kube-acp-stack Helm chart

Name: kube-acp-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 14 Sept 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Latest 2.28.0 1 month agoApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.28.0 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,783 findings — 11 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

20,90011213011,450

1,783 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.28.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	452760	1,755
library/alpine	latest	0046	149
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	1144201	2,673
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	35171989	12,565
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	2649190	3,276
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,435 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	BIT-redis-2025-49844	redis@7.4.3-0	6.2.20
Critical	GHSA-7488-6r32-c95qKEV	litellm@1.58.2	1.84.0
Critical	RHSA-2024:2722	glibc@2.28-211.el8	0:2.28-236.el8_9.13
Critical	RHSA-2024:3588	glibc@2.17-326.el7_9	0:2.17-326.el7_9.3
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.11.1+dfsg-1ubuntu0.2	2.11.1+dfsg-1ubuntu0.3
Critical	RHSA-2023:5455KEV	glibc@2.28-211.el8	0:2.28-225.el8_8.6
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.47.0-r0	1.47.0-r2
Critical	RHSA-2023:5837KEV	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-5.el8_8
Critical	RHSA-2025:12349	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.5
High	DEBIAN-CVE-2025-15467	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.19	no fix listed
High	ALPINE-CVE-2023-0286	openssl@1.1.1s-r0	1.1.1t-r0
High	GHSA-x4qr-2fvf-3mr5	cryptography@3.4.8	39.0.1
High	RHSA-2023:1335	openssl@1:1.0.2k-25.el7_9	1:1.0.2k-26.el7_9
High	RHSA-2025:1601KEV	gcc@4.8.5-44.el7	0:4.8.5-45.el7_9
High	ALPINE-CVE-2023-2650	openssl@1.1.1s-r0	1.1.1u-r0
High	ALPINE-CVE-2023-48795	libssh2@1.10.0-r2	1.11.0-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f
High	RHSA-2024:0628	libssh@0.9.6-3.el8	0:0.9.6-13.el8_9
High	GHSA-53mr-6c8q-9789	litellm@1.58.2	1.83.0
High	RHSA-2024:5654	curl@7.61.1-25.el8_7.3	0:7.61.1-34.el8_10.2
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.23.0
High	RHSA-2024:4252	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.1
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.19	no fix listed
High	RHSA-2024:8788	krb5@1.15.1-54.el7_9	0:1.15.1-55.el7_9.3
High	ALPINE-CVE-2022-4450	openssl@1.1.1s-r0	1.1.1t-r0
Medium	RHSA-2023:1095	zlib@1.2.7-20.el7_9	0:1.2.7-21.el7_9
Medium	GO-2024-2687	stdlib@go1.13.14	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	GHSA-r4m4-pmvw-m6j5	github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82	0.10.0
Medium	RHSA-2022:8640	krb5@1.15.1-54.el7_9	0:1.15.1-55.el7_9
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.19	no fix listed
Medium	UBUNTU-CVE-2019-2126	aom@3.3.0-1	no fix listed
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1s-r0	1.1.1t-r0
Medium	RHSA-2025:8314	zlib@1.2.7-20.el7_9	0:1.2.7-21.el7_9.1
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.0.0-20210520170846-37e1c6afe023
Medium	DSA-6113-1	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	DEBIAN-CVE-2019-1010022	glibc@2.36-9+deb12u10	no fix listed
Medium	UBUNTU-CVE-2020-10735	python3.10@3.10.12-1~22.04.9	no fix listed
Medium	DEBIAN-CVE-2023-45853	zlib@1:1.2.13.dfsg-1	no fix listed
Medium	RHSA-2026:58563	openssl@1:1.0.2k-25.el7_9	1:1.0.2k-26.el7_9.2
Medium	BIT-redis-2025-46817	redis@7.4.3-0	6.2.20
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.1.0	1.11.1
Medium	DEBIAN-CVE-2026-45447	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Medium	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u10	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
Medium	UBUNTU-CVE-2019-9543	poppler@22.02.0-2ubuntu0.6	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.28.0latest	1 month ago	—	11213011,450	20,900

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.