StackRadar

chatbot-ai-sample 0.1.6 Helm chart

openshift

Scored 14 Sept 2026

This Helm Chart deploys a Large Language Model (LLM)-enabled [chat bot application](https://github.com/redhat-ai-dev/ai-lab-samples/tree/main/chatbot).

Version 0.1.6App version not verified against the render 0Artifact Hub

chatbot-ai-sample 0.1.6 deploys 4 container images: quay.io/redhat-ai-dev/granite-7b-lab, quay.io/ai-lab/llamacpp_python, quay.io/redhat-ai-dev/chatbot and registry.redhat.io/openshift4/ose-docker-builder-rhel9. Across the 2 measured, 1,153 findings44 critical, 26 high 31 on CISA KEV. The highest contribution is RHSA-2024:4726 in httpd 2.4.57-8.el9, fixed in 0:2.4.57-11.el9_4. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

18,9224426280803

1,153 findings over 2 of 4 images measured

KEV ×31 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
quay.io/redhat-ai-dev/granite-7b-lablatestnot yet scanned
quay.io/ai-lab/llamacpp_pythonlatest20111263558,459
quay.io/redhat-ai-dev/chatbotlatest241515444810,463
registry.redhat.io/openshift4/ose-docker-builder-rhel9v4.16unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

482 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowPYSEC-2026-3784gitpython@3.1.433.1.58
LowGHSA-mh99-v99m-4gvgbrace-expansion@2.0.12.1.3
LowRHSA-2025:17241kernel@5.14.0-427.35.1.el9_40:5.14.0-427.92.1.el9_4
LowRHSA-2025:22175expat@2.5.0-2.el9_4.10:2.5.0-5.el9_7.1
LowRHSA-2026:25028kernel@5.14.0-427.35.1.el9_40:5.14.0-427.130.1.el9_4
LowRHSA-2026:28209vim@2:8.2.2637-20.el9_12:8.2.2637-26.el9_8.6
LowRHSA-2026:4168python3.9@3.9.18-3.el9_4.50:3.9.25-3.el9_7.1
LowRHSA-2026:4216python3.11@3.11.7-1.el9_4.50:3.11.13-5.1.el9_7
LowRHSA-2026:5226python3.9@3.9.18-3.el9_4.50:3.9.18-3.el9_4.11
LowRHSA-2026:6253python3.11@3.11.7-1.el9_4.50:3.11.7-1.el9_4.11
LowRHSA-2026:23230expat@2.5.0-2.el9_4.10:2.5.0-6.el9_8.1
LowRHSA-2025:7440vim@2:8.2.2637-20.el9_12:8.2.2637-22.el9_6
LowRHSA-2026:47756openssh@8.7p1-38.el9_4.40:9.9p1-9.el9_8
LowRHSA-2025:11411kernel@5.14.0-427.35.1.el9_40:5.14.0-570.28.1.el9_6
LowRHSA-2025:1522nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f1271:20.18.2-1.module+el9.4.0+22789+7c201776
LowRHSA-2025:7076gnutls@3.8.3-4.el9_40:3.8.3-6.el9
LowGHSA-73rr-hh4g-fpgxdiff@5.2.05.2.2
LowRHSA-2025:8655glibc@2.34-100.el9_4.30:2.34-168.el9_6.19
LowGHSA-3f7w-8rr8-f37fgitpython@3.1.433.1.57
LowRHSA-2024:9371python3.9@3.9.18-3.el9_4.50:3.9.19-8.el9
LowRHSA-2026:60484kernel@5.14.0-427.35.1.el9_40:5.14.0-427.147.1.el9_4
LowRHSA-2026:43231kernel@5.14.0-427.35.1.el9_40:5.14.0-427.139.1.el9_4
LowRHSA-2026:56573kernel@5.14.0-427.35.1.el9_40:5.14.0-427.145.1.el9_4
LowPYSEC-2026-2095aiohttp@3.9.53.13.4
LowGHSA-4fvr-rgm6-gqmcaiohttp@3.9.53.14.1
LowGHSA-8x88-c5mf-7j5wtar@6.2.17.5.18
LowRHSA-2025:3510kernel@5.14.0-427.35.1.el9_40:5.14.0-427.62.1.el9_4
LowGHSA-w8v5-vhqr-4h9vdiskcache@5.6.3no fix listed
LowRHSA-2024:11313kernel@5.14.0-427.35.1.el9_40:5.14.0-427.49.1.el9_4
LowRHSA-2025:9080kernel@5.14.0-427.35.1.el9_40:5.14.0-570.22.1.el9_6
LowRHSA-2025:2270kernel@5.14.0-427.35.1.el9_40:5.14.0-427.57.1.el9_4
LowRHSA-2026:24381kernel@5.14.0-427.35.1.el9_40:5.14.0-687.13.1.el9_8
LowPYSEC-2025-217transformers@4.41.2no fix listed
LowGHSA-45hq-cxwh-f6vcpillow@10.3.012.3.0
LowGHSA-fjr4-x663-mwxcgitpython@3.1.433.1.54
LowGHSA-5x94-69rx-g8h2pillow@10.3.012.3.0
LowGHSA-phj9-mv4w-65pmpillow@10.3.012.3.0
LowGHSA-8v84-f9pq-wr9xpillow@10.3.012.3.0
LowRHSA-2026:18599p11-kit@0.25.3-2.el90:0.26.2-1.el9
LowPYSEC-2024-323langchain@0.1.200.2.9
LowRHSA-2025:12447libxml2@2.9.13-6.el9_40:2.9.13-11.el9_6
LowRHSA-2025:15011kernel@5.14.0-427.35.1.el9_40:5.14.0-570.39.1.el9_6
LowRHSA-2026:42668libtiff@4.4.0-12.el90:4.4.0-18.el9_8.1
LowGHSA-82w8-qh3p-5jfqstarlette@0.46.21.3.1
LowRHSA-2026:1879kernel@5.14.0-427.35.1.el9_40:5.14.0-427.109.1.el9_4
LowGHSA-mwp4-54f8-5fhrip-address@9.0.510.3.1
LowGHSA-3x9g-8vmp-wqvftornado@6.46.5.6
LowRHSA-2025:3107libxslt@1.1.34-9.el90:1.1.34-9.el9_5.1
LowRHSA-2025:3613libxslt@1.1.34-9.el90:1.1.34-13.el9_4
LowRHSA-2025:22405kernel@5.14.0-427.35.1.el9_40:5.14.0-611.11.1.el9_7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.6latest442628080318,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/chatbot-ai-sample.svg)](https://charts.stackradar.io/charts/openshift/chatbot-ai-sample)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.