ace 2026.10.15 Helm chart

Name: ace Helm chart 2026.10.15: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

appscode

Scored 16 Oct 2026

A Helm chart for AppsCode Container Engine

Version 2026.10.15 todayapp version v2026.10.15 0Artifact Hub

ace 2026.10.15 deploys 5 container images: ubercadence/server, alpine/psql, ubercadence/web, ghcr.io/appscode/b3 and 1 more. Across them, 594 findings — 1 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.3-r0, fixed in 3.3.6-r0.

Radar Score

6,5531093500

594 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ubercadence/server×9	v1.4.2	002090	1,288
alpine/psql×5	latest	0001	13
ubercadence/web	v4.0.11	1028134	1,859
ghcr.io/appscode/b3	v2026.10.15	0037221	2,685
ghcr.io/appscode/kubectl-nonroot	1.34	00854	708

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

442 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-27135	nghttp2@1.64.0-r0	1.68.1
Medium	ALPINE-CVE-2026-63072	openssl@3.3.3-r0	3.3.7-r1
Medium	ALPINE-CVE-2025-69420	openssl@3.3.3-r0	3.3.6-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.3.3-r0	3.3.7-r0
Medium	GHSA-5375-pq7m-f5r2	@grpc/grpc-js@1.12.2	1.12.7
Medium	GHSA-99f4-grh7-6pcq	@grpc/grpc-js@1.12.2	1.12.7
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.36.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.36.0	0.52.0
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	GHSA-3ppc-4f35-3m26	minimatch@9.0.5	9.0.6
Medium	ALPINE-CVE-2026-28387	openssl@3.3.3-r0	3.3.7-r0
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.5-r0	1.34.8-r0
Medium	GO-2026-4601	stdlib@go1.24.1	1.25.8
Medium	GO-2026-4981	stdlib@go1.24.1	1.25.10
Medium	GHSA-34x7-hfp2-rc4v	tar@6.2.1	7.5.7
Medium	ALPINE-CVE-2026-28389	openssl@3.3.3-r0	3.3.7-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.3.3-r0	3.3.7-r0
Low	GO-2026-4977	stdlib@go1.24.1	1.25.10
Low	GHSA-66ff-xgx4-vchm	protobufjs@7.5.1	7.5.6
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u7	no fix listed
Low	GHSA-45rx-2jwx-cxfr	@opentelemetry/propagator-jaeger@2.0.0	2.9.0
Low	GO-2026-4986	stdlib@go1.24.1	1.25.10
Low	GO-2026-4918	stdlib@go1.24.1	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.37.0	0.53.0
Low	GHSA-wcrf-9vrr-854f	github.com/envoyproxy/gateway@v1.6.3	1.7.4
Low	DEBIAN-CVE-2026-58469	wget@1.25.0-2	no fix listed
Low	GHSA-36qx-fr4f-26g5	next@14.2.31	15.5.16
Low	ALPINE-CVE-2026-9076	openssl@3.3.3-r0	3.3.7-r1
Low	ALPINE-CVE-2026-45445	openssl@3.3.3-r0	3.3.7-r1
Low	GHSA-685m-2w69-288q	protobufjs@7.5.1	7.5.6
Low	GHSA-3x4c-7xq6-9pq8	next@14.2.31	15.5.14
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	GO-2025-4116	golang.org/x/crypto@v0.36.0	0.43.0
Low	GO-2025-4009	stdlib@go1.24.1	1.24.8
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	GO-2025-4006	stdlib@go1.24.1	1.24.8
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-89xv-2m56-2m9x	next@14.2.31	15.5.21
Low	GO-2026-4870	stdlib@go1.24.1	1.25.9
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.36.0	0.52.0
Low	GO-2026-4971	stdlib@go1.24.1	1.25.10
Low	GO-2026-4947	stdlib@go1.24.1	1.25.9
Low	GHSA-6g55-p6wh-862q	postcss@8.4.31	8.5.12
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	DEBIAN-CVE-2021-31879	wget@1.25.0-2	no fix listed
Low	ALPINE-CVE-2025-69419	openssl@3.3.3-r0	3.3.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.15latest	today	v2026.10.15	1093500	6,553
2026.10.12	yesterday	v2026.10.12	0047277	3,448
2026.9.11	16 days ago	v2026.9.11	0053280	3,685

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/appscode/ace.svg)](https://charts.stackradar.io/charts/appscode/ace)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.