nublado2 0.8.5 Helm chart

Name: nublado2 Helm chart 0.8.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

lsst-sqre

Scored 15 Sept 2026

Nublado2 JupyterHub installation

Version 0.8.5 4 years agodeploys tag 2.0.1 0Artifact Hub

nublado2 0.8.5 deploys 2 container images: lsstsqre/nublado2 and jupyterhub/configurable-http-proxy. Across them, 1,126 findings — 14 critical, 50 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

17,8361450329732

1,126 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
lsstsqre/nublado2	2.0.1	1240300719	16,312
jupyterhub/configurable-http-proxy	4.5.1	2102913	1,524

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

728 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-48931	nodejs@10.19.0~dfsg-3ubuntu1	no fix listed
Low	UBUNTU-CVE-2021-36084	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2026-6844	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-1149	binutils@2.34-6ubuntu1.3	no fix listed
Low	GHSA-cx3h-4qpv-8hc9	tornado@6.1	6.5.6
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@1.1.11	1.1.12
Low	UBUNTU-CVE-2025-5889	node-brace-expansion@1.1.11-1	no fix listed
Low	UBUNTU-CVE-2026-6474	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	GHSA-pjjw-qhg8-p2p9	aiohttp@3.8.1	3.8.6
Low	GHSA-qppv-j76h-2rpx	tornado@6.1	6.3.3
Low	UBUNTU-CVE-2026-19542	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-53613	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	UBUNTU-CVE-2026-53615	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	UBUNTU-CVE-2026-69184	c-ares@1.15.0-1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-69186	c-ares@1.15.0-1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-77117	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-80489	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-6575	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2021-36085	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2021-36087	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2025-68160	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2026-82562	node-qs@6.9.1+ds-1	no fix listed
Low	UBUNTU-CVE-2026-14678	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-18024	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-6470	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-25645	python-pip@20.0.2-5ubuntu1.6	no fix listed
Low	UBUNTU-CVE-2026-59845	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-1ubuntu5.20.04.1	no fix listed
Low	GHSA-753j-mpmx-qq6g	tornado@6.1	6.4.1
Low	GHSA-jmqm-f2gx-4fjv	npm-registry-fetch@4.0.3	4.0.5
Low	UBUNTU-CVE-2025-15224	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm2
Low	GHSA-58qw-9mgm-455v	pip@20.0.2	26.1
Low	UBUNTU-CVE-2026-3219	python-pip@20.0.2-5ubuntu1.6	no fix listed
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-2	1.0.8-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-32777	expat@2.2.9-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-9820	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-39113	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	GHSA-4xcv-9jjx-gfj3	mem@1.1.0	4.0.0
Low	UBUNTU-CVE-2026-0968	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	UBUNTU-CVE-2026-14666	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	GHSA-78xj-cgh5-2h22	ip@1.1.5	1.1.9
Low	UBUNTU-CVE-2026-76957	expat@2.2.9-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-27456	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	UBUNTU-CVE-2026-58044	nodejs@10.19.0~dfsg-3ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-18508	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-8277	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	UBUNTU-CVE-2026-45186	expat@2.2.9-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-89160	pcre2@10.34-7	no fix listed
Low	UBUNTU-CVE-2024-10977	postgresql-12@12.9-0ubuntu0.20.04.1	12.22-0ubuntu0.20.04.1
Low	UBUNTU-CVE-2026-16241	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.8.5latest	4 years ago	2.0.1	1450329732	17,836

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/lsst-sqre/nublado2.svg)](https://charts.stackradar.io/charts/lsst-sqre/nublado2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.