yugabyte Helm chart

Name: yugabyte Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wenerme

Scored 14 Sept 2026

YugabyteDB is the high-performance distributed SQL database for building global, internet-scale apps.

Latest 2026.1.1 1 month agoapp version 2026.1.1.0-b91 1Artifact Hub

yugabyte 2026.1.1 deploys 1 container image: yugabytedb/yugabyte. Across them, 44 findings — 0 critical, 0 high. The highest contribution is GHSA-cx63-2mw6-8hw5 in setuptools 65.5.1, fixed in 70.0.0. Chart.yaml declares kubeVersion >=1.17.0-0; rendered for Kubernetes 1.17.0.

Radar Score

35100539

44 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
yugabytedb/yugabyte×6	2026.1.1.0-b91	00539	351

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

44 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-cx63-2mw6-8hw5	setuptools@65.5.1	70.0.0
Medium	GHSA-gpvv-69j7-gwj8	pip@9.0.3	19.2
Medium	GHSA-r9hx-vwmv-q579	setuptools@39.2.0	65.5.1
Medium	PYSEC-2025-49	setuptools@65.5.1	78.1.1
Medium	GHSA-5xp3-jfq3-5q8x	pip@9.0.3	21.1
Low	GHSA-jqcq-xjh3-6g23	github.com/jackc/pgproto3/v2@v2.3.3	no fix listed
Low	GHSA-vfp3-v2gw-7wfq	github.com/labstack/echo/v4@v4.13.3	4.15.3
Low	GHSA-wf93-45jw-7689	pip@9.0.3	26.1.2
Low	GHSA-4xh5-x5gv-qwph	pip@9.0.3	25.3
Low	GHSA-h35f-9h28-mq5c	setuptools@65.5.1	83.0.0
Low	PYSEC-2026-3721	pip@9.0.3	26.2
Low	GHSA-mq26-g339-26xf	pip@9.0.3	23.3
Low	GO-2026-5026	stdlib@go1.26.4	1.25.13
Low	GO-2026-5972	stdlib@go1.26.4	1.25.13
Low	GO-2026-6088	stdlib@go1.26.4	1.25.13
Low	GO-2026-6089	stdlib@go1.26.4	1.25.13
Low	GO-2026-6090	stdlib@go1.26.4	1.25.13
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	GO-2026-5942	stdlib@go1.26.4	1.26.6
Low	GO-2026-6218	stdlib@go1.26.4	1.25.13
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	GO-2026-5856	stdlib@go1.26.4	1.25.12
Low	GO-2026-6355	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	GHSA-jp4c-xjxw-mgf9	pip@9.0.3	26.1
Low	GO-2026-6354	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-6091	stdlib@go1.26.4	1.25.13
Low	GO-2026-4970	stdlib@go1.26.4	1.25.12
Low	GHSA-58qw-9mgm-455v	pip@9.0.3	26.1
Low	ALSA-2026:54654	bind@32:9.11.36-16.el8_10.8	32:9.11.36-16.el8_10.14
Low	ALSA-2026:55804	nghttp2@1.33.0-6.el8_10.2	1.33.0-6.el8_10.3
Low	ALSA-2026:56131	pam@1.3.1-39.el8_10	1.3.1-40.el8_10
Low	ALSA-2026:56133	attr@2.4.48-3.el8	2.6.0-1.el8_10
Low	ALSA-2026:56219	python3@3.6.8-77.el8_10.alma.1	3.6.8-78.el8_10.alma.1
Low	ALSA-2026:57462	curl@7.61.1-34.el8_10.11	7.61.1-34.el8_10.13
Low	ALSA-2026:58938	sqlite@3.26.0-20.el8_10	3.26.0-21.el8_10
Low	ALSA-2026:61248	libxml2@2.9.7-21.el8_10.6	2.9.7-21.el8_10.7
Low	ALSA-2026:61766	glib2@2.56.4-170.el8_10	2.56.4-177.el8_10
Low	ALSA-2026:64809	expat@2.5.0-2.el8_10	2.5.0-2.el8_10.2
Low	ALSA-2026:65998	gzip@1.9-13.el8_5	1.9-15.el8_10
Low	ALSA-2026:66348	vim@2:8.0.1763-31.el8_10	2:8.0.1763-31.el8_10.7
Low	GO-2026-5932	golang.org/x/crypto@v0.52.0	no fix listed
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v4@v4.18.3	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@9.0.3	26.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.1.1latest	1 month ago	2026.1.1.0-b91	00539	351

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wenerme/yugabyte.svg)](https://charts.stackradar.io/charts/wenerme/yugabyte)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.