lakehouse-stack 0.0.13 Helm chart

Name: lakehouse-stack Helm chart 0.0.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-lakehouse-stack

Scored 24 Oct 2026

Hardened open lakehouse: Trino queries Apache Iceberg tables cataloged by Nessie and stored in SeaweedFS over S3, wired together with generated S3 keys and a bucket created at install. All QuenchWorks images are nonroot, 0-CVE, pinned by digest and cosign-signed.

Version 0.0.13app version 1.0.0 (not verified against the render) 0Artifact Hub

lakehouse-stack 0.0.13 deploys 4 container images: ghcr.io/quenchworks/images/nessie, ghcr.io/quenchworks/images/trino, ghcr.io/quenchworks/images/seaweedfs and ghcr.io/quenchworks/images/rclone. Across them, 79 findings — 0 critical, 0 high. The highest contribution is GO-2026-6612 in stdlib go1.27.1, fixed in 1.27.2.

Radar Score

72100574

79 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/nessie	digest-pinned	0008	46
ghcr.io/quenchworks/images/trino×2	digest-pinned	00125	223
ghcr.io/quenchworks/images/seaweedfs	digest-pinned	00224	247
ghcr.io/quenchworks/images/rclone	digest-pinned	00217	205

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

34 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GO-2026-6612	stdlib@go1.27.1	1.27.2
Medium	GO-2026-6612	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6603	stdlib@go1.27.1	1.27.2
Low	GO-2026-6603	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6611	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6611	stdlib@go1.27.1	1.27.2
Low	GO-2026-6608	stdlib@go1.27.1	1.26.9
Low	GO-2026-6607	stdlib@go1.27.1	1.26.9
Low	GO-2026-6609	stdlib@go1.27.1	1.26.9
Low	GO-2026-6613	stdlib@go1.27.1	1.26.9
Low	GO-2026-6605	stdlib@go1.27.1	1.26.9
Low	GO-2026-6610	stdlib@go1.27.1	1.27.2
Low	GO-2026-6610	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6604	stdlib@go1.27.1	1.26.9
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-4v53-57pg-c464	lz4-java@1.11.1	1.11.2
Low	GHSA-6cx8-rjf8-pr8g	lz4-java@1.11.1	1.11.2
Low	GHSA-gm45-99xc-r7wv	lz4-java@1.11.1	1.11.4
Low	CGA-3p64-pj6v-586c	glibc-2.44@2.44-r8	no fix listed
Low	GHSA-mcr4-qmvw-px4g	lz4-java@1.11.1	1.11.4
Low	CGA-84qm-pxw8-f58f	glibc-2.44@2.44-r8	no fix listed
Low	GO-2026-6599	stdlib@go1.27.1	1.26.9
Low	GO-2026-6600	stdlib@go1.27.1	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6617	stdlib@go1.27.1	1.27.2
Low	CGA-2727-9j94-3x3p	glibc-2.44@2.44-r8	no fix listed
Low	CGA-3f6x-5fcp-398c	alsa-lib@1.2.16.1-r2	no fix listed
Low	GHSA-343h-94h5-c4wr	lz4-java@1.11.1	1.11.4
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r8	no fix listed
Low	CGA-8grr-r22f-r3r2	alsa-lib@1.2.16.1-r2	no fix listed
Low	CGA-cvgw-3cr4-v3w5	alsa-lib@1.2.16.1-r2	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed
Low	CGA-37wc-rr96-hm3f	glibc-2.44@2.44-r8	no fix listed
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.20latest	—	1.0.0	00026	144
0.0.18	—	1.0.0	00032	170
0.0.16	—	1.0.0	00029	158
0.0.13	—	1.0.0	00574	721
0.0.12	—	1.0.0	00462	581
0.0.10	—	1.0.0	00457	544
0.0.9	—	1.0.0	00025	142
0.0.7	—	1.0.0	00033	208
0.0.6	—	1.0.0	00035	228
0.0.4	—	1.0.0	00032	219

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-lakehouse-stack/lakehouse-stack.svg)](https://charts.stackradar.io/charts/quench-lakehouse-stack/lakehouse-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.