tandoor Helm chart

Name: tandoor Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rtomik-helm-charts

Scored 14 Sept 2026

Tandoor Recipes - A recipe management application for Kubernetes

Latest 0.0.1 9 months agoapp version 2.3.5 0Artifact Hub

tandoor 0.0.1 deploys 1 container image: vabene1111/recipes. Across them, 364 findings — 2 critical, 7 high — 1 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.64.1, fixed in 1.84.0.

Radar Score

4,4992758296

364 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
vabene1111/recipes	2.3.5	2758296	4,499

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

364 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-g84x-mcqj-x9qq	aiohttp@3.12.15	3.13.3
Low	GHSA-vjc4-5qp5-m44j	pillow@11.3.0	12.3.0
Low	ALPINE-CVE-2026-63072	openssl@3.5.4-r0	3.5.8-r0
Low	ALPINE-CVE-2026-56434	nginx@1.28.0-r3	1.28.3-r6
Low	GHSA-jj3x-wxrx-4x23	aiohttp@3.12.15	3.13.3
Low	ALPINE-CVE-2026-45445	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-6637	postgresql17@17.7-r0	17.10-r0
Low	ALPINE-CVE-2026-18408	postgresql17@17.7-r0	17.11-r0
Low	GHSA-xj96-63gp-2gmr	pillow@11.3.0	12.3.0
Low	GHSA-2mcm-79hx-8fxw	django@5.2.8	5.2.11
Low	GHSA-qffp-2rhf-9h96	tar@7.4.3	7.5.10
Low	ALPINE-CVE-2026-48937	nodejs@22.16.0-r2	22.23.0-r0
Low	GHSA-5mf9-h53q-7mhq	django@5.2.8	5.2.13
Low	GHSA-6mq8-rvhq-8wgg	aiohttp@3.12.15	3.13.3
Low	GHSA-5wmx-573v-2qwq	markdown@3.7	3.8.1
Low	GHSA-cfh3-3jmp-rvhc	pillow@11.3.0	12.1.1
Low	ALPINE-CVE-2026-15741	postgresql17@17.7-r0	17.11-r0
Low	GHSA-23hp-3jrh-7fpw	tar@7.4.3	7.5.19
Low	ALPINE-CVE-2026-76641	expat@2.7.3-r0	2.8.4-r0
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	ALPINE-CVE-2025-69419	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.4-r0	3.5.8-r0
Low	ALPINE-CVE-2026-6475	postgresql17@17.7-r0	17.10-r0
Low	GHSA-2wc2-fm75-p42x	soupsieve@2.8	2.8.4
Low	GHSA-836r-79rf-4m37	soupsieve@2.8	2.8.4
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	ALPINE-CVE-2026-42766	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-63hw-fmq6-xxg2	aiohttp@3.12.15	3.14.1
Low	ALPINE-CVE-2026-56846	nodejs@22.16.0-r2	22.23.2-r0
Low	GHSA-8qq5-rm4j-mr97	tar@7.4.3	7.5.3
Low	ALPINE-CVE-2026-56848	nodejs@22.16.0-r2	22.23.2-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.4-r0	3.5.8-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-xcgm-r5h9-7989	aiohttp@3.12.15	3.14.1
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.5	9.0.7
Low	ALPINE-CVE-2026-6479	postgresql17@17.7-r0	17.10-r0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	ALPINE-CVE-2026-1642	nginx@1.28.0-r3	1.28.2-r0
Low	ALPINE-CVE-2026-45186	expat@2.7.3-r0	2.8.1-r0
Low	GHSA-73rr-hh4g-fpgx	diff@7.0.0	8.0.3
Low	GHSA-r6ph-v2qm-q3c2	cryptography@45.0.5	46.0.5
Low	ALPINE-CVE-2026-33630	c-ares@1.34.5-r0	1.34.8-r0
Low	ALPINE-CVE-2026-6464	postgresql17@17.7-r0	17.11-r0
Low	PYSEC-2026-2095	aiohttp@3.12.15	3.13.4
Low	GHSA-mvfq-ggxm-9mc5	django@5.2.8	5.2.13
Low	GHSA-4fvr-rgm6-gqmc	aiohttp@3.12.15	3.14.1
Low	GHSA-8x88-c5mf-7j5w	tar@7.4.3	7.5.18
Low	ALPINE-CVE-2026-42934	nginx@1.28.0-r3	1.28.3-r1
Low	ALPINE-CVE-2026-48615	nodejs@22.16.0-r2	22.23.0-r0
Low	GHSA-45hq-cxwh-f6vc	pillow@11.3.0	12.3.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.1latest	9 months ago	2.3.5	2758296	4,499

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rtomik-helm-charts/tandoor.svg)](https://charts.stackradar.io/charts/rtomik-helm-charts/tandoor)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.