bpa Helm chart

Name: bpa Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

business-partner-agent

Scored 21 Sept 2026

The BPA allows organizations to verify, hold, and issue verifiable credentials.

Latest 0.12.4app version sha-c2b76ca 0Artifact Hub

bpa 0.12.4 deploys 3 container images: bcgovimages/aries-cloudagent, ghcr.io/hyperledger-labs/business-partner-agent-new and bitnami/postgresql. Across the 1 measured, 705 findings — 12 critical, 23 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1-1ubuntu2.1~18.04.9, fixed in 1.1.1-1ubuntu2.1~18.04.19.

Radar Score

11,6581223242428

705 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bcgovimages/aries-cloudagent×2	py36-1.16-1_0.7.4	1223242428	11,658
ghcr.io/hyperledger-labs/business-partner-agent-new	sha-c2b76ca	—	not yet scanned
bitnami/postgresql	12	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

705 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42307	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm17
Low	UBUNTU-CVE-2026-54411	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
Low	UBUNTU-CVE-2026-25210	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.9+esm3
Low	UBUNTU-CVE-2026-59858	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm22
Low	UBUNTU-CVE-2026-25749	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-19487	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4
Low	UBUNTU-CVE-2026-51401	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2023-46246	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	GHSA-65pc-fj4g-8rjx	idna@2.10	3.15
Low	UBUNTU-CVE-2024-32021	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm1
Low	UBUNTU-CVE-2023-48233	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	UBUNTU-CVE-2023-48234	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	UBUNTU-CVE-2023-48235	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	UBUNTU-CVE-2023-48237	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	GHSA-9wx4-h78v-vm56	requests@2.25.1	2.32.0
Low	UBUNTU-CVE-2026-55693	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm21
Low	PYSEC-2025-183	pyjwt@2.4.0	no fix listed
Low	UBUNTU-CVE-2025-46836	net-tools@1.60+git20161116.90da8a0-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-57455	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm21
Low	UBUNTU-CVE-2026-78408	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2023-48236	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	UBUNTU-CVE-2026-54369	acl@2.2.52-3build1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.1-4ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2024-41957	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm9
Low	UBUNTU-CVE-2023-48231	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm7
Low	UBUNTU-CVE-2024-11053	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10
Low	UBUNTU-CVE-2026-13595	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-73073	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm24
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
Low	UBUNTU-CVE-2025-53906	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-8674	glibc@2.27-3ubuntu1.4	no fix listed
Low	GHSA-966j-vmvw-g2g9	aiohttp@3.8.1	3.13.4
Low	UBUNTU-CVE-2026-5704	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.4+esm4
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.9	2.7.0
Low	UBUNTU-CVE-2026-19542	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-26269	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-72522	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56403	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56406	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56407	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-78410	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	GHSA-428g-f7cq-pgp5	marshmallow@3.5.1	3.26.2
Low	UBUNTU-CVE-2025-14104	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-78409	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2024-13176	openssl@1.1.1-1ubuntu2.1~18.04.9	no fix listed
Low	UBUNTU-CVE-2025-52099	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
Low	UBUNTU-CVE-2026-56405	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.2.5-3ubuntu0.2	no fix listed
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.26.9	1.26.18
Low	UBUNTU-CVE-2026-58055	nghttp2@1.30.0-1ubuntu1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.12.4latest	—	sha-c2b76ca	1223242428	11,658

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/business-partner-agent/bpa.svg)](https://charts.stackradar.io/charts/business-partner-agent/bpa)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.