ace 2026.10.15 Helm chart
appscodeVerified publisherScored 16 Oct 2026
A Helm chart for AppsCode Container Engine
Version 2026.10.15 todayapp version v2026.10.15 0Artifact Hub
ace 2026.10.15 deploys 5 container images: ubercadence/server, alpine/psql, ubercadence/web, ghcr.io/appscode/b3 and 1 more. Across them, 594 findings — 1 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.3-r0, fixed in 3.3.6-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ubercadence/ | v1.4.2 | 002090 | 1,288 |
| alpine/ | latest | 0001 | 13 |
| ubercadence/ | v4.0.11 | 1028134 | 1,859 |
| ghcr.io/ | v2026.10.15 | 0037221 | 2,685 |
| ghcr.io/ | 1.34 | 00854 | 708 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GHSA-ch52-4w7c-c8xp | http-cache-semantics | no fix listed |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | DEBIAN-CVE-2026-80229 | curl | no fix listed |
| Low | GHSA-p9j2-gv94-2wf4 | next | 15.5.21 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
| Low | ALPINE-CVE-2026-31789 | openssl | 3.3.7-r0 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-75px-5xx7-5xc7 | protobufjs | 7.5.6 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | ALPINE-CVE-2026-42766 | openssl | 3.3.7-r1 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 9.0.7 |
| Low | ALPINE-CVE-2026-84782 | openssl | 3.3.7-r2 |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GHSA-jvwf-75h9-cwgg | protobufjs | 7.5.6 |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
| Low | GO-2026-5064 | github.com/ | no fix listed |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2026-82209 | curl | no fix listed |
| Low | GHSA-73rr-hh4g-fpgx | diff | 5.2.2 |
| Low | GHSA-q7rr-3cgh-j5r3 | @opentelemetry/ | 0.217.0 |
| Low | GHSA-q7rr-3cgh-j5r3 | @opentelemetry/ | 0.217.0 |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | ALPINE-CVE-2026-45186 | expat | 2.8.1-r0 |
| Low | DEBIAN-CVE-2026-80255 | curl | no fix listed |
| Low | GO-2026-5970 | golang.org/ | 0.39.0 |
| Low | GHSA-cxpq-8v7q-cg56 | github.com/ | 1.7.4 |
| Low | GHSA-h7pq-86h8-rp5x | github.com/ | 1.7.4 |
| Low | GHSA-m2v6-2jmh-4c68 | github.com/ | 1.7.4 |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | DEBIAN-CVE-2026-13608 | curl | no fix listed |
| Low | GHSA-wcpc-wj8m-hjx6 | protobufjs | 7.6.1 |
| Low | GHSA-h64f-5h5j-jqjh | next | 15.5.16 |
| Low | GO-2025-3521 | k8s.io/ | no fix listed |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2026.10.15latest | today | v2026.10.15 | 1093500 | 6,553 |
| 2026.10.12 | yesterday | v2026.10.12 | 0047277 | 3,448 |
| 2026.9.11 | 16 days ago | v2026.9.11 | 0053280 | 3,685 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.