runwhen-local 0.6.18 Helm chart

Name: runwhen-local Helm chart 0.6.18: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

runwhen-contrib

Scored 24 Sept 2026

The RunWhen Local Helm Chart - Private runners powering Agentic AI

Version 0.6.18 todayapp version 0.12.2 0Artifact Hub

runwhen-local 0.6.18 deploys 3 container images: otel/opentelemetry-collector, us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner and ghcr.io/runwhen-contrib/runwhen-local. Across the 2 measured, 347 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.46.2, fixed in 1.0.1.

Radar Score

3,3760136309

347 findings over 2 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector	0.153.0	00034	227
us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner	2026-09-10.1	—	unmeasured
ghcr.io/runwhen-contrib/runwhen-local	0.12.2	0136275	3,149

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

328 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	GHSA-86qp-5c8j-p5mrKEV	starlette@0.46.2	1.0.1
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2026-48933	nodejs@26.10.0-1nodesource1	no fix listed
Medium	GHSA-2f96-g7mh-g2hx	gitpython@3.1.50	3.1.51
Medium	GHSA-38jv-5279-wg99	urllib3@2.3.0	2.6.3
Medium	DEBIAN-CVE-2022-24975	git@1:2.47.3-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2026-19931	curl@8.14.1-2+deb13u5	no fix listed
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2026-48618	nodejs@26.10.0-1nodesource1	no fix listed
Medium	DEBIAN-CVE-2018-5709	krb5@1.21.3-5+deb13u1	no fix listed
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Medium	DEBIAN-CVE-2026-18924	curl@8.14.1-2+deb13u5	no fix listed
Medium	PYSEC-2026-3952	gitpython@3.1.50	3.1.54
Medium	DEBIAN-CVE-2026-11856	curl@8.14.1-2+deb13u5	no fix listed
Medium	GHSA-956x-8gvw-wg5v	gitpython@3.1.50	3.1.51
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.8.9-3+deb13u4	no fix listed
Medium	DEBIAN-CVE-2026-10536	curl@8.14.1-2+deb13u5	no fix listed
Medium	DEBIAN-CVE-2026-28417	vim@2:9.1.1230-2	no fix listed
Medium	DEBIAN-CVE-2026-9079	curl@8.14.1-2+deb13u5	no fix listed
Medium	DEBIAN-CVE-2026-8924	curl@8.14.1-2+deb13u5	no fix listed
Medium	GHSA-2xpw-w6gg-jr37	urllib3@2.3.0	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@2.3.0	2.6.0
Medium	DEBIAN-CVE-2024-26461	krb5@1.21.3-5+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u4	no fix listed
Medium	GHSA-r9mr-m37c-5fr3	gitpython@3.1.50	3.1.54
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.5.0	0.5.1
Medium	DEBIAN-CVE-2026-66046	expat@2.8.3-1~deb13u1	no fix listed
Medium	GHSA-284h-m62q-gf8w	gitpython@3.1.50	3.1.59
Medium	GHSA-wvpp-8hx9-p66j	gitpython@3.1.50	3.1.58
Medium	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u5	no fix listed
Medium	DEBIAN-CVE-2026-8927	curl@8.14.1-2+deb13u5	no fix listed
Medium	DEBIAN-CVE-2024-52005	git@1:2.47.3-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u5	no fix listed
Low	GHSA-mh2q-q3fh-2475	go.opentelemetry.io/otel@v1.36.0	1.41.0
Low	GHSA-jm78-9fvv-mhgr	gitpython@3.1.50	3.1.58
Low	DEBIAN-CVE-2026-33412	vim@2:9.1.1230-2	no fix listed
Low	PYSEC-2026-3947	gitpython@3.1.50	3.1.51
Low	DEBIAN-CVE-2026-48930	nodejs@26.10.0-1nodesource1	no fix listed
Low	GHSA-9rj7-rf2p-w77r	gitpython@3.1.50	3.1.58
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-39881	vim@2:9.1.1230-2	no fix listed
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-7210	python3.13@3.13.5-2+deb13u5	no fix listed
Low	PYSEC-2026-3787	gitpython@3.1.50	3.1.59

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.18latest	today	0.12.2	0136309	3,376
0.6.17	13 days ago	0.12.0	0140351	3,866
0.6.16	14 days ago	0.12.0	0140351	3,866
0.6.15	21 days ago	0.11.13	0348425	4,670

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/runwhen-contrib/runwhen-local.svg)](https://charts.stackradar.io/charts/runwhen-contrib/runwhen-local)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.