu6.5no fix listed
LowGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.80.01.82.2
LowUBUNTU-CVE-2023-6601ffmpeg@7:6.1.1-3ubuntu5no fix listed
LowGHSA-fphv-w9fq-2525github.com/theupdateframework/go-tuf/v2@v2.3.02.3.1
LowUBUNTU-CVE-2023-39328openjpeg2@2.5.0-2ubuntu0.5no fix listed
LowUBUNTU-CVE-2026-18393ffmpeg@7:6.1.1-3ubuntu5no fix listed
LowGO-2026-4870stdlib@go1.26.01.25.9
LowUBUNTU-CVE-2026-86138libxml2@2.9.14+dfsg-1.3ubuntu3.8no fix listed
LowGO-2026-4947stdlib@go1.26.01.25.9
LowUBUNTU-CVE-2026-86143libxml2@2.9.14+dfsg-1.3ubuntu3.8no fix listed
LowGHSA-rg2x-37c3-w2rhgithub.com/docker/docker@v28.5.2+incompatibleno fix listed
LowGO-2026-4599stdlib@go1.26.01.26.1
LowUBUNTU-CVE-2026-18090gdk-pixbuf@2.42.10+dfsg-3ubuntu3.3no fix listed
LowGO-2026-5037stdlib@go1.26.01.25.11
LowGO-2026-4971stdlib@go1.26.01.25.10
LowUBUNTU-CVE-2026-3832gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowUBUNTU-CVE-2026-25834mbedtls@2.28.8-1no fix listed
LowUBUNTU-CVE-2026-56409expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-82522jpeg-xl@0.7.0-10.2ubuntu6.1no fix listed
LowUBUNTU-CVE-2025-59438mbedtls@2.28.8-1no fix listed
LowGO-2026-5972stdlib@go1.26.01.25.13
LowGO-2026-6088stdlib@go1.26.01.25.13
LowGO-2026-6089stdlib@go1.26.01.25.13
LowGO-2026-6090stdlib@go1.26.01.25.13
LowGO-2026-5038stdlib@go1.26.01.25.11
LowUBUNTU-CVE-2025-66442mbedtls@2.28.8-1no fix listed
LowUBUNTU-CVE-2026-86139libxml2@2.9.14+dfsg-1.3ubuntu3.8no fix listed
LowUBUNTU-CVE-2025-50422cairo@1.18.0-3build1no fix listed
LowUBUNTU-CVE-2026-16768gdk-pixbuf@2.42.10+dfsg-3ubuntu3.3no fix listed
LowUBUNTU-CVE-2026-13757p11-kit@0.25.3-4ubuntu2.10.25.3-4ubuntu2.2
LowGO-2026-5942golang.org/x/net@v0.55.00.56.0
LowGO-2026-5942stdlib@go1.26.01.26.6
LowUBUNTU-CVE-2026-52295ffmpeg@7:6.1.1-3ubuntu5no fix listed
LowUBUNTU-CVE-2026-56132expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-15588glib2.0@2.80.0-6ubuntu3.8no fix listed
LowGO-2026-6218stdlib@go1.26.01.25.13
LowGHSA-vh4v-2xq2-g5cgoras.land/oras-go/v2@v2.6.02.6.1
LowUBUNTU-CVE-2024-45157mbedtls@2.28.8-1no fix listed
LowGHSA-7jxh-36q5-gcqvgithub.com/containerd/containerd@v1.7.311.7.35
LowUBUNTU-CVE-2025-48965mbedtls@2.28.8-12.28.8-1ubuntu0.1~esm1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.4.2latest1 year agolatest00383943,997

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/localai/local-ai.svg)](https://charts.stackradar.io/charts/localai/local-ai)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.