bpa 0.12.4 Helm chart

Name: bpa Helm chart 0.12.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

business-partner-agent

Scored 21 Sept 2026

The BPA allows organizations to verify, hold, and issue verifiable credentials.

Version 0.12.4app version sha-c2b76ca 0Artifact Hub

bpa 0.12.4 deploys 3 container images: bcgovimages/aries-cloudagent, ghcr.io/hyperledger-labs/business-partner-agent-new and bitnami/postgresql. Across the 1 measured, 705 findings — 12 critical, 23 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1-1ubuntu2.1~18.04.9, fixed in 1.1.1-1ubuntu2.1~18.04.19.

Radar Score

11,6581223242428

705 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bcgovimages/aries-cloudagent×2	py36-1.16-1_0.7.4	1223242428	11,658
ghcr.io/hyperledger-labs/business-partner-agent-new	sha-c2b76ca	—	not yet scanned
bitnami/postgresql	12	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

705 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-0395	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm4
Low	UBUNTU-CVE-2026-77117	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-80489	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2020-13844	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
Low	UBUNTU-CVE-2023-4039	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
Low	UBUNTU-CVE-2026-76642	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-11822	sqlite3@3.22.0-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.22.0-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2022-2923	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2019-17594	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1
Low	UBUNTU-CVE-2024-28085	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	PYSEC-2026-3721	pip@21.1.3	26.2
Low	GHSA-69f9-5gxw-wvc2	aiohttp@3.8.1	3.13.3
Low	UBUNTU-CVE-2025-15079	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm7
Low	GHSA-mq26-g339-26xf	pip@21.1.3	23.3
Low	UBUNTU-CVE-2023-2609	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm1
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.0.3	3.1.6
Low	GHSA-9548-qrrj-x5pj	aiohttp@3.8.1	3.12.14
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	UBUNTU-CVE-2026-73076	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm23
Low	UBUNTU-CVE-2026-39881	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm16
Low	UBUNTU-CVE-2026-6429	curl@7.58.0-2ubuntu3.13	no fix listed
Low	PYSEC-2022-42980	pillow@8.4.0	9.3.0
Low	UBUNTU-CVE-2026-73072	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm23
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.8.1	3.14.1
Low	UBUNTU-CVE-2024-22365	pam@1.1.8-3.6ubuntu2.18.04.3	1.1.8-3.6ubuntu2.18.04.6+esm1
Low	UBUNTU-CVE-2026-43961	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm19
Low	GHSA-5qpg-rh4j-qp35	pycares@4.0.0	4.9.0
Low	UBUNTU-CVE-2026-51400	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-55895	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm21
Low	GHSA-c427-h43c-vf67	aiohttp@3.8.1	3.13.4
Low	UBUNTU-CVE-2023-5441	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm6
Low	UBUNTU-CVE-2016-10739	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-45130	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm17
Low	UBUNTU-CVE-2023-1264	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.11
Low	GHSA-9f5j-8jwj-x28g	ecdsa@0.16.1	0.19.2
Low	UBUNTU-CVE-2025-3576	krb5@1.16-2ubuntu0.2	1.16-2ubuntu0.4+esm5
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.9	2.5.0
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2
Low	UBUNTU-CVE-2026-7168	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10
Low	UBUNTU-CVE-2022-3821	systemd@237-3ubuntu10.47	237-3ubuntu10.57
Low	PYSEC-2026-2104	aiohttp@3.8.1	3.14.0
Low	UBUNTU-CVE-2024-50349	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm6
Low	UBUNTU-CVE-2026-57456	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm21
Low	UBUNTU-CVE-2026-56404	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-4873	curl@7.58.0-2ubuntu3.13	no fix listed
Low	UBUNTU-CVE-2023-39804	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.4+esm1
Low	UBUNTU-CVE-2026-56410	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56411	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.2-1.3	5.2.2-1.3ubuntu0.1+esm1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.12.4latest	—	sha-c2b76ca	1223242428	11,658

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/business-partner-agent/bpa.svg)](https://charts.stackradar.io/charts/business-partner-agent/bpa)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.