StackRadar

artifact-hub Helm chart

softonic

Scored 14 Sept 2026

Artifact Hub is a web-based application that enables finding, installing, and publishing Cloud Native packages.

Latest 1.19.0 1 year agoapp version 1.19.0 1Artifact Hub

artifact-hub 1.19.0 deploys 8 container images: artifacthub/postgres, bitnami/kubectl, artifacthub/hub, aquasec/trivy and 4 more. Across the 7 measured, 1,381 findings — 2 critical, 23 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >= 1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

14,4912231841,172

1,381 findings over 7 of 8 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images
ImageTagVulnerabilitiesRadar Score
artifacthub/postgres×5latest01422222,676
bitnami/kubectl1.19—unmeasured
artifacthub/hubv1.19.003242012,209
aquasec/trivy0.43.1210502203,575
bitnami/minidebstretch00017
artifacthub/db-migratorv1.19.00326961,428
artifacthub/scannerv1.19.004272112,429
artifacthub/trackerv1.19.002152212,167

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

112 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDLA-3859-1systemd@247.3-7+deb11u4247.3-7+deb11u6
MediumGO-2024-2687stdlib@go1.21.81.21.9
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.24.00.52.0
MediumALPINE-CVE-2024-7264curl@8.1.2-r08.9.1-r0
MediumALPINE-CVE-2024-5535openssl@3.3.1-r03.3.1-r1
MediumDLA-3942-2openssl@1.1.1w-0+deb11u11.1.1w-0+deb11u2
MediumDSA-6113-1openssl@3.5.1-13.5.4-1~deb13u2
MediumDEBIAN-CVE-2019-1010022glibc@2.41-12no fix listed
MediumALPINE-CVE-2022-48174busybox@1.36.1-r01.36.1-r1
MediumDEBIAN-CVE-2017-17740openldap@2.6.10+dfsg-1no fix listed
MediumGHSA-wr6v-9f75-vh2ggithub.com/moby/buildkit@v0.11.60.12.5
MediumDEBIAN-CVE-2026-45447openssl@3.5.1-13.5.6-1~deb13u2
MediumDEBIAN-CVE-2018-20796glibc@2.41-12no fix listed
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.24.00.31.0
MediumDEBIAN-CVE-2015-3276openldap@2.6.10+dfsg-1no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.41-12no fix listed
MediumGHSA-4v98-7qmw-rqr8github.com/moby/buildkit@v0.11.60.12.5
MediumALPINE-CVE-2024-6197curl@8.1.2-r08.9.0-r0
MediumGHSA-8c26-wmh5-6g9vgolang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb830.0.0-20220314234659-1baeb1ce4c0b
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.11.00.17.0
MediumGHSA-449p-3h89-pw88github.com/go-git/go-git/v5@v5.7.05.11.0
MediumALPINE-CVE-2023-5363openssl@3.1.1-r13.1.4-r0
MediumALPINE-CVE-2024-45492expat@2.5.0-r12.6.3-r0
MediumGHSA-q64h-39hv-4cf7github.com/hashicorp/go-getter@v1.7.31.7.4
MediumALPINE-CVE-2024-4741openssl@3.1.1-r13.1.6-r0
MediumGHSA-v725-9546-7q7mgithub.com/go-git/go-git/v5@v5.12.05.13.0
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.64.01.79.3
MediumDEBIAN-CVE-2025-11187openssl@3.5.1-13.5.4-1~deb13u2
MediumALPINE-CVE-2024-45491expat@2.5.0-r12.6.3-r0
MediumGHSA-7jwh-3vrq-q3m8github.com/jackc/pgproto3/v2@v2.0.22.3.3
MediumGHSA-mrww-27vc-gghvgithub.com/jackc/pgx/v4@v4.7.14.18.2
MediumDEBIAN-CVE-2019-9192glibc@2.41-12no fix listed
MediumDEBIAN-CVE-2026-42010gnutls28@3.8.9-33.8.9-3+deb13u4
MediumALPINE-CVE-2023-3446openssl@3.1.1-r13.1.1-r3
MediumDEBIAN-CVE-2026-63073openssl@3.5.1-13.5.7-1~deb13u2
MediumDEBIAN-CVE-2018-5709krb5@1.21.3-5no fix listed
MediumALPINE-CVE-2024-28757expat@2.5.0-r12.6.2-r0
MediumALPINE-CVE-2023-52425expat@2.5.0-r12.6.0-r0
MediumDEBIAN-CVE-2018-6829libgcrypt20@1.11.0-7no fix listed
MediumGHSA-6wvf-f2vw-3425github.com/containers/image/v5@v5.29.05.29.3
MediumALPINE-CVE-2024-45490expat@2.5.0-r12.6.3-r0
MediumALPINE-CVE-2023-5678openssl@3.1.1-r13.1.4-r1
MediumALPINE-CVE-2025-9230openssl@3.3.1-r03.3.5-r0
MediumDEBIAN-CVE-2025-9230openssl@3.5.1-13.5.1-1+deb13u1
MediumGHSA-69ch-w2m2-3vjpgolang.org/x/text@v0.3.30.3.8
MediumALPINE-CVE-2024-32004git@2.40.1-r02.40.3-r0
MediumALPINE-CVE-2023-6129openssl@3.1.1-r13.1.4-r3
MediumALPINE-CVE-2024-12797openssl@3.3.1-r03.3.3-r0
MediumDEBIAN-CVE-2026-18798openssl@3.5.1-13.5.7-1~deb13u2
MediumALPINE-CVE-2025-9231openssl@3.3.1-r03.3.5-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.19.0latest1 year ago1.19.02231841,17214,491

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/softonic/artifact-hub.svg)](https://charts.stackradar.io/charts/softonic/artifact-hub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.