StackRadar

yeti Helm chart

osdfir-infrastructureVerified publisher

Scored 14 Sept 2026

A Helm chart for Yeti Kubernetes deployments.

Latest 1.0.5 1 year agoapp version latest 0Artifact Hub

yeti 1.0.5 deploys 4 container images: yetiplatform/yeti, library/arangodb, yetiplatform/yeti-frontend and bitnami/redis. Across the 3 measured, 628 findings0 critical, 5 high 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.46.2, fixed in 1.0.1.

Radar Score

6,5830588534

628 findings over 3 of 4 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
yetiplatform/yeti×2latest03422513,189
library/arangodb3.11.802121321,418
yetiplatform/yeti-frontendlatest00341511,976
bitnami/redis×27.2.4-debian-12-r16unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

493 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-65pc-fj4g-8rjxidna@3.103.15
LowGHSA-mh29-5h37-fv8mjs-yaml@3.14.13.14.2
LowDEBIAN-CVE-2026-89158pcre2@10.46-1~deb13u110.46-1~deb13u2
LowGHSA-vp96-hxj8-p424pyopenssl@25.0.026.0.0
LowGHSA-x86f-5xw2-fm2rgithub.com/docker/docker@v24.0.7+incompatibleno fix listed
LowALPINE-CVE-2024-25629c-ares@1.19.1-r01.19.1-r1
LowDEBIAN-CVE-2013-4392systemd@257.13-1~deb13u1no fix listed
LowPYSEC-2025-183pyjwt@2.10.1no fix listed
LowGHSA-h67p-54hq-rp68js-yaml@3.14.13.15.0
LowGHSA-r95x-qfjj-fjj2authlib@1.5.21.6.12
LowDEBIAN-CVE-2026-78408util-linux@2.41.5-0+deb13u1no fix listed
LowGHSA-w7vc-732c-9m39pyjwt@2.10.12.13.0
LowGHSA-48p4-8xcf-vxj5urllib3@2.4.02.5.0
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@2.0.12.1.2
LowGO-2024-3105stdlib@go1.21.51.22.7
LowGHSA-q8mj-m7cp-5q26qs@6.11.26.15.2
LowGHSA-m6hq-p25p-ffr2github.com/containerd/containerd@v1.7.111.7.29
LowGHSA-mj87-hwqh-73pjpython-multipart@0.0.180.0.26
LowGO-2026-4981stdlib@go1.21.51.25.10
LowDEBIAN-CVE-2023-31439systemd@257.13-1~deb13u1no fix listed
LowGO-2025-3563stdlib@go1.21.51.23.8
LowGHSA-fg6f-75jq-6523authlib@1.5.21.6.6
LowGO-2026-4977stdlib@go1.21.51.25.10
LowGO-2024-2610stdlib@go1.21.51.21.8
LowDEBIAN-CVE-2026-76957expat@2.8.3-1~deb13u1no fix listed
LowDEBIAN-CVE-2023-31437systemd@257.13-1~deb13u1no fix listed
LowGO-2026-4986stdlib@go1.21.51.25.10
LowGO-2026-4918stdlib@go1.21.51.25.10
LowGO-2026-4337stdlib@go1.21.51.24.13
LowGHSA-w853-jp5j-5j7ffilelock@3.18.03.20.1
LowDEBIAN-CVE-2026-59998openssh@1:10.0p1-7+deb13u4no fix listed
LowGHSA-qccp-gfcp-xxvcurllib3@2.4.02.7.0
LowDEBIAN-CVE-2023-31438systemd@257.13-1~deb13u1no fix listed
LowGHSA-5v7r-6r5c-r473file-type@16.5.421.3.1
LowDEBIAN-CVE-2025-3198binutils@2.44-3no fix listed
LowGO-2026-4601stdlib@go1.21.51.25.8
LowDEBIAN-CVE-2008-3234openssh@1:10.0p1-7+deb13u4no fix listed
LowDEBIAN-CVE-2026-78410util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-89161pcre2@10.46-1~deb13u110.46-1~deb13u2
LowGO-2026-5026stdlib@go1.21.51.25.13
LowDEBIAN-CVE-2026-86142libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowGO-2025-3420stdlib@go1.21.51.22.11
LowGO-2026-4342stdlib@go1.21.51.24.12
LowGO-2024-2598stdlib@go1.21.51.21.8
LowGO-2025-3751stdlib@go1.21.51.23.10
LowDEBIAN-CVE-2025-11839binutils@2.44-3no fix listed
LowDEBIAN-CVE-2025-11840binutils@2.44-3no fix listed
LowDEBIAN-CVE-2026-78409util-linux@2.41.5-0+deb13u1no fix listed
LowGHSA-537c-gmf6-5ccfcryptography@44.0.248.0.1
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.14.13.15.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.5latest1 year agolatest05885346,583

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/osdfir-infrastructure/yeti.svg)](https://charts.stackradar.io/charts/osdfir-infrastructure/yeti)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.