bpa 0.12.4 Helm chart

Name: bpa Helm chart 0.12.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

business-partner-agent

Scored 21 Sept 2026

The BPA allows organizations to verify, hold, and issue verifiable credentials.

Version 0.12.4app version sha-c2b76ca 0Artifact Hub

bpa 0.12.4 deploys 3 container images: bcgovimages/aries-cloudagent, ghcr.io/hyperledger-labs/business-partner-agent-new and bitnami/postgresql. Across the 1 measured, 705 findings — 12 critical, 23 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1-1ubuntu2.1~18.04.9, fixed in 1.1.1-1ubuntu2.1~18.04.19.

Radar Score

11,6581223242428

705 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bcgovimages/aries-cloudagent×2	py36-1.16-1_0.7.4	1223242428	11,658
ghcr.io/hyperledger-labs/business-partner-agent-new	sha-c2b76ca	—	not yet scanned
bitnami/postgresql	12	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

705 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-xqr8-7jwr-rhp7	certifi@2022.6.15	2023.7.22
Low	GHSA-5wmx-573v-2qwq	markdown@3.1.1	3.8.1
Low	UBUNTU-CVE-2026-80230	curl@7.58.0-2ubuntu3.13	no fix listed
Low	UBUNTU-CVE-2022-0319	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13
Low	UBUNTU-CVE-2022-2581	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2022-23491	ca-certificates@20210119~18.04.1	20211016ubuntu0.18.04.1
Low	UBUNTU-CVE-2023-0465	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.22
Low	UBUNTU-CVE-2022-1785	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2022-2571	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2022-3099	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm4
Low	UBUNTU-CVE-2025-69419	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	UBUNTU-CVE-2026-42013	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm4
Low	UBUNTU-CVE-2018-7169	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.2
Low	UBUNTU-CVE-2022-3352	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm5
Low	UBUNTU-CVE-2022-3256	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm5
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.8.1-4ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2022-2208	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm3
Low	UBUNTU-CVE-2022-2849	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.12
Low	UBUNTU-CVE-2023-0049	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.11
Low	UBUNTU-CVE-2023-0054	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.11
Low	UBUNTU-CVE-2023-0288	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.11
Low	UBUNTU-CVE-2026-54874	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm10
Low	UBUNTU-CVE-2025-6020	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
Low	UBUNTU-CVE-2026-42766	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm9
Low	UBUNTU-CVE-2023-2610	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm1
Low	UBUNTU-CVE-2025-32990	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm2
Low	UBUNTU-CVE-2026-73078	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm23
Low	UBUNTU-CVE-2022-29187	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.12
Low	UBUNTU-CVE-2022-39253	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.13
Low	UBUNTU-CVE-2024-50602	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm2
Low	GHSA-63hw-fmq6-xxg2	aiohttp@3.8.1	3.14.1
Low	UBUNTU-CVE-2018-20217	krb5@1.16-2ubuntu0.2	1.16-2ubuntu0.3
Low	UBUNTU-CVE-2025-15281	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm6
Low	GHSA-gmj6-6f8f-6699	jinja2@3.0.3	3.1.5
Low	UBUNTU-CVE-2023-27538	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24
Low	UBUNTU-CVE-2023-7104	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm1
Low	UBUNTU-CVE-2022-45142	heimdal@7.5.0+dfsg-1	7.5.0+dfsg-1ubuntu0.4
Low	UBUNTU-CVE-2019-6488	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2022-4141	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	GHSA-6v7p-g79w-8964	msgpack@1.0.4	1.2.1
Low	GHSA-xcgm-r5h9-7989	aiohttp@3.8.1	3.14.1
Low	UBUNTU-CVE-2022-1771	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	UBUNTU-CVE-2024-8096	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10
Low	GHSA-45c4-8wx5-qw6w	aiohttp@3.8.1	3.8.5
Low	UBUNTU-CVE-2022-41916	heimdal@7.5.0+dfsg-1	7.5.0+dfsg-1ubuntu0.2
Low	UBUNTU-CVE-2023-47039	perl@5.26.1-6ubuntu0.5	no fix listed
Low	GHSA-mr82-8j83-vxmv	pydantic@1.9.1	1.10.13
Low	UBUNTU-CVE-2025-6297	dpkg@1.19.0.5ubuntu2.3	no fix listed
Low	UBUNTU-CVE-2019-1563	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.fips.2.1~18.04.6.1
Low	UBUNTU-CVE-2026-42011	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.12.4latest	—	sha-c2b76ca	1223242428	11,658

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/business-partner-agent/bpa.svg)](https://charts.stackradar.io/charts/business-partner-agent/bpa)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.