StackRadar

chatbot-ai-sample Helm chart

openshift

Scored 14 Sept 2026

This Helm Chart deploys a Large Language Model (LLM)-enabled [chat bot application](https://github.com/redhat-ai-dev/ai-lab-samples/tree/main/chatbot).

Latest 0.1.6App version not verified against the render 0Artifact Hub

chatbot-ai-sample 0.1.6 deploys 4 container images: quay.io/redhat-ai-dev/granite-7b-lab, quay.io/ai-lab/llamacpp_python, quay.io/redhat-ai-dev/chatbot and registry.redhat.io/openshift4/ose-docker-builder-rhel9. Across the 2 measured, 1,153 findings44 critical, 26 high 31 on CISA KEV. The highest contribution is RHSA-2024:4726 in httpd 2.4.57-8.el9, fixed in 0:2.4.57-11.el9_4. Chart.yaml declares kubeVersion >= 1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

18,9224426280803

1,153 findings over 2 of 4 images measured

KEV ×31 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
quay.io/redhat-ai-dev/granite-7b-lablatestnot yet scanned
quay.io/ai-lab/llamacpp_pythonlatest20111263558,459
quay.io/redhat-ai-dev/chatbotlatest241515444810,463
registry.redhat.io/openshift4/ose-docker-builder-rhel9v4.16unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

680 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowRHSA-2025:14420kernel@5.14.0-427.35.1.el9_40:5.14.0-570.37.1.el9_6
LowRHSA-2026:50147libgcrypt@1.10.0-10.el9_20:1.10.0-13.el9_8
LowGHSA-hpj7-wq8m-9hgpaiohttp@3.9.53.14.1
LowGHSA-q25c-c977-4cmhlangchain-community@0.0.380.2.9
LowGHSA-4w7r-h757-3r74transformers@4.41.24.53.0
LowGHSA-gvwx-54wh-qm9jtar@6.2.17.5.17
LowRHSA-2026:61247libxml2@2.9.13-6.el9_40:2.9.13-14.el9_8.4
LowGHSA-mf9w-mj56-hr94python-dotenv@1.1.01.2.2
LowGHSA-c427-h43c-vf67aiohttp@3.9.53.13.4
LowGHSA-fv5p-p927-qmxrlangchain-text-splitters@0.0.21.1.2
LowGHSA-3644-q5cj-c5c7langchain@0.1.200.3.30
LowGHSA-3644-q5cj-c5c7langsmith@0.1.670.8.0
LowRHSA-2025:13664krb5@1.21.1-2.el9_40:1.21.1-2.el9_4.2
LowGHSA-7833-fr7j-v32qgitpython@3.1.433.1.59
LowRHSA-2026:1617kernel@5.14.0-427.35.1.el9_40:5.14.0-611.27.1.el9_7
LowRHSA-2026:3692kernel@5.14.0-427.35.1.el9_40:5.14.0-427.113.1.el9_4
LowRHSA-2026:0719gnupg2@2.3.3-4.el90:2.3.3-5.el9_7
LowGHSA-v2v4-37r5-5v8gip-address@9.0.510.1.1
LowPYSEC-2026-2104aiohttp@3.9.53.14.0
LowRHSA-2026:59347httpd@2.4.57-11.el9_4.10:2.4.62-13.el9_8.6
LowRHSA-2026:3066kernel@5.14.0-427.35.1.el9_40:5.14.0-611.35.1.el9_7
LowRHSA-2025:10837kernel@5.14.0-427.35.1.el9_40:5.14.0-570.26.1.el9_6
LowGHSA-3wxw-xv34-2frggitpython@3.1.433.1.59
LowGHSA-pq67-6m6q-mj2vurllib3@1.26.52.5.0
LowGHSA-37mw-44qp-f5jmtransformers@4.41.24.52.1
LowGHSA-jjph-296x-mrcrtransformers@4.41.24.51.0
LowGHSA-q2wp-rjmx-x6x9transformers@4.41.24.51.0
LowRHSA-2025:22865kernel@5.14.0-427.35.1.el9_40:5.14.0-611.13.1.el9_7
LowRHSA-2025:17760kernel@5.14.0-427.35.1.el9_40:5.14.0-570.52.1.el9_6
LowRHSA-2026:33226glibc@2.34-100.el9_4.30:2.34-272.el9_8
LowRHSA-2026:12441libcap@2.48-9.el9_20:2.48-10.el9_7.1
LowGHSA-65pc-fj4g-8rjxidna@2.103.15
LowRHSA-2026:54484python-idna@2.10-7.el9_4.10:2.10-8.el9_8
LowGHSA-9wx4-h78v-vm56requests@2.25.12.32.0
LowRHSA-2025:7049python-requests@2.25.1-8.el90:2.25.1-9.el9
LowRHSA-2026:64812expat@2.5.0-2.el9_4.10:2.5.0-6.el9_8.3
LowRHSA-2025:4243glibc@2.34-100.el9_4.30:2.34-100.el9_4.10
LowRHSA-2025:23342python3.9@3.9.18-3.el9_4.50:3.9.25-2.el9_7
LowGHSA-9356-575x-2w9mtransformers@4.41.24.53.0
LowRHSA-2026:13677systemd@252-32.el9_4.70:252-55.el9_7.9
LowRHSA-2026:4759kernel@5.14.0-427.35.1.el9_40:5.14.0-611.41.1.el9_7
LowGHSA-5chr-fjjv-38qvlangchain-core@0.1.520.1.53
LowGHSA-rcv9-qm8p-9p6jtransformers@4.41.24.53.0
LowRHSA-2025:15740kernel@5.14.0-427.35.1.el9_40:5.14.0-570.44.1.el9_6
LowRHSA-2026:42736acl@2.3.1-4.el90:2.4.0-1.el9_8
LowRHSA-2024:4766python3.11@3.11.7-1.el90:3.11.7-1.el9_4.3
LowRHSA-2024:4779python3.9@3.9.18-3.el90:3.9.18-3.el9_4.3
LowGHSA-48p4-8xcf-vxj5urllib3@2.2.12.5.0
LowPYSEC-2025-265tornado@6.46.5.3
LowRHSA-2025:1350libxml2@2.9.13-6.el9_40:2.9.13-6.el9_5.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.6latest442628080318,922

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/chatbot-ai-sample.svg)](https://charts.stackradar.io/charts/openshift/chatbot-ai-sample)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.