nublado2 Helm chart

Name: nublado2 Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

lsst-sqre

Scored 15 Sept 2026

Nublado2 JupyterHub installation

Latest 0.8.5 4 years agodeploys tag 2.0.1 0Artifact Hub

nublado2 0.8.5 deploys 2 container images: lsstsqre/nublado2 and jupyterhub/configurable-http-proxy. Across them, 1,126 findings — 14 critical, 50 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

17,8361450329732

1,126 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
lsstsqre/nublado2	2.0.1	1240300719	16,312
jupyterhub/configurable-http-proxy	4.5.1	2102913	1,524

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,122 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-18938	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1
Low	GHSA-w7fw-mjwx-w883	qs@6.9.1	6.14.2
Low	UBUNTU-CVE-2026-2391	node-qs@6.9.1+ds-1	no fix listed
Low	UBUNTU-CVE-2026-6472	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-27613	git@1:2.25.1-1ubuntu3.2	1:2.25.1-1ubuntu3.14+esm3
Low	UBUNTU-CVE-2025-5278	coreutils@8.30-3ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-22795	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2026-2003	postgresql-12@12.9-0ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-6075	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.18+esm3
Low	UBUNTU-CVE-2025-6075	python2.7@2.7.18-1~20.04.1	no fix listed
Low	GHSA-6rw7-vpxm-498p	qs@6.9.1	6.14.1
Low	UBUNTU-CVE-2025-15284	node-qs@6.9.1+ds-1	no fix listed
Low	UBUNTU-CVE-2025-8114	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2
Low	GHSA-m959-cc7f-wv43	cryptography@36.0.1	46.0.6
Low	UBUNTU-CVE-2026-54370	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.2.9-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2021-36086	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2026-56131	expat@2.2.9-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-50219	expat@2.2.9-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-0864	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed
Low	UBUNTU-CVE-2026-0864	python2.7@2.7.18-1~20.04.1	no fix listed
Low	UBUNTU-CVE-2025-1180	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.11+esm1
Low	GHSA-jp4c-xjxw-mgf9	pip@20.0.2	26.1
Low	UBUNTU-CVE-2026-6357	python-pip@20.0.2-5ubuntu1.6	no fix listed
Low	GHSA-pw6j-qg29-8w7f	tornado@6.1	6.5.7
Low	UBUNTU-CVE-2026-48934	nodejs@10.19.0~dfsg-3ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-29111	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.24+esm3
Low	UBUNTU-CVE-2024-56433	shadow@1:4.8.1-1ubuntu5.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.10-0ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-19548	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-1148	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-89157	pcre2@10.34-7	no fix listed
Low	UBUNTU-CVE-2026-40226	systemd@245.4-4ubuntu3.15	no fix listed
Low	UBUNTU-CVE-2026-15003	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-6845	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-1152	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-1150	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-1151	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-4877	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-89092	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-18374	glibc@2.31-0ubuntu9.2	no fix listed
Low	GHSA-c58j-88f5-h53f	pycares@4.1.2	4.2.0
Low	UBUNTU-CVE-2026-48931	nodejs@10.19.0~dfsg-3ubuntu1	no fix listed
Low	UBUNTU-CVE-2021-36084	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2026-6844	binutils@2.34-6ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-1149	binutils@2.34-6ubuntu1.3	no fix listed
Low	GHSA-cx3h-4qpv-8hc9	tornado@6.1	6.5.6
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@1.1.11	1.1.12
Low	UBUNTU-CVE-2025-5889	node-brace-expansion@1.1.11-1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.8.5latest	4 years ago	2.0.1	1450329732	17,836

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/lsst-sqre/nublado2.svg)](https://charts.stackradar.io/charts/lsst-sqre/nublado2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.