ace 2026.10.15 Helm chart
appscodeVerified publisherScored 16 Oct 2026
A Helm chart for AppsCode Container Engine
Version 2026.10.15 todayapp version v2026.10.15 0Artifact Hub
ace 2026.10.15 deploys 5 container images: ubercadence/server, alpine/psql, ubercadence/web, ghcr.io/appscode/b3 and 1 more. Across them, 594 findings — 1 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.3-r0, fixed in 3.3.6-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ubercadence/ | v1.4.2 | 002090 | 1,288 |
| alpine/ | latest | 0001 | 13 |
| ubercadence/ | v4.0.11 | 1028134 | 1,859 |
| ghcr.io/ | v2026.10.15 | 0037221 | 2,685 |
| ghcr.io/ | 1.34 | 00854 | 708 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-fw7p-63qq-7hpr | filippo.io/ | 1.1.1 |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | GO-2026-4970 | stdlib | 1.25.12 |
| Low | GHSA-fcrp-7gc2-93g7 | github.com/ | 1.7.4 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | DEBIAN-CVE-2026-8458 | curl | no fix listed |
| Low | GHSA-9g9p-9gw9-jx7f | next | 15.5.10 |
| Low | ALPINE-CVE-2026-25210 | expat | 2.7.4-r0 |
| Low | GHSA-j3f2-48v5-ccww | protobufjs | 7.6.5 |
| Low | GO-2026-5777 | github.com/ | 5.3.0 |
| Low | GHSA-rpw4-54j3-4h4q | ip-address | 10.5.1 |
| Low | GO-2026-5622 | github.com/ | no fix listed |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | DEBIAN-CVE-2026-95184 | gnutls28 | no fix listed |
| Low | GO-2025-4012 | stdlib | 1.24.8 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.3.6-r0 |
| Low | GHSA-j6r3-76f7-8jcv | ip-address | 10.7.1 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-gx3x-vq4p-mhhv | github.com/ | 1.18.5 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r11 |
| Low | DEBIAN-CVE-2026-54369 | acl | no fix listed |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | ALPINE-CVE-2025-62408 | c-ares | 1.34.6-r0 |
| Low | DEBIAN-CVE-2026-54371 | attr | no fix listed |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | DEBIAN-CVE-2026-102010 | gcc-14 | no fix listed |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 15.5.24 |
| Low | GO-2026-4440 | golang.org/ | 0.45.0 |
| Low | GHSA-m9gg-hp2v-232j | @grpc/ | 1.13.6 |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | GO-2025-4011 | stdlib | 1.24.8 |
| Low | GO-2025-4015 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2025-15079 | curl | no fix listed |
| Low | GO-2026-4441 | golang.org/ | 0.45.0 |
| Low | DEBIAN-CVE-2026-58470 | wget | no fix listed |
| Low | DEBIAN-CVE-2026-67693 | gnutls28 | no fix listed |
| Low | GHSA-rj75-hqrm-r3gf | postcss-selector-parser | 7.1.6 |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | GO-2026-5775 | github.com/ | 5.3.0 |
| Low | GHSA-4633-3j49-mh5q | next | 15.5.21 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | GO-2025-4175 | stdlib | 1.24.11 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | GO-2026-4864 | stdlib | 1.25.9 |
| Low | GO-2026-6179 | golang.org/ | 0.40.0 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GO-2026-4982 | stdlib | 1.25.10 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2026.10.15latest | today | v2026.10.15 | 1093500 | 6,553 |
| 2026.10.12 | yesterday | v2026.10.12 | 0047277 | 3,448 |
| 2026.9.11 | 16 days ago | v2026.9.11 | 0053280 | 3,685 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.