StackRadar

nublado2 Helm chart

lsst-sqre

Scored 14 Sept 2026

Nublado2 JupyterHub installation

Latest 0.8.5 4 years agodeploys tag 2.0.1 0Artifact Hub

nublado2 0.8.5 deploys 2 container images: lsstsqre/nublado2 and jupyterhub/configurable-http-proxy. Across them, 1,117 findings — 15 critical, 49 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

17,7791549329723

1,117 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
lsstsqre/nublado22.0.1133930071016,255
jupyterhub/configurable-http-proxy4.5.121029131,524

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

719 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-44432python-pip@20.0.2-5ubuntu1.6no fix listed
LowGHSA-cxjh-pqwp-8mfpfollow-redirects@1.14.71.15.6
LowGHSA-p998-jp59-783maiohttp@3.8.13.13.4
LowUBUNTU-CVE-2026-7210python2.7@2.7.18-1~20.04.1no fix listed
LowUBUNTU-CVE-2026-7210python3.8@3.8.10-0ubuntu1~20.04.2no fix listed
LowGHSA-8qpw-xqxj-h4r2aiohttp@3.8.13.9.2
LowUBUNTU-CVE-2026-12087perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.5+esm3
LowUBUNTU-CVE-2025-8715postgresql-12@12.9-0ubuntu0.20.04.1no fix listed
LowUBUNTU-CVE-2026-29786node-tar@4.4.10+ds1-2ubuntu1no fix listed
LowUBUNTU-CVE-2023-47038perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.5
LowUBUNTU-CVE-2025-8194python3.8@3.8.10-0ubuntu1~20.04.23.8.10-0ubuntu1~20.04.18+esm2
LowUBUNTU-CVE-2026-48619nodejs@10.19.0~dfsg-3ubuntu1no fix listed
LowUBUNTU-CVE-2020-11080nghttp2@1.40.0-1build11.40.0-1ubuntu0.1
LowUBUNTU-CVE-2026-15308python3.8@3.8.10-0ubuntu1~20.04.23.8.10-0ubuntu1~20.04.18+esm7
LowUBUNTU-CVE-2026-6321node-ajv@6.10.2-1no fix listed
LowUBUNTU-CVE-2022-48566python2.7@2.7.18-1~20.04.12.7.18-1~20.04.7
LowUBUNTU-CVE-2022-4055xdg-utils@1.1.3-2ubuntu1.20.04.2no fix listed
LowUBUNTU-CVE-2026-0915glibc@2.31-0ubuntu9.22.31-0ubuntu9.18+esm1
LowUBUNTU-CVE-2025-4802glibc@2.31-0ubuntu9.22.31-0ubuntu9.18
LowUBUNTU-CVE-2023-50495ncurses@6.2-0ubuntu2no fix listed
LowGHSA-rgw5-rvv9-x895brace-expansion@1.1.111.1.18
LowUBUNTU-CVE-2026-69152node-brace-expansion@1.1.11-1no fix listed
LowGHSA-6jhg-hg63-jvvfaiohttp@3.8.13.13.3
LowGHSA-g3cq-j2xw-wf74aiohttp@3.8.13.14.1
LowUBUNTU-CVE-2026-5773curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.25+esm5
LowUBUNTU-CVE-2022-45703binutils@2.34-6ubuntu1.32.34-6ubuntu1.8
LowUBUNTU-CVE-2023-5981gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.9
LowGHSA-g84x-mcqj-x9qqaiohttp@3.8.13.13.3
LowGHSA-hj3f-6gcp-jg8jtornado@6.16.3.2
LowGHSA-pw2r-vq6v-hr8cfollow-redirects@1.14.71.14.8
LowUBUNTU-CVE-2026-63072openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.24+esm5
LowGHSA-f5x3-32g6-xq36tar@4.4.106.2.1
LowUBUNTU-CVE-2024-28863node-tar@4.4.10+ds1-2ubuntu1no fix listed
LowGHSA-jj3x-wxrx-4x23aiohttp@3.8.13.13.3
LowUBUNTU-CVE-2026-6637postgresql-12@12.9-0ubuntu0.20.04.1no fix listed
LowUBUNTU-CVE-2024-33600glibc@2.31-0ubuntu9.22.31-0ubuntu9.16
LowUBUNTU-CVE-2023-43804python-pip@20.0.2-5ubuntu1.620.0.2-5ubuntu1.10
LowUBUNTU-CVE-2026-18408postgresql-12@12.9-0ubuntu0.20.04.1no fix listed
LowGHSA-q2x7-8rv6-6q7hjinja2@3.0.33.1.5
LowUBUNTU-CVE-2026-66046expat@2.2.9-1ubuntu0.2no fix listed
LowUBUNTU-CVE-2022-48303tar@1.30+dfsg-7ubuntu0.20.04.11.30+dfsg-7ubuntu0.20.04.3
LowUBUNTU-CVE-2026-11972python2.7@2.7.18-1~20.04.1no fix listed
LowUBUNTU-CVE-2026-11972python3.8@3.8.10-0ubuntu1~20.04.2no fix listed
LowUBUNTU-CVE-2025-5318libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.5+esm1
LowGHSA-qffp-2rhf-9h96tar@4.4.107.5.10
LowUBUNTU-CVE-2023-0466openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.18
LowGHSA-mgf9-4vpg-hj56tornado@6.16.5.6
LowGHSA-6mq8-rvhq-8wggaiohttp@3.8.13.13.3
LowUBUNTU-CVE-2026-13149node-brace-expansion@1.1.11-1no fix listed
LowGHSA-xqr8-7jwr-rhp7certifi@2021.10.82023.7.22

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.8.5latest4 years ago2.0.1154932972317,779

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/lsst-sqre/nublado2.svg)](https://charts.stackradar.io/charts/lsst-sqre/nublado2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.