milvus 5.0.28 Helm chart
milvus-helmScored 15 Sept 2026
Milvus is an open-source vector database built to power AI applications and vector similarity search.
Version 5.0.28 yesterdayapp version 3.0.1 8Artifact Hub
milvus 5.0.28 deploys 4 container images: milvusdb/milvus, milvusdb/etcd, quay.io/minio/minio and apachepulsar/pulsar. Across the 3 measured, 954 findings — 3 critical, 11 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-27363 in freetype 2.11.1+dfsg-1ubuntu0.2, fixed in 2.11.1+dfsg-1ubuntu0.3. Chart.yaml declares kubeVersion ^1.10.0-0; rendered for Kubernetes 1.10.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| milvusdb/ | v3.0.1 | — | not yet scanned |
| milvusdb/ | 3.5.25-r1 | 0343208 | 2,715 |
| quay.io/ | RELEASE.2024-12-18T13-15-44Z | 0113130 | 1,398 |
| apachepulsar/ | 3.0.7 | 37109437 | 6,651 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-1502 | python3.10 | 3.10.12-1~22.04.16 |
| Low | UBUNTU-CVE-2026-4786 | python3.10 | 3.10.12-1~22.04.16 |
| Low | UBUNTU-CVE-2025-40909 | perl | 5.34.0-3ubuntu1.5 |
| Low | GHSA-6hg6-v5c8-fphq | log4j-core | 2.25.4 |
| Low | GHSA-cmxv-58fp-fm3g | async-http-client | 2.14.5 |
| Low | UBUNTU-CVE-2026-19672 | python3.10 | no fix listed |
| Low | UBUNTU-CVE-2026-48961 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-63074 | openssl | 3.0.2-0ubuntu1.29 |
| Low | RHSA-2026:42952 | glibc | 0:2.34-274.el9_8 |
| Low | UBUNTU-CVE-2026-0865 | python3.10 | 3.10.12-1~22.04.14 |
| Low | GHSA-hfvc-g4fc-pqhx | go.opentelemetry.io/ | 1.43.0 |
| Low | GHSA-m4cv-j2px-7723 | netty-codec-http | 4.1.133.Final |
| Low | UBUNTU-CVE-2025-14524 | curl | 7.81.0-1ubuntu1.22 |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.7.3-4ubuntu1.8 |
| Low | UBUNTU-CVE-2026-6238 | glibc | 2.35-0ubuntu3.14 |
| Low | UBUNTU-CVE-2026-5950 | bind9 | 1:9.18.39-0ubuntu0.22.04.4 |
| Low | GHSA-hw6f-rjfj-j7j7 | eventlet | 0.40.3 |
| Low | UBUNTU-CVE-2024-37891 | python-pip | 22.0.2+dfsg-1ubuntu0.5 |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | UBUNTU-CVE-2026-3731 | libssh | 0.9.6-2ubuntu0.22.04.7 |
| Low | GHSA-pr98-23f8-jwxv | logback-core | 1.3.15 |
| Low | UBUNTU-CVE-2026-8328 | python3.10 | 3.10.12-1~22.04.16 |
| Low | UBUNTU-CVE-2025-48964 | iputils | 3:20211215-1ubuntu0.1 |
| Low | UBUNTU-CVE-2025-65018 | libpng1.6 | 1.6.37-3ubuntu0.1 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2026-5435 | glibc | 2.35-0ubuntu3.14 |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | UBUNTU-CVE-2026-59890 | setuptools | no fix listed |
| Low | GHSA-c2gf-v879-257j | netty-codec-http2 | 4.1.135.Final |
| Low | UBUNTU-CVE-2026-0672 | python3.10 | 3.10.12-1~22.04.14 |
| Low | GHSA-fw7p-63qq-7hpr | filippo.io/ | 1.1.1 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-15806 | python3.10 | no fix listed |
| Low | GHSA-84h7-rjj3-6jx4 | netty-codec-http | 4.1.129.Final |
| Low | UBUNTU-CVE-2026-10723 | bind9 | 1:9.18.39-0ubuntu0.22.04.5 |
| Low | UBUNTU-CVE-2025-0395 | glibc | 2.35-0ubuntu3.9 |
| Low | UBUNTU-CVE-2023-4039 | gcc-12 | 12.3.0-1ubuntu1~22.04.2 |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | UBUNTU-CVE-2026-11822 | sqlite3 | 3.37.2-2ubuntu0.6 |
| Low | UBUNTU-CVE-2026-11824 | sqlite3 | 3.37.2-2ubuntu0.6 |
| Low | UBUNTU-CVE-2025-4598 | systemd | 249.11-0ubuntu3.16 |
| Low | GHSA-xmv7-r254-6q78 | netty-resolver-dns | 4.1.135.Final |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | UBUNTU-CVE-2026-13346 | python-pip | no fix listed |
| Low | UBUNTU-CVE-2025-15079 | curl | 7.81.0-1ubuntu1.22 |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | UBUNTU-CVE-2025-12781 | python3.10 | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.0.28latest | yesterday | 3.0.1 | 311165775 | 10,764 |
| 5.0.27 | 12 days ago | 3.0.1 | 311165775 | 10,764 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.