StackRadar

codegen 1.0.0 Helm chart

test-opea

Scored 14 Sept 2026

The Helm chart to deploy CodeGen

Version 1.0.0 1 year agoapp version v1.0 0Artifact Hub

codegen 1.0.0 deploys 5 container images: opea/codegen-ui, opea/llm-tgi, ghcr.io/huggingface/text-generation-inference, opea/codegen and 1 more. Across the 4 measured, 2,498 findings — 13 critical, 18 high — 8 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-27363 in freetype 2.12.1+dfsg-5, fixed in 2.12.1+dfsg-5+deb12u4.

Radar Score

28,81413184392,021

2,498 findings over 4 of 5 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
opea/codegen-ui1.081119697613,728
opea/llm-tgi1.012723384,720
ghcr.io/huggingface/text-generation-inferencesha-e4201f4-intel-cpu—not yet scanned
opea/codegen1.023853615,327
library/nginx1.27.122863465,039

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,342 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2025-57807imagemagick@8:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u4
LowDEBIAN-CVE-2026-58013glib2.0@2.74.6-2no fix listed
LowDEBIAN-CVE-2018-20673binutils@2.40-2no fix listed
LowDEBIAN-CVE-2025-48174libavif@0.11.1-10.11.1-1+deb12u1
LowDEBIAN-CVE-2026-58010glib2.0@2.74.6-2no fix listed
LowDEBIAN-CVE-2026-58012glib2.0@2.74.6-2no fix listed
LowDEBIAN-CVE-2025-8194python3.11@3.11.2-63.11.2-6+deb12u7
LowDEBIAN-CVE-2026-15308python3.11@3.11.2-6no fix listed
LowDEBIAN-CVE-2016-8678imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1no fix listed
LowDEBIAN-CVE-2025-68618imagemagick@8:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u5
LowDEBIAN-CVE-2025-32415libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
LowDEBIAN-CVE-2026-0915glibc@2.36-9+deb12u42.36-9+deb12u14
LowDEBIAN-CVE-2025-4802glibc@2.36-9+deb12u42.36-9+deb12u11
LowDEBIAN-CVE-2023-50495ncurses@6.4-4no fix listed
LowDEBIAN-CVE-2026-58014glib2.0@2.74.6-2no fix listed
LowDEBIAN-CVE-2026-34191apr-util@1.6.3-11.6.3-1+deb12u1
LowGHSA-rgw5-rvv9-x895brace-expansion@2.0.12.1.4
LowDEBIAN-CVE-2026-4775tiff@4.5.0-6+deb12u14.5.0-6+deb12u4
LowDEBIAN-CVE-2026-25898imagemagick@8:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u7
LowGHSA-6jhg-hg63-jvvfaiohttp@3.10.53.13.3
LowGHSA-g3cq-j2xw-wf74aiohttp@3.10.53.14.1
LowDEBIAN-CVE-2026-13608curl@7.88.1-10+deb12u5no fix listed
LowDEBIAN-CVE-2026-5773curl@7.88.1-10+deb12u57.88.1-10+deb12u15
LowGHSA-g84x-mcqj-x9qqaiohttp@3.10.53.13.3
LowGHSA-vjc4-5qp5-m44jpillow@10.4.012.3.0
LowDEBIAN-CVE-2026-63072openssl@3.0.11-1~deb12u2no fix listed
LowDEBIAN-CVE-2026-40355krb5@1.20.1-2+deb12u11.20.1-2+deb12u5
LowDEBIAN-CVE-2026-56434nginx@1.27.1-1~bookwormno fix listed
LowDEBIAN-CVE-2026-25968imagemagick@8:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u7
LowGHSA-f5x3-32g6-xq36tar@6.2.06.2.1
LowGHSA-jj3x-wxrx-4x23aiohttp@3.10.53.13.3
LowDEBIAN-CVE-2026-40356krb5@1.20.1-2+deb12u11.20.1-2+deb12u5
LowDEBIAN-CVE-2023-29659libheif@1.15.1-11.15.1-1+deb12u1
LowDEBIAN-CVE-2026-45445openssl@3.0.11-1~deb12u23.0.20-1~deb12u2
LowDEBIAN-CVE-2026-63383libevent@2.1.12-stable-8no fix listed
LowDEBIAN-CVE-2026-63384libevent@2.1.12-stable-8no fix listed
LowDEBIAN-CVE-2026-85091zlib@1:1.2.13.dfsg-1no fix listed
LowDEBIAN-CVE-2026-6637postgresql-15@15.6-0+deb12u115.18-0+deb12u1
LowDEBIAN-CVE-2026-25989imagemagick@8:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u7
LowDEBIAN-CVE-2021-31879wget@1.21.3-1+b2no fix listed
LowGHSA-859w-5945-r5v3vite@4.5.54.5.14
LowDEBIAN-CVE-2024-33600glibc@2.36-9+deb12u42.36-9+deb12u7
LowDEBIAN-CVE-2026-60002openssh@1:9.2p1-2+deb12u2no fix listed
LowGHSA-6g55-p6wh-862qpostcss@8.4.478.5.12
LowDEBIAN-CVE-2026-18408postgresql-15@15.6-0+deb12u115.19-0+deb12u1
LowDEBIAN-CVE-2025-69204imagemagick@8:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u5
LowDEBIAN-CVE-2023-1972binutils@2.40-2no fix listed
LowPYSEC-2025-40transformers@4.44.24.49.0
LowDEBIAN-CVE-2026-11972python3.11@3.11.2-6no fix listed
LowGHSA-xj96-63gp-2gmrpillow@10.4.012.3.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest1 year agov1.013184392,02128,814

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/test-opea/codegen.svg)](https://charts.stackradar.io/charts/test-opea/codegen)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.