supabase 1.0.0 Helm chart
tokens-studioVerified publisherScored 15 Sept 2026
The open source Firebase alternative.
Version 1.0.0 1 year agoApp version not verified against the render 7Artifact Hub
supabase 1.0.0 deploys 14 container images: library/postgres, supabase/logflare, supabase/gotrue, supabase/postgres and 10 more. Across the 12 measured, 2,081 findings — 4 critical, 18 high — 1 on CISA KEV. The highest contribution is GHSA-f82v-jwr5-mffw in next 14.2.13, fixed in 14.2.25.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
14 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 15-alpine | 00456 | 494 |
| supabase/ | 1.8.12 | 00330 | 331 |
| supabase/ | v2.163.0 | 0120130 | 1,442 |
| supabase/ | 15.6.1.133 | — | not yet scanned |
| supabase/ | v1.59.0 | 0138150 | 2,141 |
| darthsim/ | v3.26 | 0134245 | 2,628 |
| library/ | 3.8.0 | 0338124 | 1,944 |
| supabase/ | v0.84.2 | 0142189 | 2,610 |
| bitnami/ | 1.24.0 | — | unmeasured |
| supabase/ | v2.33.8 | 2253203 | 3,187 |
| postgrest/ | v12.2.3 | 0000 | 0 |
| supabase/ | v1.12.0 | 0336120 | 2,033 |
| supabase/ | 20241021-9f9b083 | 2588426 | 6,055 |
| timberio/ | 0.42.0-alpine | 011117 | 398 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
865 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-4519 | python3.11 | 3.11.2-6+deb12u8 |
| Low | DEBIAN-CVE-2026-90803 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-90804 | binutils | no fix listed |
| Low | GHSA-xhjh-pmcv-23jw | axios | 1.15.1 |
| Low | GHSA-vfv6-92ff-j949 | next | 15.5.16 |
| Low | GHSA-38r7-794h-5758 | webpack | 5.104.0 |
| Low | GHSA-8fgc-7cc6-rx7x | webpack | 5.104.1 |
| Low | DEBIAN-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | ALPINE-CVE-2026-41080 | expat | 2.8.1-r0 |
| Low | DEBIAN-CVE-2026-41080 | expat | no fix listed |
| Low | GO-2026-5775 | github.com/ | 5.3.0 |
| Low | DEBIAN-CVE-2025-1181 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-90802 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-1180 | binutils | no fix listed |
| Low | ALPINE-CVE-2025-69418 | openssl | 3.3.6-r0 |
| Low | DEBIAN-CVE-2025-69418 | openssl | 3.0.18-1~deb12u2 |
| Low | DEBIAN-CVE-2007-5686 | shadow | no fix listed |
| Low | DEBIAN-CVE-2025-1795 | python3.11 | 3.11.2-6+deb12u6 |
| Low | DEBIAN-CVE-2025-1151 | binutils | no fix listed |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | DEBIAN-CVE-2025-1182 | binutils | no fix listed |
| Low | GO-2026-4962 | golang.org/ | 0.39.0 |
| Low | UBUNTU-CVE-2026-59846 | libssh | 0.9.6-2ubuntu0.22.04.8 |
| Low | GO-2026-6179 | golang.org/ | 0.40.0 |
| Low | DEBIAN-CVE-2026-18477 | tar | no fix listed |
| Low | DLA-3972-1 | tzdata | 2024b-0+deb11u1 |
| Low | DLA-4085-1 | tzdata | 2025a-0+deb11u1 |
| Low | DLA-4105-1 | tzdata | 2025b-0+deb11u1 |
| Low | DLA-4213-1 | curl | 7.74.0-1.3+deb11u15 |
| Low | DLA-4403-1 | tzdata | 2025b-0+deb11u2 |
| Low | DLA-4485-1 | ca-certificates | 20230311+deb12u1~deb11u1 |
| Low | GO-2026-5841 | github.com/ | 1.18.7 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6061 | google.golang.org/ | 1.82.1 |
| Low | USN-7412-2 | gnupg2 | 2.4.4-2ubuntu17.3 |
| Low | USN-8091-1 | util-linux | 2.39.3-9ubuntu6.5 |
| Low | USN-8436-1 | ca-certificates | 20260601~24.04.1 |
| Low | USN-8625-1 | openssl | 3.0.13-0ubuntu3.12 |
| Low | USN-8688-1 | pam | 1.5.3-5ubuntu5.7 |
| Low | ALPINE-CVE-2025-46394 | busybox | 1.36.1-r31 |
| Low | DEBIAN-CVE-2026-40228 | systemd | no fix listed |
| Low | GHSA-pxg6-pf52-xh8x | cookie | 0.7.0 |
| Low | DEBIAN-CVE-2025-13462 | python3.11 | 3.11.2-6+deb12u8 |
| Low | GHSA-6475-r3vj-m8vf | @smithy/ | 4.4.0 |
| Low | GHSA-r5w7-f542-q2j4 | @sentry/ | 8.49.0 |
| Low | GHSA-r5w7-f542-q2j4 | @sentry/ | 8.49.0 |
| Low | GHSA-j88v-2chj-qfwx | github.com/ | no fix listed |
| Low | GHSA-vpq2-c234-7xj6 | @tootallnate/ | 2.0.1 |
| Low | DEBIAN-CVE-2026-57062 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2026-15310 | python3.11 | no fix listed |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/tokens-studio/supabase)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.