StackRadar

chatbot-ai-sample 0.1.6 Helm chart

openshift

Scored 14 Sept 2026

This Helm Chart deploys a Large Language Model (LLM)-enabled [chat bot application](https://github.com/redhat-ai-dev/ai-lab-samples/tree/main/chatbot).

Version 0.1.6App version not verified against the render 0Artifact Hub

chatbot-ai-sample 0.1.6 deploys 4 container images: quay.io/redhat-ai-dev/granite-7b-lab, quay.io/ai-lab/llamacpp_python, quay.io/redhat-ai-dev/chatbot and registry.redhat.io/openshift4/ose-docker-builder-rhel9. Across the 2 measured, 1,153 findings44 critical, 26 high 31 on CISA KEV. The highest contribution is RHSA-2024:4726 in httpd 2.4.57-8.el9, fixed in 0:2.4.57-11.el9_4. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

18,9224426280803

1,153 findings over 2 of 4 images measured

KEV ×31 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
quay.io/redhat-ai-dev/granite-7b-lablatestnot yet scanned
quay.io/ai-lab/llamacpp_pythonlatest20111263558,459
quay.io/redhat-ai-dev/chatbotlatest241515444810,463
registry.redhat.io/openshift4/ose-docker-builder-rhel9v4.16unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

482 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowPYSEC-2026-2288transformers@4.41.25.0.0
LowRHSA-2026:3488kernel@5.14.0-427.35.1.el9_40:5.14.0-611.36.1.el9_7
LowRHSA-2025:7077libtasn1@4.16.0-8.el9_10:4.16.0-9.el9
LowRHSA-2026:48386kernel@5.14.0-427.35.1.el9_40:5.14.0-427.141.1.el9_4
LowGHSA-wf93-45jw-7689pip@22.3.126.1.2
LowRHSA-2026:21209kernel@5.14.0-427.35.1.el9_40:5.14.0-427.127.1.el9_4
LowRHSA-2026:8921kernel@5.14.0-427.35.1.el9_40:5.14.0-611.49.1.el9_7
LowRHSA-2025:13962kernel@5.14.0-427.35.1.el9_40:5.14.0-570.35.1.el9_6
LowGHSA-r6q2-hw4h-h46wtar@6.2.17.5.4
LowGHSA-6r8x-57c9-28j4pillow@10.3.012.3.0
LowGHSA-9hw9-ch79-4vh6pillow@10.3.012.3.0
LowGHSA-jjj6-mw9f-p565pillow@10.3.012.3.0
LowRHSA-2024:11024python3.9@3.9.18-3.el9_4.50:3.9.18-3.el9_4.7
LowRHSA-2024:11111python3.11@3.11.7-1.el9_4.50:3.11.9-7.el9_5.2
LowRHSA-2025:22661kernel@5.14.0-427.35.1.el9_40:5.14.0-427.102.1.el9_4
LowRHSA-2025:14082kernel@5.14.0-427.35.1.el9_40:5.14.0-427.84.1.el9_4
LowGHSA-r292-9mhp-454mtar@6.2.17.5.21
LowRHSA-2024:4078python3.9@3.9.18-3.el90:3.9.18-3.el9_4.1
LowRHSA-2026:20604rsync@3.2.3-19.el90:3.2.3-19.el9_4.3
LowRHSA-2026:18587kernel@5.14.0-427.35.1.el9_40:5.14.0-687.5.1.el9_8
LowGHSA-4gmw-gg2m-w46pgitpython@3.1.433.1.58
LowPYSEC-2025-214transformers@4.41.2no fix listed
LowPYSEC-2025-215transformers@4.41.2no fix listed
LowPYSEC-2025-216transformers@4.41.2no fix listed
LowGHSA-qjxf-f2mg-c6mctornado@6.46.5.5
LowPYSEC-2024-153streamlit@1.34.01.37.0
LowGHSA-wqp7-x3pw-xc5rstarlette@0.46.21.1.0
LowPYSEC-2025-211transformers@4.41.2no fix listed
LowPYSEC-2025-212transformers@4.41.2no fix listed
LowPYSEC-2025-213transformers@4.41.2no fix listed
LowPYSEC-2025-218transformers@4.41.2no fix listed
LowGHSA-7545-fcxq-7j24gitpython@3.1.433.1.48
LowRHSA-2026:0211libpng@2:1.6.37-12.el92:1.6.37-12.el9_4.1
LowRHSA-2026:0238libpng@2:1.6.37-12.el92:1.6.37-12.el9_7.1
LowRHSA-2024:11486kernel@5.14.0-427.35.1.el9_40:5.14.0-503.19.1.el9_5
LowRHSA-2024:4077python3.11@3.11.7-1.el90:3.11.7-1.el9_4.1
LowGHSA-mpf4-983q-p7j4tornado@6.46.5.8
LowPYSEC-2024-161pyarrow@16.1.017.0.0
LowRHSA-2026:0936glib2@2.68.4-14.el9_4.10:2.68.4-18.el9_7.1
LowGHSA-w4pp-8pjf-rmxwpacote@18.0.621.5.1
LowGHSA-9hjg-9r4m-mvj7requests@2.25.12.32.4
LowRHSA-2025:12519python-requests@2.25.1-8.el90:2.25.1-10.el9_6
LowRHSA-2025:12083icu@67.1-9.el90:67.1-10.el9_6
LowGHSA-w2fm-2cpv-w7v5aiohttp@3.9.53.13.4
LowGHSA-8qvm-5x2c-j2w7protobuf@4.25.34.25.8
LowRHSA-2025:22005go-rpm-macros@3.2.0-3.el90:3.6.0-12.el9_7
LowRHSA-2025:23123libpq@13.11-1.el90:13.23-1.el9_4
LowRHSA-2025:13946kernel@5.14.0-427.35.1.el9_40:5.14.0-427.83.1.el9_4
LowRHSA-2025:7067krb5@1.21.1-2.el9_40:1.21.1-6.el9
LowGHSA-8495-4g3g-x7praiohttp@3.9.53.10.11

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.6latest442628080318,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/chatbot-ai-sample.svg)](https://charts.stackradar.io/charts/openshift/chatbot-ai-sample)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.