StackRadar

ace 2026.10.12 Helm chart

appscodeVerified publisher

Scored 16 Oct 2026

A Helm chart for AppsCode Container Engine

Version 2026.10.12 yesterdayapp version v2026.10.12 0Artifact Hub

ace 2026.10.12 deploys 2 container images: ghcr.io/appscode/b3 and ghcr.io/appscode/kubectl-nonroot. Across them, 324 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2019-1010022 in glibc 2.41-12+deb13u4, with no fix listed.

Radar Score

3,4480047277

324 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/appscode/b3v2026.10.1200392232,740
ghcr.io/appscode/kubectl-nonroot1.3400854708

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

225 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-54369acl@2.3.2-2+b1no fix listed
LowGO-2026-4980stdlib@go1.25.31.25.10
LowDEBIAN-CVE-2026-54371attr@1:2.5.2-3no fix listed
LowDEBIAN-CVE-2026-102010gcc-14@14.2.0-19no fix listed
LowGO-2026-4440golang.org/x/net@v0.38.00.45.0
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.38.00.45.0
LowDEBIAN-CVE-2025-15079curl@8.14.1-2+deb13u5no fix listed
LowGO-2026-4441golang.org/x/net@v0.38.00.45.0
LowDEBIAN-CVE-2026-58470wget@1.25.0-2no fix listed
LowDEBIAN-CVE-2026-67693gnutls28@3.8.9-3+deb13u4no fix listed
LowGO-2026-5775github.com/go-chi/chi/v5@v5.2.55.3.0
LowGO-2026-4603stdlib@go1.25.31.25.8
LowGO-2025-4175stdlib@go1.25.31.24.11
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.69.21.83.1
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.38.00.52.0
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.38.00.52.0
LowGO-2026-4864stdlib@go1.25.31.25.9
LowGO-2026-6179golang.org/x/mod@v0.38.00.40.0
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.38.00.45.0
LowGO-2026-4982stdlib@go1.25.31.25.10
LowGO-2026-5025golang.org/x/net@v0.38.00.55.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.38.00.52.0
LowDEBIAN-CVE-2026-78410util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-77117glibc@2.41-12+deb13u4no fix listed
LowDEBIAN-CVE-2026-80489glibc@2.41-12+deb13u4no fix listed
LowDEBIAN-CVE-2022-0563util-linux@2.41.5-0+deb13u1no fix listed
LowGO-2026-6091stdlib@go1.25.31.25.13
LowGHSA-8fv2-88gg-hm7qgithub.com/envoyproxy/gateway@v1.6.31.7.4
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.69.21.82.1
LowDEBIAN-CVE-2026-5704tar@1.35+dfsg-3.1no fix listed
LowGO-2026-4865stdlib@go1.25.31.25.9
LowGHSA-685w-q87j-wqw3github.com/docker/distribution@v2.8.3+incompatibleno fix listed
LowDEBIAN-CVE-2026-3184util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-58055nghttp2@1.64.0-1.1+deb13u1no fix listed
LowGO-2026-4976stdlib@go1.25.31.25.10
LowGO-2026-5039stdlib@go1.25.31.25.11
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.55.6no fix listed
LowDEBIAN-CVE-2011-3374apt@3.0.3no fix listed
LowDEBIAN-CVE-2013-4392systemd@257.13-1~deb13u1no fix listed
LowGO-2026-5856stdlib@go1.25.31.25.12
LowGO-2026-5338github.com/containerd/containerd@v1.7.35no fix listed
LowDEBIAN-CVE-2026-78409util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2023-31439systemd@257.13-1~deb13u1no fix listed
LowDEBIAN-CVE-2026-8674glibc@2.41-12+deb13u4no fix listed
LowDEBIAN-CVE-2023-31437systemd@257.13-1~deb13u1no fix listed
LowGO-2026-5027golang.org/x/net@v0.38.00.55.0
LowGO-2026-5029golang.org/x/net@v0.38.00.55.0
LowGO-2026-5030golang.org/x/net@v0.38.00.55.0
LowDEBIAN-CVE-2026-16599wget@1.25.0-2no fix listed
LowGO-2026-4340stdlib@go1.25.31.24.12

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2026.10.15latesttodayv2026.10.1510935006,553
2026.10.12yesterdayv2026.10.1200472773,448
2026.9.1116 days agov2026.9.1100532803,685

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/appscode/ace.svg)](https://charts.stackradar.io/charts/appscode/ace)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Oct 2026 · scanned 16 Oct 2026 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.