nublado2 0.8.5 Helm chart
lsst-sqreScored 14 Sept 2026
Nublado2 JupyterHub installation
Version 0.8.5 4 years agodeploys tag 2.0.1 0Artifact Hub
nublado2 0.8.5 deploys 2 container images: lsstsqre/nublado2 and jupyterhub/configurable-http-proxy. Across them, 1,117 findings — 15 critical, 49 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| lsstsqre/ | 2.0.1 | 1339300710 | 16,255 |
| jupyterhub/ | 4.5.1 | 2102913 | 1,524 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
1,113 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | UBUNTU-CVE-2022-2068 | openssl | 1.1.1f-1ubuntu2.15 |
| Critical | UBUNTU-CVE-2021-3711 | openssl | 1.1.1f-1ubuntu2.fips.7.2 |
| Critical | UBUNTU-CVE-2022-1292 | openssl | 1.1.1f-1ubuntu2.13 |
| Critical | ALPINE-CVE-2023-38545 | curl | 8.4.0-r0 |
| Critical | UBUNTU-CVE-2022-29155 | openldap | 2.4.49+dfsg-2ubuntu1.9 |
| Critical | UBUNTU-CVE-2022-23521 | git | 1:2.25.1-1ubuntu3.8 |
| Critical | UBUNTU-CVE-2025-48384KEV | git | 1:2.25.1-1ubuntu3.14+esm1 |
| Critical | UBUNTU-CVE-2024-27983 | nodejs | no fix listed |
| Critical | UBUNTU-CVE-2025-1094 | postgresql-12 | 12.22-0ubuntu0.20.04.2 |
| Critical | ALPINE-CVE-2023-44487KEV | nghttp2 | 1.46.0-r2 |
| Critical | UBUNTU-CVE-2023-44487KEV | nghttp2 | 1.40.0-1ubuntu0.2 |
| Critical | UBUNTU-CVE-2023-44487KEV | nodejs | 10.19.0~dfsg-3ubuntu1.6+esm2 |
| Critical | UBUNTU-CVE-2022-41903 | git | 1:2.25.1-1ubuntu3.8 |
| Critical | UBUNTU-CVE-2025-6965 | sqlite3 | 3.31.1-4ubuntu0.7+esm1 |
| Critical | UBUNTU-CVE-2024-2961 | glibc | 2.31-0ubuntu9.15 |
| High | PYSEC-2024-24 | aiohttp | 3.9.2 |
| High | UBUNTU-CVE-2021-22883 | nodejs | 10.19.0~dfsg-3ubuntu1.2 |
| High | ALPINE-CVE-2022-0778 | openssl | 1.1.1n-r0 |
| High | ALPINE-CVE-2022-0778 | libretls | 3.3.4-r3 |
| High | UBUNTU-CVE-2022-0778 | openssl | 1.1.1f-1ubuntu2.12 |
| High | GHSA-c4w7-xm78-47vh | y18n | 4.0.1 |
| High | UBUNTU-CVE-2020-7774 | node-y18n | no fix listed |
| High | UBUNTU-CVE-2007-4559 | python3.8 | no fix listed |
| High | ALPINE-CVE-2023-0286 | openssl | 1.1.1t-r0 |
| High | GHSA-x4qr-2fvf-3mr5 | cryptography | 39.0.1 |
| High | UBUNTU-CVE-2023-0286 | openssl | 1.1.1f-1ubuntu2.17 |
| High | UBUNTU-CVE-2024-2398 | curl | 7.68.0-1ubuntu2.22 |
| High | UBUNTU-CVE-2023-25652 | git | 1:2.25.1-1ubuntu3.11 |
| High | ALPINE-CVE-2018-25032 | zlib | 1.2.12-r0 |
| High | UBUNTU-CVE-2018-25032 | zlib | 1:1.2.11.dfsg-2ubuntu1.3 |
| High | UBUNTU-CVE-2021-23840 | openssl | 1.1.1f-1ubuntu2.fips.7.2 |
| High | UBUNTU-CVE-2024-32002 | git | 1:2.25.1-1ubuntu3.13 |
| High | ALPINE-CVE-2023-2650 | openssl | 1.1.1u-r0 |
| High | UBUNTU-CVE-2023-2650 | openssl | 1.1.1f-1ubuntu2.19 |
| High | UBUNTU-CVE-2021-3712 | openssl | no fix listed |
| High | UBUNTU-CVE-2023-48795 | libssh | 0.9.3-2ubuntu2.4 |
| High | ALPINE-CVE-2022-37434 | zlib | 1.2.12-r2 |
| High | UBUNTU-CVE-2022-37434 | zlib | 1:1.2.11.dfsg-2ubuntu1.5 |
| High | UBUNTU-CVE-2021-22884 | nodejs | 10.19.0~dfsg-3ubuntu1.2 |
| High | UBUNTU-CVE-2021-3449 | openssl | 1.1.1f-1ubuntu2.fips.7 |
| High | UBUNTU-CVE-2024-28182 | nghttp2 | 1.40.0-1ubuntu0.3 |
| High | GHSA-r5fr-rjxr-66jc | lodash | 4.18.0 |
| High | GHSA-r5fr-rjxr-66jc | lodash.template | 4.18.0 |
| High | UBUNTU-CVE-2024-2511 | openssl | 1.1.1f-1ubuntu2.23 |
| High | UBUNTU-CVE-2022-1552 | postgresql-12 | 12.11-0ubuntu0.20.04.1 |
| High | UBUNTU-CVE-2024-3596 | krb5 | 1.17-6ubuntu4.8 |
| High | UBUNTU-CVE-2026-21710 | nodejs | no fix listed |
| High | GHSA-w573-4hg7-7wgq | decode-uri-component | 0.2.1 |
| High | UBUNTU-CVE-2022-35737 | sqlite3 | 3.31.1-4ubuntu0.5 |
| High | ALPINE-CVE-2022-32206 | curl | 7.80.0-r2 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/lsst-sqre/nublado2)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.