bpa Helm chart

Name: bpa Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

business-partner-agent

Scored 21 Sept 2026

The BPA allows organizations to verify, hold, and issue verifiable credentials.

Latest 0.12.4app version sha-c2b76ca 0Artifact Hub

bpa 0.12.4 deploys 3 container images: bcgovimages/aries-cloudagent, ghcr.io/hyperledger-labs/business-partner-agent-new and bitnami/postgresql. Across the 1 measured, 705 findings — 12 critical, 23 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1-1ubuntu2.1~18.04.9, fixed in 1.1.1-1ubuntu2.1~18.04.19.

Radar Score

11,6581223242428

705 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bcgovimages/aries-cloudagent×2	py36-1.16-1_0.7.4	1223242428	11,658
ghcr.io/hyperledger-labs/business-partner-agent-new	sha-c2b76ca	—	not yet scanned
bitnami/postgresql	12	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

428 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-73073	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm24
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
Low	UBUNTU-CVE-2025-53906	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-8674	glibc@2.27-3ubuntu1.4	no fix listed
Low	GHSA-966j-vmvw-g2g9	aiohttp@3.8.1	3.13.4
Low	UBUNTU-CVE-2026-5704	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.4+esm4
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.9	2.7.0
Low	UBUNTU-CVE-2026-19542	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-26269	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-72522	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56403	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56406	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56407	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-78410	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	GHSA-428g-f7cq-pgp5	marshmallow@3.5.1	3.26.2
Low	UBUNTU-CVE-2025-14104	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-78409	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2024-13176	openssl@1.1.1-1ubuntu2.1~18.04.9	no fix listed
Low	UBUNTU-CVE-2025-52099	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
Low	UBUNTU-CVE-2026-56405	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.2.5-3ubuntu0.2	no fix listed
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.26.9	1.26.18
Low	UBUNTU-CVE-2026-58055	nghttp2@1.30.0-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2021-20193	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.3
Low	UBUNTU-CVE-2025-29088	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
Low	UBUNTU-CVE-2025-8058	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm6
Low	UBUNTU-CVE-2026-50813	sqlite3@3.22.0-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2017-18018	coreutils@8.28-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-13757	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1
Low	UBUNTU-CVE-2026-11850	krb5@1.16-2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56132	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56409	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2024-43374	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm9
Low	UBUNTU-CVE-2013-4235	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5
Low	UBUNTU-CVE-2025-45582	tar@1.29b-2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-15534	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4
Low	UBUNTU-CVE-2024-32020	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm1
Low	PYSEC-2026-2275	requests@2.25.1	2.33.0
Low	UBUNTU-CVE-2025-14017	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm7
Low	UBUNTU-CVE-2025-22134	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2024-10041	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
Low	UBUNTU-CVE-2024-43802	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm10
Low	UBUNTU-CVE-2026-50812	sqlite3@3.22.0-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2023-4641	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-28421	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-46483	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm19
Low	UBUNTU-CVE-2026-18938	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1
Low	UBUNTU-CVE-2026-28419	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-22795	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	UBUNTU-CVE-2025-27613	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.12.4latest	—	sha-c2b76ca	1223242428	11,658

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/business-partner-agent/bpa.svg)](https://charts.stackradar.io/charts/business-partner-agent/bpa)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.