bpa 0.12.4 Helm chart

Name: bpa Helm chart 0.12.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

business-partner-agent

Scored 21 Sept 2026

The BPA allows organizations to verify, hold, and issue verifiable credentials.

Version 0.12.4app version sha-c2b76ca 0Artifact Hub

bpa 0.12.4 deploys 3 container images: bcgovimages/aries-cloudagent, ghcr.io/hyperledger-labs/business-partner-agent-new and bitnami/postgresql. Across the 1 measured, 705 findings — 12 critical, 23 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1-1ubuntu2.1~18.04.9, fixed in 1.1.1-1ubuntu2.1~18.04.19.

Radar Score

11,6581223242428

705 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bcgovimages/aries-cloudagent×2	py36-1.16-1_0.7.4	1223242428	11,658
ghcr.io/hyperledger-labs/business-partner-agent-new	sha-c2b76ca	—	not yet scanned
bitnami/postgresql	12	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

705 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-82209	curl@7.58.0-2ubuntu3.13	no fix listed
Low	UBUNTU-CVE-2021-20234	zeromq3@4.2.5-1ubuntu0.2	4.2.5-1ubuntu0.2+esm2
Low	UBUNTU-CVE-2022-3437	heimdal@7.5.0+dfsg-1	7.5.0+dfsg-1ubuntu0.3
Low	UBUNTU-CVE-2021-40528	libgcrypt20@1.8.1-4ubuntu1.2	1.8.1-4ubuntu1.3
Low	UBUNTU-CVE-2021-4193	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13
Low	PYSEC-2026-2098	aiohttp@3.8.1	3.13.4
Low	UBUNTU-CVE-2022-0351	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13
Low	UBUNTU-CVE-2022-1733	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2023-4735	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm6
Low	UBUNTU-CVE-2026-63072	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm10
Low	GHSA-p998-jp59-783m	aiohttp@3.8.1	3.13.4
Low	GHSA-8qpw-xqxj-h4r2	aiohttp@3.8.1	3.9.2
Low	UBUNTU-CVE-2026-12087	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm3
Low	UBUNTU-CVE-2018-16869	nettle@3.4-1ubuntu0.1	3.4.1-0ubuntu0.18.04.1
Low	UBUNTU-CVE-2022-2522	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm4
Low	UBUNTU-CVE-2020-11080	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm1
Low	UBUNTU-CVE-2024-22667	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm8
Low	UBUNTU-CVE-2022-3134	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm4
Low	UBUNTU-CVE-2023-4751	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm6
Low	UBUNTU-CVE-2026-0915	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm6
Low	UBUNTU-CVE-2025-4802	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm5
Low	UBUNTU-CVE-2023-50495	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm2
Low	UBUNTU-CVE-2023-0433	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.11
Low	GHSA-6jhg-hg63-jvvf	aiohttp@3.8.1	3.13.3
Low	GHSA-g3cq-j2xw-wf74	aiohttp@3.8.1	3.14.1
Low	UBUNTU-CVE-2026-5773	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10
Low	UBUNTU-CVE-2023-5981	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm1
Low	GHSA-g84x-mcqj-x9qq	aiohttp@3.8.1	3.13.3
Low	UBUNTU-CVE-2021-3997	systemd@237-3ubuntu10.47	no fix listed
Low	GHSA-vjc4-5qp5-m44j	pillow@8.4.0	12.3.0
Low	UBUNTU-CVE-2023-4733	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm6
Low	UBUNTU-CVE-2026-66046	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2022-1674	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2022-3296	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	GHSA-jj3x-wxrx-4x23	aiohttp@3.8.1	3.13.3
Low	UBUNTU-CVE-2023-4750	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm6
Low	UBUNTU-CVE-2022-2946	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2022-3234	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm5
Low	UBUNTU-CVE-2022-2845	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2022-3016	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm4
Low	UBUNTU-CVE-2024-33600	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm3
Low	UBUNTU-CVE-2022-3037	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm4
Low	GHSA-q2x7-8rv6-6q7h	jinja2@3.0.3	3.1.5
Low	UBUNTU-CVE-2022-48303	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.4
Low	GHSA-xj96-63gp-2gmr	pillow@8.4.0	12.3.0
Low	UBUNTU-CVE-2022-3324	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm5
Low	UBUNTU-CVE-2022-3297	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm5
Low	UBUNTU-CVE-2023-0466	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.22
Low	GHSA-6mq8-rvhq-8wgg	aiohttp@3.8.1	3.13.3
Low	UBUNTU-CVE-2022-3235	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.12.4latest	—	sha-c2b76ca	1223242428	11,658

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/business-partner-agent/bpa.svg)](https://charts.stackradar.io/charts/business-partner-agent/bpa)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.