tabby Helm chart

Name: tabby Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

Scored 14 Sept 2026

File Explorer

Latest 1.0.6 3 years agoapp version v1.0.4 0Artifact Hub

tabby 1.0.6 deploys 2 container images: lishimeng/tabby and library/nginx. Across them, 622 findings — 4 critical, 12 high — 3 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-27363 in freetype 2.12.1+dfsg-5, fixed in 2.12.1+dfsg-5+deb12u4.

Radar Score

7,673412125481

622 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
lishimeng/tabby	v1.0.4	0728128	1,997
library/nginx	1.25	4597353	5,688

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

481 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2023-51792	libde265@1.0.11-1+deb12u2	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.0.8-r0	3.0.19-r0
Low	DEBIAN-CVE-2025-69418	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+b1	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.6.0	0.44.0
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-36849	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-53613	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-53615	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-84450	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-84451	libheif@1.15.1-1	no fix listed
Low	DSA-5979-2	libxslt@1.1.35-1	1.1.35-1+deb12u3
Low	GO-2026-5841	github.com/klauspost/compress@v1.16.0	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.7.0	no fix listed
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	DEBIAN-CVE-2026-40228	systemd@252.22-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	DEBIAN-CVE-2026-86137	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1	no fix listed
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-9165	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2024-13978	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-9672	libgd2@2.3.3-9	2.3.3-9+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.6latest	3 years ago	v1.0.4	412125481	7,673

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/xd/tabby.svg)](https://charts.stackradar.io/charts/xd/tabby)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.