kube-acp-stack 2.28.0 Helm chart

Name: kube-acp-stack Helm chart 2.28.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 14 Sept 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.28.0 1 month agoApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.28.0 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,783 findings — 11 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

20,90011213011,450

1,783 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.28.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	452760	1,755
library/alpine	latest	0046	149
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	1144201	2,673
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	35171989	12,565
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	2649190	3,276
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,435 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-xgmm-8j9v-c9wx	pyjwt@2.3.0	2.13.0
Low	UBUNTU-CVE-2026-48526	pyjwt@2.3.0-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-0966	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.6
Low	UBUNTU-CVE-2025-14512	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7
Low	GO-2022-0537	stdlib@go1.13.14	1.17.13
Low	GO-2021-0234	stdlib@go1.13.14	1.15.9
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u2	no fix listed
Low	RHSA-2024:3233	libssh@0.9.6-3.el8	0:0.9.6-14.el8
Low	RHSA-2026:62218	libssh@0.9.6-3.el8	0:0.9.6-17.el8_10
Low	UBUNTU-CVE-2026-59843	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.8
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u10	no fix listed
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/square/go-jose.v2@v2.5.1	no fix listed
Low	UBUNTU-CVE-2025-50078	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-40164	jq@1.6-2.1ubuntu3	1.6-2.1ubuntu3.2
Low	UBUNTU-CVE-2026-60163	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2025-12819	pgbouncer@1.23.1-1.pgdg22.04+1	no fix listed
Low	UBUNTU-CVE-2023-39329	openjpeg2@2.4.0-6ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2023-32570	dav1d@0.9.2-1	no fix listed
Low	UBUNTU-CVE-2026-58050	libssh2@1.10.0-3	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-60315	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.4
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	UBUNTU-CVE-2022-27943	gdb@12.1-0ubuntu1~22.04.2	no fix listed
Low	UBUNTU-CVE-2025-64720	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.1
Low	UBUNTU-CVE-2026-8458	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.25
Low	UBUNTU-CVE-2026-76641	expat@2.4.7-1ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2025-50083	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-6253	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2025-50082	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.6.1	0.6.4
Low	UBUNTU-CVE-2026-33164	libde265@1.0.8-1ubuntu0.3	1.0.8-1ubuntu0.3+esm2
Low	UBUNTU-CVE-2026-59884	pyasn1@0.4.8-1	0.4.8-1ubuntu0.3
Low	RHSA-2026:1608	glib2@2.56.1-9.el7_9	0:2.56.1-11.el7_9
Low	UBUNTU-CVE-2025-13601	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2026-33412	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.27
Low	GO-2023-1703	stdlib@go1.13.14	1.19.8
Low	GHSA-9hjg-9r4m-mvj7	requests@2.25.1	2.32.4
Low	UBUNTU-CVE-2024-47081	python-pip@22.0.2+dfsg-1ubuntu0.5	22.0.2+dfsg-1ubuntu0.7
Low	UBUNTU-CVE-2024-47081	requests@2.25.1+dfsg-2ubuntu0.1	2.25.1+dfsg-2ubuntu0.3
Low	GO-2021-0241	stdlib@go1.13.14	1.15.13
Low	UBUNTU-CVE-2025-5222	icu@70.1-2	no fix listed
Low	UBUNTU-CVE-2023-0996	libheif@1.12.0-2build1	1.12.0-2ubuntu0.1~esm1
Low	RHSA-2023:3839	libssh@0.9.6-3.el8	0:0.9.6-10.el8_8
Low	GO-2022-0521	stdlib@go1.13.14	1.17.12
Low	RHSA-2026:19566	glib2@2.56.1-9.el7_9	0:2.56.1-12.el7_9
Low	UBUNTU-CVE-2025-14087	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7
Low	GHSA-w2fm-2cpv-w7v5	aiohttp@3.11.13	3.13.4
Low	UBUNTU-CVE-2026-41411	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.29
Low	GHSA-8qvm-5x2c-j2w7	protobuf@5.29.3	5.29.5
Low	UBUNTU-CVE-2026-63387	libevent@2.1.12-stable-1build3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.28.0latest	1 month ago	—	11213011,450	20,900

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.