jupyterhub 1.6.0 Helm chart

Name: jupyterhub Helm chart 1.6.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

uninettsigma2

Scored 14 Sept 2026

Multi-user Jupyter installation with Feide integration

Version 1.6.0 25 days agoApp version not verified against the render 0Artifact Hub

jupyterhub 1.6.0 deploys 5 container images: sigma2as/jupyterhub-singleuser, gcr.io/google_containers/pause, quay.io/nird-toolkit/jupyterhub-server, jupyterhub/configurable-http-proxy and 1 more. Across the 3 measured, 694 findings — 3 critical, 11 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r3, fixed in 8.4.0-r0.

Radar Score

8,607311140540

694 findings over 3 of 5 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
sigma2as/jupyterhub-singleuser	20251031-35301e4	—	not yet scanned
gcr.io/google_containers/pause	3.2	—	not yet scanned
quay.io/nird-toolkit/jupyterhub-server	20221215-e6aa80e	0540163	2,752
jupyterhub/configurable-http-proxy	4.5.3	241912	933
bitnamilegacy/kubectl×3	1.30	1281365	4,922

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

140 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	DLA-3859-1	systemd@247.3-7+deb11u1	247.3-7+deb11u6
Medium	DSA-5621-1	bind9@1:9.16.33-1~deb11u1	1:9.16.48-1
Medium	DSA-5673-1	glibc@2.31-13+deb11u5	2.31-13+deb11u9
Medium	DLA-3898-1	nghttp2@1.43.0-1	1.43.0-1+deb11u2
Medium	DSA-5523-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u10
Medium	DSA-5417-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u5
Medium	GHSA-f5f7-6478-qm6p	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.19.15
Medium	ALPINE-CVE-2022-32221	curl@7.83.1-r3	7.83.1-r4
Medium	DSA-5343-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u4
Medium	DSA-5332-1	git@1:2.30.2-1	1:2.30.2-1+deb11u1
Medium	DLA-3942-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u6
Medium	DLA-3942-2	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u2
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1q-r0	1.1.1t-r0
Medium	DLA-3867-1	git@1:2.30.2-1	1:2.30.2-1+deb11u3
Medium	DSA-5329-1	bind9@1:9.16.33-1~deb11u1	1:9.16.37-1~deb11u1
Medium	DSA-6113-1	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	DEBIAN-CVE-2019-1010022	glibc@2.36-9+deb12u9	no fix listed
Medium	DEBIAN-CVE-2023-45853	zlib@1:1.2.13.dfsg-1	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.5.13+dfsg-5	no fix listed
Medium	GHSA-wqv3-8cm6-h6wg	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.16.11
Medium	GHSA-hq6q-c2x6-hmch	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.25.16
Medium	DEBIAN-CVE-2026-45447	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Medium	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u9	no fix listed
Medium	DEBIAN-CVE-2015-3276	openldap@2.5.13+dfsg-5	no fix listed
Medium	GHSA-34jx-wx69-9x8v	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.11.9
Medium	GHSA-q78c-gwqw-jcmc	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.24.17
Medium	DEBIAN-CVE-2019-1010023	glibc@2.36-9+deb12u9	no fix listed
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.16.13
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1q-r0	1.1.1t-r0
Medium	DLA-4097-1	vim@2:8.2.2434-3+deb11u1	2:8.2.2434-3+deb11u2
Medium	ALPINE-CVE-2022-42915	curl@7.83.1-r3	7.83.1-r4
Medium	GHSA-27wf-5967-98gx	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.28.12
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1q-r0	1.1.1t-r1
Medium	GHSA-g42g-737j-qx6j	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.18.18
Medium	ALPINE-CVE-2023-27534	curl@7.83.1-r3	8.0.1-r0
Medium	ALPINE-CVE-2023-27533	curl@7.83.1-r3	8.0.1-r0
Medium	GHSA-cx63-2mw6-8hw5	setuptools@58.1.0	70.0.0
Medium	GHSA-38jv-5279-wg99	urllib3@1.26.12	2.6.3
Medium	GHSA-j9wf-vvm6-4r9w	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	no fix listed
Medium	DEBIAN-CVE-2025-49796	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Medium	GHSA-qwmp-2cf2-g9g6	wheel@0.37.1	0.38.1
Medium	DEBIAN-CVE-2022-24975	git@1:2.39.5-0+deb12u1	no fix listed
Medium	DEBIAN-CVE-2024-56171	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	GHSA-r9hx-vwmv-q579	setuptools@58.1.0	65.5.1
Medium	DEBIAN-CVE-2026-19931	curl@7.88.1-10+deb12u8	no fix listed
Medium	DLA-4050-1	bind9@1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u3
Medium	ALPINE-CVE-2023-28319	curl@7.83.1-r3	8.1.0-r0
Medium	PYSEC-2025-49	setuptools@58.1.0	78.1.1
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u9	no fix listed
Medium	DEBIAN-CVE-2026-42010	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.6.0latest	25 days ago	—	311140540	8,607

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/uninettsigma2/jupyterhub.svg)](https://charts.stackradar.io/charts/uninettsigma2/jupyterhub)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.