bpa Helm chart

Name: bpa Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

business-partner-agent

Scored 21 Sept 2026

The BPA allows organizations to verify, hold, and issue verifiable credentials.

Latest 0.12.4app version sha-c2b76ca 0Artifact Hub

bpa 0.12.4 deploys 3 container images: bcgovimages/aries-cloudagent, ghcr.io/hyperledger-labs/business-partner-agent-new and bitnami/postgresql. Across the 1 measured, 705 findings — 12 critical, 23 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1-1ubuntu2.1~18.04.9, fixed in 1.1.1-1ubuntu2.1~18.04.19.

Radar Score

11,6581223242428

705 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bcgovimages/aries-cloudagent×2	py36-1.16-1_0.7.4	1223242428	11,658
ghcr.io/hyperledger-labs/business-partner-agent-new	sha-c2b76ca	—	not yet scanned
bitnami/postgresql	12	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

23 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	UBUNTU-CVE-2022-25236	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4
High	UBUNTU-CVE-2025-6965	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
High	PYSEC-2024-24	aiohttp@3.8.1	3.9.2
High	UBUNTU-CVE-2022-0778	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.15
High	UBUNTU-CVE-2019-9511	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	UBUNTU-CVE-2023-0286	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.21
High	UBUNTU-CVE-2021-20235	zeromq3@4.2.5-1ubuntu0.2	4.2.5-1ubuntu0.2+esm2
High	UBUNTU-CVE-2024-2398	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm4
High	UBUNTU-CVE-2023-25652	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-0ubuntu2	1:1.2.11.dfsg-0ubuntu2.1
High	UBUNTU-CVE-2021-23840	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.fips.2.1~18.04.9.1
High	UBUNTU-CVE-2024-32002	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm1
High	UBUNTU-CVE-2023-2650	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23
High	UBUNTU-CVE-2021-3712	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.13
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-0ubuntu2	1:1.2.11.dfsg-0ubuntu2.2
High	UBUNTU-CVE-2021-3449	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.fips.2.1~18.04.9.1
High	UBUNTU-CVE-2024-28182	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	UBUNTU-CVE-2022-0572	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13
High	UBUNTU-CVE-2024-2511	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm10
High	UBUNTU-CVE-2024-3596	krb5@1.16-2ubuntu0.2	1.16-2ubuntu0.4+esm3
High	UBUNTU-CVE-2022-35737	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7
High	UBUNTU-CVE-2022-32206	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.19
High	UBUNTU-CVE-2022-4450	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.21

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.12.4latest	—	sha-c2b76ca	1223242428	11,658

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/business-partner-agent/bpa.svg)](https://charts.stackradar.io/charts/business-partner-agent/bpa)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.