artifact-hub Helm chart

Name: artifact-hub Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

softonic

Scored 14 Sept 2026

Artifact Hub is a web-based application that enables finding, installing, and publishing Cloud Native packages.

Latest 1.19.0 1 year agoapp version 1.19.0 1Artifact Hub

artifact-hub 1.19.0 deploys 8 container images: artifacthub/postgres, bitnami/kubectl, artifacthub/hub, aquasec/trivy and 4 more. Across the 7 measured, 1,381 findings — 2 critical, 23 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >= 1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

14,4912231841,172

1,381 findings over 7 of 8 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
artifacthub/postgres×5	latest	0142222	2,676
bitnami/kubectl	1.19	—	unmeasured
artifacthub/hub	v1.19.0	0324201	2,209
aquasec/trivy	0.43.1	21050220	3,575
bitnami/minideb	stretch	0001	7
artifacthub/db-migrator	v1.19.0	032696	1,428
artifacthub/scanner	v1.19.0	0427211	2,429
artifacthub/tracker	v1.19.0	0215221	2,167

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

606 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4986	stdlib@go1.22.4	1.25.10
Low	GO-2026-4918	stdlib@go1.22.4	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.26.0	0.53.0
Low	GO-2026-4337	stdlib@go1.22.4	1.24.13
Low	DEBIAN-CVE-2026-4438	glibc@2.41-12	2.41-12+deb13u3
Low	GHSA-44p7-9xx4-hf2g	golang.org/x/image@v0.10.0	0.38.0
Low	GHSA-88jx-383q-w4qc	github.com/sigstore/cosign@v1.13.6	no fix listed
Low	DEBIAN-CVE-2023-31438	systemd@257.8-1~deb13u2	no fix listed
Low	DEBIAN-CVE-2026-1757	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	GHSA-8rc5-4fr6-64pw	github.com/aquasecurity/trivy@v0.52.2	0.72.0
Low	GHSA-crhj-59gh-8x96	github.com/go-git/go-git/v5@v5.12.0	5.19.1
Low	GO-2026-4601	stdlib@go1.22.4	1.25.8
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u4	3.7.1-5+deb11u6
Low	DEBIAN-CVE-2026-78410	util-linux@2.41-5	no fix listed
Low	DEBIAN-CVE-2026-89161	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GO-2026-5026	stdlib@go1.22.4	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.26.0	0.55.0
Low	DEBIAN-CVE-2025-14104	util-linux@2.41-5	2.41.3-1
Low	DEBIAN-CVE-2026-86142	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-42014	gnutls28@3.8.9-3	3.8.9-3+deb13u4
Low	GO-2025-3420	stdlib@go1.22.4	1.22.11
Low	GO-2026-4342	stdlib@go1.22.4	1.24.12
Low	DEBIAN-CVE-2026-4105	systemd@257.8-1~deb13u2	257.13-1~deb13u1
Low	GO-2024-2598	stdlib@go1.19.10	1.21.8
Low	GO-2025-3751	stdlib@go1.22.4	1.23.10
Low	DEBIAN-CVE-2026-78409	util-linux@2.41-5	no fix listed
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u4	3.7.1-5+deb11u9
Low	ALPINE-CVE-2024-13176	openssl@3.3.1-r0	3.3.2-r2
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.64.0	1.82.2
Low	GHSA-9763-4f94-gfch	github.com/cloudflare/circl@v1.3.3	1.3.7
Low	GHSA-m425-mq94-257g	google.golang.org/grpc@v1.55.0	1.56.3
Low	DEBIAN-CVE-2026-45446	openssl@3.5.1-1	3.5.6-1~deb13u2
Low	GO-2023-2181	github.com/sigstore/cosign@v1.13.6	no fix listed
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e
Low	GHSA-vrw8-fxc6-2r93	github.com/go-chi/chi/v5@v5.0.14	5.2.2
Low	GO-2025-4116	golang.org/x/crypto@v0.24.0	0.43.0
Low	GO-2026-4870	stdlib@go1.22.4	1.25.9
Low	GO-2025-4009	stdlib@go1.22.4	1.24.8
Low	DEBIAN-CVE-2026-86138	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	no fix listed
Low	GO-2026-4947	stdlib@go1.22.4	1.25.9
Low	DLA-4176-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u3
Low	DEBIAN-CVE-2026-86143	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1	no fix listed
Low	GO-2026-5061	golang.org/x/image@v0.10.0	0.43.0
Low	GO-2026-5062	golang.org/x/image@v0.10.0	0.43.0
Low	GHSA-rg2x-37c3-w2rh	github.com/docker/docker@v26.1.3+incompatible	no fix listed
Low	GO-2025-4006	stdlib@go1.22.4	1.24.8
Low	DLA-3930-1	libsepol@3.1-1	3.1-1+deb11u1
Low	GO-2026-5037	stdlib@go1.22.4	1.25.11
Low	DEBIAN-CVE-2026-40225	systemd@257.8-1~deb13u2	257.13-1~deb13u1
Low	GO-2026-4971	stdlib@go1.22.4	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.19.0latest	1 year ago	1.19.0	2231841,172	14,491

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/softonic/artifact-hub.svg)](https://charts.stackradar.io/charts/softonic/artifact-hub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.