bpa Helm chart

Name: bpa Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

business-partner-agent

Scored 21 Sept 2026

The BPA allows organizations to verify, hold, and issue verifiable credentials.

Latest 0.12.4app version sha-c2b76ca 0Artifact Hub

bpa 0.12.4 deploys 3 container images: bcgovimages/aries-cloudagent, ghcr.io/hyperledger-labs/business-partner-agent-new and bitnami/postgresql. Across the 1 measured, 705 findings — 12 critical, 23 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1-1ubuntu2.1~18.04.9, fixed in 1.1.1-1ubuntu2.1~18.04.19.

Radar Score

11,6581223242428

705 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bcgovimages/aries-cloudagent×2	py36-1.16-1_0.7.4	1223242428	11,658
ghcr.io/hyperledger-labs/business-partner-agent-new	sha-c2b76ca	—	not yet scanned
bitnami/postgresql	12	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

705 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2021-20193	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.3
Low	UBUNTU-CVE-2025-29088	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
Low	UBUNTU-CVE-2025-8058	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm6
Low	UBUNTU-CVE-2026-50813	sqlite3@3.22.0-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2017-18018	coreutils@8.28-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-13757	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1
Low	UBUNTU-CVE-2026-11850	krb5@1.16-2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56132	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56409	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2024-43374	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm9
Low	UBUNTU-CVE-2013-4235	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5
Low	UBUNTU-CVE-2025-45582	tar@1.29b-2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-15534	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm4
Low	UBUNTU-CVE-2024-32020	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm1
Low	PYSEC-2026-2275	requests@2.25.1	2.33.0
Low	UBUNTU-CVE-2025-14017	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm7
Low	UBUNTU-CVE-2025-22134	vim@2:8.0.1453-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2024-10041	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
Low	UBUNTU-CVE-2024-43802	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm10
Low	UBUNTU-CVE-2026-50812	sqlite3@3.22.0-1ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2023-4641	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-28421	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-46483	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm19
Low	UBUNTU-CVE-2026-18938	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1
Low	UBUNTU-CVE-2026-28419	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-22795	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	UBUNTU-CVE-2025-27613	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm4
Low	UBUNTU-CVE-2025-5278	coreutils@8.28-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-54370	acl@2.2.52-3build1	no fix listed
Low	UBUNTU-CVE-2021-36086	libsepol@2.7-1	2.7-1ubuntu0.1
Low	UBUNTU-CVE-2026-50219	expat@2.2.5-3ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.26.1-6ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.2.5-3ubuntu0.2	no fix listed
Low	GHSA-r73j-pqj5-w3x7	pillow@8.4.0	12.2.0
Low	UBUNTU-CVE-2025-24014	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm13
Low	UBUNTU-CVE-2026-56131	expat@2.2.5-3ubuntu0.2	no fix listed
Low	GHSA-jp4c-xjxw-mgf9	pip@21.1.3	26.1
Low	UBUNTU-CVE-2026-47167	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm20
Low	UBUNTU-CVE-2026-55892	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm21
Low	UBUNTU-CVE-2024-56433	shadow@1:4.5-1ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.6-5ubuntu1	no fix listed
Low	GHSA-wjx4-4jcj-g98j	pillow@8.4.0	12.2.0
Low	UBUNTU-CVE-2026-40226	systemd@237-3ubuntu10.47	no fix listed
Low	UBUNTU-CVE-2026-28418	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm14
Low	UBUNTU-CVE-2026-59857	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm22
Low	GHSA-fhv5-28vv-h8m8	pyjwt@2.4.0	2.13.0
Low	UBUNTU-CVE-2026-89092	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-18374	glibc@2.27-3ubuntu1.4	no fix listed
Low	GHSA-c58j-88f5-h53f	pycares@4.0.0	4.2.0
Low	UBUNTU-CVE-2025-26603	vim@2:8.0.1453-1ubuntu1.4	2:8.0.1453-1ubuntu1.13+esm12

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.12.4latest	—	sha-c2b76ca	1223242428	11,658

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/business-partner-agent/bpa.svg)](https://charts.stackradar.io/charts/business-partner-agent/bpa)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.