kube-acp-stack 2.29.0 Helm chart

Name: kube-acp-stack Helm chart 2.29.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 30 Sept 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.0 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.0 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,852 findings — 10 critical, 22 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

21,88310223411,479

1,852 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362962	1,812
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2053202	2,879
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	341971,029	13,411
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	1856182	3,299
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,488 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-13346	python-pip@22.0.2+dfsg-1ubuntu0.5	no fix listed
Low	GHSA-69f9-5gxw-wvc2	aiohttp@3.11.13	3.13.3
Low	UBUNTU-CVE-2026-26269	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.26
Low	GO-2023-2375	stdlib@go1.13.14	1.20.0
Low	UBUNTU-CVE-2025-15079	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.22
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.1.5	3.1.6
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.38.0
Low	GO-2023-1569	stdlib@go1.13.14	1.19.6
Low	GHSA-mq26-g339-26xf	pip@22.0.2	23.3
Low	UBUNTU-CVE-2025-53053	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.44-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-53054	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.44-0ubuntu0.22.04.1
Low	GO-2022-1143	stdlib@go1.13.14	1.18.9
Low	GHSA-9548-qrrj-x5pj	aiohttp@3.11.13	3.12.14
Low	UBUNTU-CVE-2026-69186	c-ares@1.18.1-1ubuntu0.22.04.3	no fix listed
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.29.1	1.83.1
Low	UBUNTU-CVE-2026-73076	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.35
Low	GO-2023-2382	stdlib@go1.13.14	1.20.12
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	RHSA-2023:3840	sqlite@3.26.0-17.el8_7	0:3.26.0-18.el8_8
Low	UBUNTU-CVE-2026-73072	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.35
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.11.13	3.14.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	UBUNTU-CVE-2026-6429	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2026-58051	libssh2@1.10.0-3	1.10.0-3ubuntu0.1
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
Low	UBUNTU-CVE-2025-15367	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.15
Low	UBUNTU-CVE-2026-50738	pglogical@2.4.5-1.pgdg22.04+1	no fix listed
Low	UBUNTU-CVE-2026-3783	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.23
Low	UBUNTU-CVE-2026-102272	pyjwt@2.3.0-1ubuntu0.2	no fix listed
Low	GO-2022-1038	stdlib@go1.13.14	1.18.7
Low	GO-2024-2599	stdlib@go1.13.14	1.21.8
Low	UBUNTU-CVE-2025-50085	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.43-0ubuntu0.22.04.1
Low	DEBIAN-CVE-2026-78410	util-linux@2.38.1-5+deb12u3	no fix listed
Low	UBUNTU-CVE-2026-4873	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2025-30722	mysql-8.0@8.0.41-0ubuntu0.22.04.1	8.0.42-0ubuntu0.22.04.1
Low	DEBIAN-CVE-2026-89160	pcre2@10.42-1	10.42-1+deb12u1
Low	RHSA-2026:69655	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.8
Low	UBUNTU-CVE-2026-102274	pyjwt@2.3.0-1ubuntu0.2	no fix listed
Low	RHSA-2026:1677	gnupg2@2.0.22-5.el7_5	0:2.0.22-5.el7_9.1
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5
Low	GO-2024-3106	stdlib@go1.13.14	1.22.7
Low	UBUNTU-CVE-2025-50952	openjpeg2@2.4.0-6ubuntu0.3	2.4.0-6ubuntu0.4
Low	UBUNTU-CVE-2026-4360	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.18
Low	UBUNTU-CVE-2026-15588	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.10
Low	UBUNTU-CVE-2026-1965	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.23
Low	GO-2023-1570	stdlib@go1.13.14	1.19.6
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-gh32-pc56-4c96	github.com/jaegertracing/jaeger@v1.17.0	1.18.1
Low	UBUNTU-CVE-2026-102266	pyjwt@2.3.0-1ubuntu0.2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.0latest	yesterday	—	10223411,479	21,883
2.28.0	2 months ago	—	10223411,479	21,883

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.