llm-stack Helm chart

Name: llm-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-llm-stack

Scored 14 Oct 2026

Self-hosted LLM stack: Ollama runs the models, LiteLLM serves them through one OpenAI-compatible API with a generated key, and Qdrant stores embeddings for retrieval. The models you list are pulled at install. All QuenchWorks images are nonroot, 0-CVE, pinned by digest and cosign-signed.

Latest 0.0.25app version 1.0.0 (not verified against the render) 0Artifact Hub

llm-stack 0.0.25 deploys 3 container images: ghcr.io/quenchworks/images/litellm, ghcr.io/quenchworks/images/ollama and ghcr.io/quenchworks/images/qdrant. Across the 2 measured, 35 findings — 0 critical, 0 high. The highest contribution is RUSTSEC-2023-0071 in rsa 0.9.10, with no fix listed.

Radar Score

19600035

35 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/litellm	digest-pinned	00017	100
ghcr.io/quenchworks/images/ollama×3	digest-pinned	—	not yet scanned
ghcr.io/quenchworks/images/qdrant	digest-pinned	00018	96

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

22 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RUSTSEC-2023-0071	rsa@0.9.10	no fix listed
Low	CGA-8fx3-25f8-fh5x	python-3.13@3.13.16_git20261009-r0	no fix listed
Low	GHSA-36hh-v3qg-5jq4	pyo3@0.26.0	0.29.0
Low	CGA-3p64-pj6v-586c	glibc-2.44@2.44-r8	no fix listed
Low	RUSTSEC-2026-0340	quinn-proto@0.11.16	0.11.18
Low	RUSTSEC-2026-0341	quinn-proto@0.11.16	0.11.17
Low	CGA-g73w-6cxg-73cx	python-3.13@3.13.16_git20261009-r0	no fix listed
Low	CGA-84qm-pxw8-f58f	glibc-2.44@2.44-r8	no fix listed
Low	GHSA-chgr-c6px-7xpp	pyo3@0.26.0	0.29.0
Low	CGA-2727-9j94-3x3p	glibc-2.44@2.44-r8	no fix listed
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r8	no fix listed
Low	RUSTSEC-2021-0127	serde_cbor@0.11.2	no fix listed
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2025-0057	fxhash@0.2.1	no fix listed
Low	RUSTSEC-2025-0134	rustls-pemfile@2.2.0	no fix listed
Low	RUSTSEC-2025-0141	bincode@2.0.1	no fix listed
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	RUSTSEC-2026-0258	h2@0.3.27	0.4.16
Low	RUSTSEC-2026-0338	quinn-proto@0.11.16	0.11.18
Low	RUSTSEC-2026-0339	quinn-proto@0.11.16	0.11.17
Low	RUSTSEC-2026-0342	quinn-proto@0.11.16	0.11.17
Low	CGA-37wc-rr96-hm3f	glibc-2.44@2.44-r8	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.25latest	—	1.0.0	00035	196
0.0.23	—	1.0.0	00012	76
0.0.21	—	1.0.0	00014	84
0.0.19	—	1.0.0	00014	84
0.0.15	—	1.0.0	00014	84
0.0.13	—	1.0.0	00014	84
0.0.9	—	1.0.0	00017	109
0.0.8	—	1.0.0	00017	109
0.0.6	—	1.0.0	00015	100
0.0.4	—	1.0.0	00015	92
0.0.2	—	1.0.0	00015	92

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-llm-stack/llm-stack.svg)](https://charts.stackradar.io/charts/quench-llm-stack/llm-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.