StackRadar

chatbot-ai-sample Helm chart

openshift

Scored 14 Sept 2026

This Helm Chart deploys a Large Language Model (LLM)-enabled [chat bot application](https://github.com/redhat-ai-dev/ai-lab-samples/tree/main/chatbot).

Latest 0.1.6App version not verified against the render 0Artifact Hub

chatbot-ai-sample 0.1.6 deploys 4 container images: quay.io/redhat-ai-dev/granite-7b-lab, quay.io/ai-lab/llamacpp_python, quay.io/redhat-ai-dev/chatbot and registry.redhat.io/openshift4/ose-docker-builder-rhel9. Across the 2 measured, 1,153 findings44 critical, 26 high 31 on CISA KEV. The highest contribution is RHSA-2024:4726 in httpd 2.4.57-8.el9, fixed in 0:2.4.57-11.el9_4. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

18,9224426280803

1,153 findings over 2 of 4 images measured

KEV ×31 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
quay.io/redhat-ai-dev/granite-7b-lablatestnot yet scanned
quay.io/ai-lab/llamacpp_pythonlatest20111263558,459
quay.io/redhat-ai-dev/chatbotlatest241515444810,463
registry.redhat.io/openshift4/ose-docker-builder-rhel9v4.16unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

482 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2026:47057nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f1271:24.18.0-3.module+el9.8.0+24537+83ec84e1
LowRHSA-2026:47058nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f1271:22.23.1-2.module+el9.8.0+24538+3f176d52
LowPYSEC-2026-3951gitpython@3.1.433.1.55
LowRHSA-2025:10701kernel@5.14.0-427.35.1.el9_40:5.14.0-427.76.1.el9_4
LowRHSA-2026:42089glib2@2.68.4-14.el9_4.10:2.68.4-19.el9_8.2
LowRHSA-2026:66366vim@2:8.2.2637-20.el9_12:8.2.2637-26.el9_8.21
LowRHSA-2024:9404libgcrypt@1.10.0-10.el9_20:1.10.0-11.el9
LowGHSA-29pf-2h5f-8g72transformers@4.41.25.3.0
LowRHSA-2026:15971glib2@2.68.4-14.el9_4.10:2.68.4-18.el9_7.2
LowRHSA-2026:19361glib2@2.68.4-14.el9_4.10:2.68.4-19.el9_8.1
LowRHSA-2026:19452glib2@2.68.4-14.el9_4.10:2.68.4-14.el9_4.6
LowGHSA-jhmp-mqwm-3gq8tornado@6.46.5.3
LowGHSA-pjwx-r37v-7724langchain-core@0.1.520.3.85
LowRHSA-2026:27735kernel@5.14.0-427.35.1.el9_40:5.14.0-427.132.1.el9_4
LowRHSA-2026:2212kernel@5.14.0-427.35.1.el9_40:5.14.0-611.30.1.el9_7
LowRHSA-2025:19104kernel@5.14.0-427.35.1.el9_40:5.14.0-427.96.1.el9_4
LowRHBA-2026:39332kernel@5.14.0-427.35.1.el9_40:5.14.0-687.26.1.el9_8
LowRHSA-2026:1143kernel@5.14.0-427.35.1.el9_40:5.14.0-611.26.1.el9_7
LowRHSA-2026:30848kernel@5.14.0-427.35.1.el9_40:5.14.0-687.19.1.el9_8
LowRHSA-2026:1444kernel@5.14.0-427.35.1.el9_40:5.14.0-427.108.1.el9_4
LowGHSA-7r86-cg39-jmmjminimatch@9.0.49.0.7
LowRHSA-2025:7409git@2.43.5-1.el9_40:2.47.1-2.el9_6
LowRHSA-2026:38511vim@2:8.2.2637-20.el9_12:8.2.2637-26.el9_8.10
LowGHSA-m42m-m8cr-8m58langchain-text-splitters@0.0.20.3.9
LowRHSA-2026:66341apr-util@1.6.1-23.el90:1.6.1-23.el9_8.1
LowRHSA-2025:16880kernel@5.14.0-427.35.1.el9_40:5.14.0-570.49.1.el9_6
LowRHSA-2024:11200expat@2.5.0-2.el9_4.10:2.5.0-2.el9_4.2
LowGHSA-63hw-fmq6-xxg2aiohttp@3.9.53.14.1
LowRHSA-2026:59387mod_http2@2.0.26-2.el9_40:2.0.26-6.el9_8.2
LowRHSA-2026:2042brotli@1.0.9-6.el90:1.0.9-9.el9_7
LowRHSA-2026:19218openssl@1:3.0.7-27.el91:3.5.5-2.el9_8
LowRHSA-2026:27744openssl-fips-provider@3.0.7-2.el90:3.0.7-11.el9_8
LowRHSA-2026:61383nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f1271:22.23.2-1.module+el9.8.0+24709+804d6b5b
LowRHSA-2026:61386nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f1271:24.19.0-1.module+el9.8.0+24708+e71d2e1d
LowGHSA-8qq5-rm4j-mr97tar@6.2.17.5.3
LowGHSA-gmj6-6f8f-6699jinja2@3.1.43.1.5
LowRHSA-2025:10024pam@1.5.1-19.el90:1.5.1-24.el9_4
LowRHSA-2025:15099pam@1.5.1-19.el90:1.5.1-26.el9_6
LowRHSA-2025:23125curl@7.76.1-29.el9_4.10:7.76.1-29.el9_4.3
LowRHSA-2026:52674libarchive@3.5.3-4.el90:3.5.3-11.el9_8
LowRHSA-2025:14130libarchive@3.5.3-4.el90:3.5.3-6.el9_6
LowRHSA-2024:9605kernel@5.14.0-427.35.1.el9_40:5.14.0-503.14.1.el9_5
LowRHSA-2025:23241kernel@5.14.0-427.35.1.el9_40:5.14.0-611.16.1.el9_7
LowGHSA-xcgm-r5h9-7989aiohttp@3.9.53.14.1
LowRHSA-2025:19409kernel@5.14.0-427.35.1.el9_40:5.14.0-570.60.1.el9_6
LowRHSA-2025:21760kernel@5.14.0-427.35.1.el9_40:5.14.0-427.100.1.el9_4
LowRHSA-2025:0578kernel@5.14.0-427.35.1.el9_40:5.14.0-503.22.1.el9_5
LowGHSA-23c5-xmqv-rm74minimatch@9.0.49.0.7
LowRHSA-2025:7426nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f1271:20.19.1-1.module+el9.6.0+23053+4195b0b2
LowRHSA-2026:53329kernel@5.14.0-427.35.1.el9_40:5.14.0-687.38.1.el9_8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.6latest442628080318,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/chatbot-ai-sample.svg)](https://charts.stackradar.io/charts/openshift/chatbot-ai-sample)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.