chatbot-ai-sample 0.1.6 Helm chart

Name: chatbot-ai-sample Helm chart 0.1.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

This Helm Chart deploys a Large Language Model (LLM)-enabled [chat bot application](https://github.com/redhat-ai-dev/ai-lab-samples/tree/main/chatbot).

Version 0.1.6App version not verified against the render 0Artifact Hub

chatbot-ai-sample 0.1.6 deploys 4 container images: quay.io/redhat-ai-dev/granite-7b-lab, quay.io/ai-lab/llamacpp_python, quay.io/redhat-ai-dev/chatbot and registry.redhat.io/openshift4/ose-docker-builder-rhel9. Across the 2 measured, 1,153 findings — 44 critical, 26 high — 31 on CISA KEV. The highest contribution is RHSA-2024:4726 in httpd 2.4.57-8.el9, fixed in 0:2.4.57-11.el9_4. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

18,9224426280803

1,153 findings over 2 of 4 images measured

KEV ×31 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/redhat-ai-dev/granite-7b-lab	latest	—	not yet scanned
quay.io/ai-lab/llamacpp_python	latest	2011126355	8,459
quay.io/redhat-ai-dev/chatbot	latest	2415154448	10,463
registry.redhat.io/openshift4/ose-docker-builder-rhel9	v4.16	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

680 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	PYSEC-2026-3951	gitpython@3.1.43	3.1.55
Low	RHSA-2025:10701	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-427.76.1.el9_4
Low	RHSA-2026:42089	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.2
Low	RHSA-2026:66366	vim@2:8.2.2637-20.el9_1	2:8.2.2637-26.el9_8.21
Low	RHSA-2024:9404	libgcrypt@1.10.0-10.el9_2	0:1.10.0-11.el9
Low	GHSA-29pf-2h5f-8g72	transformers@4.41.2	5.3.0
Low	RHSA-2026:15971	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.2
Low	RHSA-2026:19361	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.1
Low	RHSA-2026:19452	glib2@2.68.4-14.el9_4.1	0:2.68.4-14.el9_4.6
Low	GHSA-jhmp-mqwm-3gq8	tornado@6.4	6.5.3
Low	GHSA-pjwx-r37v-7724	langchain-core@0.1.52	0.3.85
Low	RHSA-2026:27735	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-427.132.1.el9_4
Low	RHSA-2026:2212	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-611.30.1.el9_7
Low	RHSA-2025:19104	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-427.96.1.el9_4
Low	RHBA-2026:39332	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-687.26.1.el9_8
Low	RHSA-2026:1143	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-611.26.1.el9_7
Low	RHSA-2026:30848	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-687.19.1.el9_8
Low	RHSA-2026:1444	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-427.108.1.el9_4
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.4	9.0.7
Low	RHSA-2025:7409	git@2.43.5-1.el9_4	0:2.47.1-2.el9_6
Low	RHSA-2026:38511	vim@2:8.2.2637-20.el9_1	2:8.2.2637-26.el9_8.10
Low	GHSA-m42m-m8cr-8m58	langchain-text-splitters@0.0.2	0.3.9
Low	RHSA-2026:66341	apr-util@1.6.1-23.el9	0:1.6.1-23.el9_8.1
Low	RHSA-2025:16880	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-570.49.1.el9_6
Low	RHSA-2024:11200	expat@2.5.0-2.el9_4.1	0:2.5.0-2.el9_4.2
Low	GHSA-63hw-fmq6-xxg2	aiohttp@3.9.5	3.14.1
Low	RHSA-2026:59387	mod_http2@2.0.26-2.el9_4	0:2.0.26-6.el9_8.2
Low	RHSA-2026:2042	brotli@1.0.9-6.el9	0:1.0.9-9.el9_7
Low	RHSA-2026:19218	openssl@1:3.0.7-27.el9	1:3.5.5-2.el9_8
Low	RHSA-2026:27744	openssl-fips-provider@3.0.7-2.el9	0:3.0.7-11.el9_8
Low	RHSA-2026:61383	nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f127	1:22.23.2-1.module+el9.8.0+24709+804d6b5b
Low	RHSA-2026:61386	nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f127	1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	GHSA-gmj6-6f8f-6699	jinja2@3.1.4	3.1.5
Low	RHSA-2025:10024	pam@1.5.1-19.el9	0:1.5.1-24.el9_4
Low	RHSA-2025:15099	pam@1.5.1-19.el9	0:1.5.1-26.el9_6
Low	RHSA-2025:23125	curl@7.76.1-29.el9_4.1	0:7.76.1-29.el9_4.3
Low	RHSA-2026:52674	libarchive@3.5.3-4.el9	0:3.5.3-11.el9_8
Low	RHSA-2025:14130	libarchive@3.5.3-4.el9	0:3.5.3-6.el9_6
Low	RHSA-2024:9605	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-503.14.1.el9_5
Low	RHSA-2025:23241	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-611.16.1.el9_7
Low	GHSA-xcgm-r5h9-7989	aiohttp@3.9.5	3.14.1
Low	RHSA-2025:19409	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-570.60.1.el9_6
Low	RHSA-2025:21760	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-427.100.1.el9_4
Low	RHSA-2025:0578	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-503.22.1.el9_5
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.4	9.0.7
Low	RHSA-2025:7426	nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f127	1:20.19.1-1.module+el9.6.0+23053+4195b0b2
Low	RHSA-2026:53329	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-687.38.1.el9_8
Low	PYSEC-2026-3784	gitpython@3.1.43	3.1.58
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.6latest	—	—	4426280803	18,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/chatbot-ai-sample.svg)](https://charts.stackradar.io/charts/openshift/chatbot-ai-sample)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.