kube-acp-stack 2.29.0 Helm chart

Name: kube-acp-stack Helm chart 2.29.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 29 Sept 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.0 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.0 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,815 findings — 10 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

21,64910213431,441

1,815 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362962	1,811
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2053197	2,857
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	34198996	13,203
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	1757182	3,296
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,130 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-52886	poppler@22.02.0-2ubuntu0.6	22.02.0-2ubuntu0.9
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	UBUNTU-CVE-2025-21579	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.42-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-21580	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.42-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-12781	python3.10@3.10.12-1~22.04.9	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-59848	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.8
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	UBUNTU-CVE-2026-88806	libx11@2:1.7.5-1ubuntu0.3	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
Low	UBUNTU-CVE-2026-22009	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.2
Low	UBUNTU-CVE-2026-22017	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.46-0ubuntu0.22.04.2
Low	UBUNTU-CVE-2026-6666	pgbouncer@1.23.1-1.pgdg22.04+1	no fix listed
Low	UBUNTU-CVE-2025-1352	elfutils@0.186-1build1	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6
Low	UBUNTU-CVE-2026-73077	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.35
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u5
Low	UBUNTU-CVE-2026-21968	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.45-0ubuntu0.22.04.1
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	UBUNTU-CVE-2026-86140	libxml2@2.9.13+dfsg-1ubuntu0.5	2.9.13+dfsg-1ubuntu0.13
Low	PYSEC-2026-3721	pip@22.0.2	26.2
Low	UBUNTU-CVE-2026-13346	python-pip@22.0.2+dfsg-1ubuntu0.5	no fix listed
Low	GHSA-69f9-5gxw-wvc2	aiohttp@3.11.13	3.13.3
Low	UBUNTU-CVE-2026-26269	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.26
Low	GO-2023-2375	stdlib@go1.13.14	1.20.0
Low	UBUNTU-CVE-2025-15079	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.22
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.1.5	3.1.6
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.38.0
Low	GO-2023-1569	stdlib@go1.13.14	1.19.6
Low	GHSA-mq26-g339-26xf	pip@22.0.2	23.3
Low	UBUNTU-CVE-2025-53053	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.44-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-53054	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.44-0ubuntu0.22.04.1
Low	GO-2022-1143	stdlib@go1.13.14	1.18.9
Low	GHSA-9548-qrrj-x5pj	aiohttp@3.11.13	3.12.14
Low	UBUNTU-CVE-2026-69186	c-ares@1.18.1-1ubuntu0.22.04.3	no fix listed
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.29.1	1.83.1
Low	UBUNTU-CVE-2026-73076	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.35
Low	GO-2023-2382	stdlib@go1.13.14	1.20.12
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	RHSA-2023:3840	sqlite@3.26.0-17.el8_7	0:3.26.0-18.el8_8
Low	UBUNTU-CVE-2026-73072	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.35
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.11.13	3.14.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	UBUNTU-CVE-2026-6429	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2026-58051	libssh2@1.10.0-3	1.10.0-3ubuntu0.1
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
Low	UBUNTU-CVE-2025-15367	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.15
Low	UBUNTU-CVE-2026-50738	pglogical@2.4.5-1.pgdg22.04+1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.0latest	yesterday	—	10213431,441	21,649
2.28.0	2 months ago	—	10213431,441	21,649

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.