supabase Helm chart

Name: supabase Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

tokens-studio

Scored 14 Sept 2026

The open source Firebase alternative.

Latest 1.0.0 1 year agoApp version not verified against the render 7Artifact Hub

supabase 1.0.0 deploys 14 container images: library/postgres, supabase/logflare, supabase/gotrue, supabase/postgres and 10 more. Across the 12 measured, 2,064 findings — 6 critical, 16 high — 1 on CISA KEV. The highest contribution is GHSA-f82v-jwr5-mffw in next 14.2.13, fixed in 14.2.25.

Radar Score

23,1236163671,673

2,064 findings over 12 of 14 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres×4	15-alpine	00456	493
supabase/logflare	1.8.12	00330	331
supabase/gotrue	v2.163.0	0120130	1,442
supabase/postgres×2	15.6.1.133	—	not yet scanned
supabase/edge-runtime	v1.59.0	0138150	2,129
darthsim/imgproxy	v3.26	0134238	2,589
library/kong	3.8.0	0338117	1,905
supabase/postgres-meta	v0.84.2	0142189	2,598
bitnami/pgbouncer	1.24.0	—	unmeasured
supabase/realtime	v2.33.8	2253203	3,175
postgrest/postgrest	v12.2.3	0000	0
supabase/storage-api	v1.12.0	1236120	2,034
supabase/studio	20241021-9f9b083	3488423	6,029
timberio/vector	0.42.0-alpine	011117	398

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

861 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2024-12133	libtasn1-6@4.19.0-2	4.19.0-2+deb12u1
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	DEBIAN-CVE-2026-8286	curl@7.88.1-10+deb12u7	no fix listed
Low	DEBIAN-CVE-2024-11168	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u5
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-75803	openssl@3.0.14-1~deb12u2	no fix listed
Low	GHSA-6chq-wfr3-2hj9	axios@1.7.4	1.15.1
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u8	2.36-9+deb12u14
Low	GHSA-3w6x-2g7m-8v23	axios@1.7.4	1.15.2
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.6	1.16.0
Low	ALPINE-CVE-2025-15468	openssl@3.3.2-r0	3.3.6-r0
Low	DEBIAN-CVE-2024-53589	binutils@2.40-2	no fix listed
Low	GHSA-r28c-9q8g-f849	postcss@8.4.31	8.5.18
Low	DEBIAN-CVE-2026-58051	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GHSA-jvwf-75h9-cwgg	protobufjs@7.4.0	7.5.6
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u1	no fix listed
Low	GHSA-fj3w-jwp8-x2g3	fast-xml-parser@4.4.1	4.5.4
Low	UBUNTU-CVE-2026-59843	libssh@0.9.6-2ubuntu0.22.04.7	0.9.6-2ubuntu0.22.04.8
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u8	no fix listed
Low	DEBIAN-CVE-2025-66863	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-66865	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-7598	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2025-66862	binutils@2.40-2	no fix listed
Low	GHSA-c83g-rgw3-j3cx	browserslist@4.23.3	4.28.7
Low	GHSA-h64f-5h5j-jqjh	next@14.2.13	15.5.16
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u8	no fix listed
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	DEBIAN-CVE-2026-8458	curl@7.88.1-10+deb12u7	no fix listed
Low	GHSA-q675-qj96-32m9	golang.org/x/image@v0.21.0	0.41.0
Low	UBUNTU-CVE-2026-76641	expat@2.4.7-1ubuntu0.7	no fix listed
Low	DEBIAN-CVE-2026-6253	curl@7.88.1-10+deb12u7	no fix listed
Low	GHSA-w5hq-g745-h8pq	uuid@9.0.1	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@18.0.6	21.5.1
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	DEBIAN-CVE-2026-18220	binutils@2.40-2	no fix listed
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u8	2.36-9+deb12u14
Low	GO-2026-4341	stdlib@go1.22.3	1.24.12
Low	DEBIAN-CVE-2018-1000021	git@1:2.39.5-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-66866	binutils@2.40-2	no fix listed
Low	GHSA-4c39-4ccg-62r3	next@14.2.13	15.5.21
Low	DEBIAN-CVE-2025-5244	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-5245	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-9547	curl@7.88.1-10+deb12u7	no fix listed
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.24.7	7.26.10
Low	DEBIAN-CVE-2026-17084	python3.11@3.11.2-6+deb12u3	no fix listed
Low	GHSA-955p-x3mx-jcvp	next@14.2.13	15.5.21
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v3@v3.0.3	3.0.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	1 year ago	—	6163671,673	23,123

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/tokens-studio/supabase.svg)](https://charts.stackradar.io/charts/tokens-studio/supabase)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.