tandoor Helm chart

Name: tandoor Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rtomik-helm-charts

Scored 14 Sept 2026

Tandoor Recipes - A recipe management application for Kubernetes

Latest 0.0.1 9 months agoapp version 2.3.5 0Artifact Hub

tandoor 0.0.1 deploys 1 container image: vabene1111/recipes. Across them, 364 findings — 2 critical, 7 high — 1 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.64.1, fixed in 1.84.0.

Radar Score

4,4992758296

364 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
vabene1111/recipes	2.3.5	2758296	4,499

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

364 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-14668	postgresql17@17.7-r0	17.11-r0
Low	GHSA-5x94-69rx-g8h2	pillow@11.3.0	12.3.0
Low	GHSA-phj9-mv4w-65pm	pillow@11.3.0	12.3.0
Low	ALPINE-CVE-2026-48617	nodejs@22.16.0-r2	22.23.0-r0
Low	GHSA-f2ff-p2ww-7p4p	sqlparse@0.5.3	0.6.0
Low	GHSA-pwgv-4x5q-6m9f	sqlparse@0.5.3	0.6.0
Low	GHSA-8v84-f9pq-wr9x	pillow@11.3.0	12.3.0
Low	ALPINE-CVE-2026-40701	nginx@1.28.0-r3	1.28.3-r1
Low	ALPINE-CVE-2026-48142	nginx@1.28.0-r3	1.28.3-r4
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.2	4.0.4
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	GHSA-jwv3-5hgf-82ww	cryptography@45.0.5	49.0.0
Low	GHSA-wf93-45jw-7689	pip@25.3	26.1.2
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	GHSA-r6q2-hw4h-h46w	tar@7.4.3	7.5.4
Low	GHSA-6r8x-57c9-28j4	pillow@11.3.0	12.3.0
Low	GHSA-9hw9-ch79-4vh6	pillow@11.3.0	12.3.0
Low	GHSA-jjj6-mw9f-p565	pillow@11.3.0	12.3.0
Low	ALPINE-CVE-2026-14679	postgresql17@17.7-r0	17.11-r0
Low	GHSA-r292-9mhp-454m	tar@7.4.3	7.5.21
Low	GHSA-xgmm-8j9v-c9wx	pyjwt@2.10.1	2.13.0
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-6478	postgresql17@17.7-r0	17.10-r0
Low	PYSEC-2026-50	django@5.2.8	5.2.14
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.1	0.6.4
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.0.0	21.5.1
Low	GHSA-w2fm-2cpv-w7v5	aiohttp@3.12.15	3.13.4
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.6.1	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.6.1	0.6.4
Low	GHSA-9ppj-qmqm-q256	tar@7.4.3	7.5.11
Low	GHSA-vfmq-68hx-4jfw	lxml@6.0.2	6.1.0
Low	GHSA-4jhm-jv67-739f	lxml-html-clean@0.4.3	0.4.5
Low	GHSA-6426-9fv3-65x8	django@5.2.8	5.2.11
Low	PYSEC-2026-2106	aiohttp@3.12.15	3.14.0
Low	GHSA-3wq7-rqq7-wx6j	aiohttp@3.12.15	3.13.4
Low	ALPINE-CVE-2026-6638	postgresql17@17.7-r0	17.10-r0
Low	ALPINE-CVE-2026-40460	nginx@1.28.0-r3	1.28.3-r1
Low	GHSA-fh55-r93g-j68g	aiohttp@3.12.15	3.13.3
Low	ALPINE-CVE-2026-76956	expat@2.7.3-r0	2.8.4-r0
Low	ALPINE-CVE-2026-2673	openssl@3.5.4-r0	3.5.6-r0
Low	PYSEC-2026-2113	aiohttp@3.12.15	3.14.1
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	GHSA-54jq-c3m8-4m76	aiohttp@3.12.15	3.13.3
Low	GHSA-prg7-hcfm-mfcr	sqlparse@0.5.3	0.6.0
Low	PYSEC-2026-2112	aiohttp@3.12.15	3.14.1
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.45.1	0.46.2
Low	ALPINE-CVE-2026-42767	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.14.1-r2	8.14.1-r3
Low	GHSA-752w-5fwx-jx9f	pyjwt@2.10.1	2.12.0
Low	PYSEC-2026-237	aiohttp@3.12.15	3.14.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.1latest	9 months ago	2.3.5	2758296	4,499

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rtomik-helm-charts/tandoor.svg)](https://charts.stackradar.io/charts/rtomik-helm-charts/tandoor)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.