tandoor Helm chart

Name: tandoor Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rtomik-helm-charts

Scored 14 Sept 2026

Tandoor Recipes - A recipe management application for Kubernetes

Latest 0.0.1 9 months agoapp version 2.3.5 0Artifact Hub

tandoor 0.0.1 deploys 1 container image: vabene1111/recipes. Across them, 364 findings — 2 critical, 7 high — 1 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.64.1, fixed in 1.84.0.

Radar Score

4,4992758296

364 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
vabene1111/recipes	2.3.5	2758296	4,499

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

296 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-76957	expat@2.7.3-r0	2.8.4-r0
Low	GHSA-966j-vmvw-g2g9	aiohttp@3.12.15	3.13.4
Low	GHSA-w853-jp5j-5j7f	filelock@3.20.0	3.20.1
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.20	2.7.0
Low	ALPINE-CVE-2026-56403	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0
Low	GHSA-fjrm-76x2-c4q4	jwcrypto@1.5.6	1.5.7
Low	PYSEC-2026-201	django@5.2.8	5.2.15
Low	GHSA-537c-gmf6-5ccf	cryptography@45.0.5	48.0.1
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@2.0.0	3.2.1
Low	ALPINE-CVE-2026-45446	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-58045	nodejs@22.16.0-r2	22.23.2-r0
Low	ALPINE-CVE-2026-56412	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-14672	postgresql17@17.7-r0	17.11-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	PYSEC-2026-56	django-allauth@65.9.0	65.14.1
Low	ALPINE-CVE-2026-32777	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2025-55132	nodejs@22.16.0-r2	22.22.0-r0
Low	ALPINE-CVE-2026-56847	nodejs@22.16.0-r2	22.23.2-r0
Low	ALPINE-CVE-2026-48928	nodejs@22.16.0-r2	22.23.0-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.3-r0	2.8.2-r0
Low	GHSA-27jp-wm6q-gp25	sqlparse@0.5.3	0.5.4
Low	GHSA-3496-9g83-7v6x	sqlparse@0.5.3	0.6.0
Low	ALPINE-CVE-2025-15469	openssl@3.5.4-r0	3.5.5-r0
Low	PYSEC-2026-2275	requests@2.32.4	2.33.0
Low	ALPINE-CVE-2026-42768	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-32778	expat@2.7.3-r0	2.7.5-r0
Low	GHSA-g47c-3xmw-q6m2	djangorestframework@3.16.1	3.17.2
Low	ALPINE-CVE-2026-32776	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-14663	postgresql17@17.7-r0	17.11-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r10	1.2.5-r11
Low	GHSA-qhmc-3mvr-f2j4	django-allauth@65.9.0	65.13.0
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.2	6.1.3
Low	GHSA-8m3c-c723-h4p4	django-allauth@65.9.0	65.13.0
Low	ALPINE-CVE-2026-6472	postgresql17@17.7-r0	17.10-r0
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-2003	postgresql17@17.7-r0	17.8-r0
Low	GHSA-m959-cc7f-wv43	cryptography@45.0.5	46.0.6
Low	GHSA-gj48-438w-jh9v	bleach@6.2.0	6.4.0
Low	GHSA-5xmw-vc9v-4wf2	pillow@11.3.0	12.2.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.1latest	9 months ago	2.3.5	2758296	4,499

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rtomik-helm-charts/tandoor.svg)](https://charts.stackradar.io/charts/rtomik-helm-charts/tandoor)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.