supabase Helm chart
tokens-studioVerified publisherScored 14 Sept 2026
The open source Firebase alternative.
Latest 1.0.0 1 year agoApp version not verified against the render 7Artifact Hub
supabase 1.0.0 deploys 14 container images: library/postgres, supabase/logflare, supabase/gotrue, supabase/postgres and 10 more. Across the 12 measured, 2,064 findings — 6 critical, 16 high — 1 on CISA KEV. The highest contribution is GHSA-f82v-jwr5-mffw in next 14.2.13, fixed in 14.2.25.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
14 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 15-alpine | 00456 | 493 |
| supabase/ | 1.8.12 | 00330 | 331 |
| supabase/ | v2.163.0 | 0120130 | 1,442 |
| supabase/ | 15.6.1.133 | — | not yet scanned |
| supabase/ | v1.59.0 | 0138150 | 2,129 |
| darthsim/ | v3.26 | 0134238 | 2,589 |
| library/ | 3.8.0 | 0338117 | 1,905 |
| supabase/ | v0.84.2 | 0142189 | 2,598 |
| bitnami/ | 1.24.0 | — | unmeasured |
| supabase/ | v2.33.8 | 2253203 | 3,175 |
| postgrest/ | v12.2.3 | 0000 | 0 |
| supabase/ | v1.12.0 | 1236120 | 2,034 |
| supabase/ | 20241021-9f9b083 | 3488423 | 6,029 |
| timberio/ | 0.42.0-alpine | 011117 | 398 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
861 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-6846 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-82474 | sudo | no fix listed |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | DEBIAN-CVE-2025-15079 | curl | no fix listed |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | DEBIAN-CVE-2025-12781 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2025-15366 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2026-87910 | python3.11 | no fix listed |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | DEBIAN-CVE-2026-6429 | curl | no fix listed |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2024-22365 | pam | 1.5.2-6+deb12u2 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | DEBIAN-CVE-2026-22796 | openssl | 3.0.18-1~deb12u2 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2025-10148 | curl | 7.88.1-10+deb12u15 |
| Low | DEBIAN-CVE-2024-26462 | krb5 | 1.20.1-2+deb12u3 |
| Low | GHSA-68g3-v927-f742 | next | 15.5.21 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | DEBIAN-CVE-2026-1965 | curl | no fix listed |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2025-3576 | krb5 | 1.20.1-2+deb12u4 |
| Low | DEBIAN-CVE-2026-4878 | libcap2 | 1:2.66-4+deb12u3 |
| Low | UBUNTU-CVE-2025-68973 | gnupg2 | 2.4.4-2ubuntu17.4 |
| Low | DEBIAN-CVE-2026-7168 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | DEBIAN-CVE-2024-50349 | git | 1:2.39.5-0+deb12u2 |
| Low | DEBIAN-CVE-2025-15367 | python3.11 | no fix listed |
| Low | UBUNTU-CVE-2026-59847 | libssh | 0.9.6-2ubuntu0.22.04.8 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | DSA-5850-1 | git | 1:2.39.5-0+deb12u2 |
| Low | DEBIAN-CVE-2026-3783 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-w9j2-pvgh-6h63 | axios | 1.15.1 |
| Low | DEBIAN-CVE-2026-4873 | curl | no fix listed |
| Low | ALPINE-CVE-2026-34743 | xz | 5.8.3-r0 |
| Low | DEBIAN-CVE-2026-34743 | xz-utils | 5.4.1-1+deb12u1 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | DEBIAN-CVE-2026-3441 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | GHSA-2pr8-phx7-x9h3 | protobufjs | 7.5.6 |
| Low | GHSA-xmrv-pmrh-hhx2 | github.com/ | 1.7.8 |
| Low | GHSA-xmrv-pmrh-hhx2 | github.com/ | 1.97.3 |
| Low | GHSA-58qx-3vcg-4xpx | ws | 8.20.1 |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | DEBIAN-CVE-2026-7010 | perl | no fix listed |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/tokens-studio/supabase)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.