milvus 5.0.28 Helm chart

Name: milvus Helm chart 5.0.28: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

milvus-helm

Scored 15 Sept 2026

Milvus is an open-source vector database built to power AI applications and vector similarity search.

Version 5.0.28 yesterdayapp version 3.0.1 8Artifact Hub

milvus 5.0.28 deploys 4 container images: milvusdb/milvus, milvusdb/etcd, quay.io/minio/minio and apachepulsar/pulsar. Across the 3 measured, 954 findings — 3 critical, 11 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-27363 in freetype 2.11.1+dfsg-1ubuntu0.2, fixed in 2.11.1+dfsg-1ubuntu0.3. Chart.yaml declares kubeVersion ^1.10.0-0; rendered for Kubernetes 1.10.0.

Radar Score

10,764311165775

954 findings over 3 of 4 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
milvusdb/milvus×5	v3.0.1	—	not yet scanned
milvusdb/etcd	3.5.25-r1	0343208	2,715
quay.io/minio/minio	RELEASE.2024-12-18T13-15-44Z	0113130	1,398
apachepulsar/pulsar×16	3.0.7	37109437	6,651

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

710 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.36.0	0.52.0
Low	UBUNTU-CVE-2026-6100	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2024-9287	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.7
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.2.1	5.2.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.5.1	4.5.2
Low	RHSA-2025:12876	ncurses@6.2-10.20210508.el9	0:6.2-10.20210508.el9_6.2
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.113.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25
Low	UBUNTU-CVE-2026-82209	curl@7.81.0-1ubuntu1.18	no fix listed
Low	UBUNTU-CVE-2025-40780	bind9@1:9.18.28-0ubuntu0.22.04.1	1:9.18.39-0ubuntu0.22.04.2
Low	UBUNTU-CVE-2026-3104	bind9@1:9.18.28-0ubuntu0.22.04.1	1:9.18.39-0ubuntu0.22.04.3
Low	UBUNTU-CVE-2024-10524	wget@1.21.2-2ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2025-58068	python-eventlet@0.30.2-5ubuntu2	0.30.2-5ubuntu2.2
Low	UBUNTU-CVE-2026-4224	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.16
Low	GHSA-vx9q-rhv9-3jvg	aircompressor@0.27	2.0.3
Low	UBUNTU-CVE-2025-66418	python-pip@22.0.2+dfsg-1ubuntu0.4	22.0.2+dfsg-1ubuntu0.7+esm1
Low	UBUNTU-CVE-2025-66471	python-pip@22.0.2+dfsg-1ubuntu0.4	22.0.2+dfsg-1ubuntu0.7+esm3
Low	UBUNTU-CVE-2026-44432	python-pip@22.0.2+dfsg-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-63072	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.29
Low	UBUNTU-CVE-2026-7210	python3.10@3.10.12-1~22.04.6	no fix listed
Low	UBUNTU-CVE-2026-12087	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.0.4	4.1.4
Low	GHSA-jjjj-jwhf-8rgr	github.com/minio/minio@v0.0.0-20241218131544-16f8cf1c52f0	0.0.0-20251015170045-c1a49490c78e
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.71.1	1.83.1
Low	UBUNTU-CVE-2025-8194	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.11
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.113.Final	4.1.132.Final
Low	UBUNTU-CVE-2025-5318	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.4
Low	GHSA-9p9m-jm8w-94p2	eventlet@0.30.2	0.31.0
Low	UBUNTU-CVE-2026-15308	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.18
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.113.Final	4.1.133.Final
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.113.Final	4.1.135.Final
Low	UBUNTU-CVE-2026-0915	glibc@2.35-0ubuntu3.11	2.35-0ubuntu3.13
Low	UBUNTU-CVE-2025-4802	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.10
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2022-2795	bind9@1:9.18.28-0ubuntu0.22.04.1	no fix listed
Low	BIT-etcd-2026-73500	etcd@3.5.7-0	3.5.33
Low	UBUNTU-CVE-2026-5773	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.24
Low	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.113.Final	4.1.135.Final
Low	GHSA-w33c-445m-f8w7	okio@1.17.2	1.17.6
Low	GHSA-7xrh-hqfc-g7qr	zookeeper@3.9.2	3.9.5
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.21.0	0.24.0
Low	UBUNTU-CVE-2026-45445	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25
Low	GHSA-574f-3g2m-x479	bcprov-jdk18on@1.78.1	1.80.2
Low	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.21.0	3.30.14
Low	UBUNTU-CVE-2021-31879	wget@1.21.2-2ubuntu1.1	no fix listed
Low	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.21.0	3.30.14
Low	GHSA-q2x7-8rv6-6q7h	jinja2@3.0.3	3.1.5
Low	UBUNTU-CVE-2024-56326	jinja2@3.0.3-1ubuntu0.2	3.0.3-1ubuntu0.3
Low	UBUNTU-CVE-2026-66046	expat@2.4.7-1ubuntu0.4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.28latest	yesterday	3.0.1	311165775	10,764
5.0.27	12 days ago	3.0.1	311165775	10,764

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/milvus-helm/milvus.svg)](https://charts.stackradar.io/charts/milvus-helm/milvus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.