ml-stack 0.0.13 Helm chart

Name: ml-stack Helm chart 0.0.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-ml-stack

Scored 21 Oct 2026

Hardened machine-learning stack: JupyterHub notebooks, the MLflow tracking server and model registry, and Label Studio for data labeling, wired together in one install. All QuenchWorks images are nonroot, 0-CVE, pinned by digest and cosign-signed.

Version 0.0.13app version 1.0.0 (not verified against the render) 0Artifact Hub

ml-stack 0.0.13 deploys 5 container images: ghcr.io/quenchworks/images/jupyterhub, ghcr.io/quenchworks/images/configurable-http-proxy, ghcr.io/quenchworks/images/label-studio, ghcr.io/quenchworks/images/mlflow and 1 more. Across them, 48 findings — 0 critical, 0 high. The highest contribution is CGA-2mrq-cv8h-r8wg in grpc-1.81 1.81.1-r7, with no fix listed.

Radar Score

32100245

48 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/jupyterhub	digest-pinned	0007	46
ghcr.io/quenchworks/images/configurable-http-proxy	digest-pinned	0007	38
ghcr.io/quenchworks/images/label-studio	digest-pinned	00211	106
ghcr.io/quenchworks/images/mlflow	digest-pinned	00011	77
ghcr.io/quenchworks/images/postgresql	digest-pinned	0009	54

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

20 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	CGA-2mrq-cv8h-r8wg	grpc-1.81@1.81.1-r7	no fix listed
Medium	CGA-qvpw-v4vp-864h	grpc-1.81@1.81.1-r7	no fix listed
Low	CGA-4mf7-96v4-52mj	python-3.12@3.12.15-r2	no fix listed
Low	GHSA-8mgp-746c-j5xp	nltk@3.10.3	no fix listed
Low	CGA-232h-86ff-rxm7	python-3.12@3.12.15-r2	no fix listed
Low	CGA-3gxv-x235-8w32	grpc-1.81@1.81.1-r7	no fix listed
Low	CGA-3h86-qrh3-64w8	python-3.12@3.12.15-r2	no fix listed
Low	CGA-8fx3-25f8-fh5x	python-3.13@3.13.16_git20261002-r1	no fix listed
Low	CGA-fv7m-5pp8-x296	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-g32q-4xf3-638m	python-3.12@3.12.15-r2	no fix listed
Low	CGA-3ghx-j4h4-2hj2	python-3.12@3.12.15-r2	no fix listed
Low	CGA-g73w-6cxg-73cx	python-3.13@3.13.16_git20261002-r1	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r7	no fix listed
Low	CGA-cvw6-9pj6-fx5j	openssl@3.6.5-r1	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.6.5-r1	no fix listed
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-477g-5pph-75mj	python-3.12@3.12.15-r2	no fix listed
None	CGA-2j8v-487x-wgg8	python-3.12@3.12.15-r2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.21latest	—	1.0.0	00257	455
0.0.19	—	1.0.0	00255	442
0.0.18	—	1.0.0	00253	429
0.0.17	—	1.0.0	00253	429
0.0.13	—	1.0.0	00245	321
0.0.11	—	1.0.0	00247	330
0.0.9	—	1.0.0	00262	449
0.0.8	—	1.0.0	00263	456
0.0.5	—	1.0.0	00270	528
0.0.3	—	1.0.0	00263	468
0.0.2	—	1.0.0	00263	468

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-ml-stack/ml-stack.svg)](https://charts.stackradar.io/charts/quench-ml-stack/ml-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.