sciencebox Helm chart
scienceboxScored 14 Sept 2026
The chart to deploy and configure ScienceBox
Latest 0.0.7 3 years agoApp version not verified against the render 1Artifact Hub
sciencebox 0.0.7 deploys 17 container images: gitlab-registry.cern.ch/sciencebox/docker-images/cvmfs, gitlab-registry.cern.ch/dss/eos/eos-fusex, gitlab-registry.cern.ch/sciencebox/hotfixes/revad, library/busybox and 11 more. Across the 4 measured, 509 findings — 1 critical, 13 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
17 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| gitlab-registry.cern.ch/ | 2.9.0 | — | unmeasured |
| gitlab-registry.cern.ch/ | 5.0.31 | — | unmeasured |
| gitlab-registry.cern.ch/ | latest-20220815 | — | unmeasured |
| library/ | stable | 0000 | 0 |
| bitnami/ | 1.23.3-debian-11-r8 | — | unmeasured |
| cs3org/ | v1.19.0 | 0622177 | 2,330 |
| gitlab-registry.cern.ch/ | 1.20.0 | — | unmeasured |
| cs3org/ | v1.19.0-eos | — | not yet scanned |
| bitnami/ | 1.23.3-debian-11-r2 | — | unmeasured |
| gitlab-registry.cern.ch/ | v1.23 | — | unmeasured |
| jupyterhub/ | 4.5.0 | 14219 | 944 |
| gitlab-registry.cern.ch/ | 5.0.31 | — | unmeasured |
| gitlab-registry.cern.ch/ | stable | — | unmeasured |
| gitlab-registry.cern.ch/ | stable | — | unmeasured |
| osixia/ | 1.5.0 | 0349217 | 3,313 |
| bitnami/ | 10.6.11-debian-11-r12 | — | unmeasured |
| k8s.gcr.io/ | 3.5 | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
341 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2021-3711 | openssl | 1.1.1l-r0 |
| High | ALPINE-CVE-2022-0778 | openssl | 1.1.1n-r0 |
| High | ALPINE-CVE-2018-25032 | zlib | 1.2.12-r0 |
| High | ALPINE-CVE-2021-3712 | openssl | 1.1.1l-r0 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.0.0-20231218163308-9d2ee975ef9f |
| High | ALPINE-CVE-2022-37434 | zlib | 1.2.12-r2 |
| High | GHSA-qppj-fm5r-hxr3KEV | golang.org/ | 0.17.0 |
| High | GHSA-4v7x-pqxf-cx7m | golang.org/ | 0.23.0 |
| Medium | DSA-5169-1 | openssl | 1.1.1n-0+deb10u3 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | GHSA-8q59-q68h-6hv4 | pyyaml | 5.4 |
| Medium | DSA-4963-1 | openssl | 1.1.1d-0+deb10u7 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | GHSA-rprw-h62v-c2w7 | pyyaml | 5.1 |
| Medium | DSA-5139-1 | openssl | 1.1.1n-0+deb10u2 |
| Medium | ALPINE-CVE-2021-22945 | curl | 7.79.0-r0 |
| Medium | DLA-3449-1 | openssl | 1.1.1n-0+deb10u5 |
| Medium | DSA-5103-1 | openssl | 1.1.1d-0+deb10u8 |
| Medium | DSA-5140-1 | openldap | 2.4.47+dfsg-3+deb10u7 |
| Medium | DSA-4860-1 | openldap | 2.4.47+dfsg-3+deb10u6 |
| Medium | DSA-4875-1 | openssl | 1.1.1d-0+deb10u6 |
| Medium | DLA-3325-1 | openssl | 1.1.1n-0+deb10u4 |
| Medium | DSA-5111-1 | zlib | 1:1.2.11.dfsg-1+deb10u1 |
| Medium | GHSA-83g2-8m93-v3w7 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 |
| Medium | ALPINE-CVE-2022-28391 | busybox | 1.32.1-r8 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | DSA-5085-1 | expat | 2.2.6-2+deb10u3 |
| Medium | ALPINE-CVE-2021-36159 | apk-tools | 2.10.7-r0 |
| Medium | GHSA-vvpx-j8f3-3w6h | golang.org/ | 0.7.0 |
| Medium | ALPINE-CVE-2021-22946 | curl | 7.79.0-r0 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | GHSA-fwr7-v2mv-hh25 | async | 3.2.2 |
| Medium | DSA-4936-1 | libuv1 | 1.24.1-1+deb10u1 |
| Medium | DLA-3172-1 | libxml2 | 2.9.4+dfsg1-7+deb10u5 |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | GHSA-3vm4-22fp-5rfm | golang.org/ | 0.0.0-20201216223049-8b5274cf687f |
| Medium | ALPINE-CVE-2022-27775 | curl | 7.79.1-r1 |
| Medium | GHSA-74fj-2j2h-c42q | follow-redirects | 1.14.7 |
| Medium | ALPINE-CVE-2021-22922 | curl | 7.78.0-r0 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | ALPINE-CVE-2021-42380 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2022-22576 | curl | 7.79.1-r1 |
| Medium | DLA-3103-1 | zlib | 1:1.2.11.dfsg-1+deb10u2 |
| Medium | ALPINE-CVE-2022-27776 | curl | 7.79.1-r1 |
| Medium | ALPINE-CVE-2021-42379 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42381 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42385 | busybox | 1.31.1-r21 |
| Medium | DSA-5135-1 | postgresql-11 | 11.16-0+deb10u1 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/sciencebox/sciencebox)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.