kube-acp-stack 2.29.1 Helm chart

Name: kube-acp-stack Helm chart 2.29.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 6 Oct 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.1 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.1 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,880 findings — 13 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

24,27813214461,400

1,880 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362963	1,816
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2055206	3,177
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	442391,009	14,451
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	37117118	4,352
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

358 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.26.5	2.6.0
Medium	USN-8344-3	python-pip@22.0.2+dfsg-1ubuntu0.5	22.0.2+dfsg-1ubuntu0.7+esm3
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	UBUNTU-CVE-2018-17438	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	DEBIAN-CVE-2026-42009	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2024-26461	krb5@1.19.2-2ubuntu0.5	1.19.2-2ubuntu0.6
Medium	GO-2024-3106	stdlib@go1.13.14	1.22.7
Medium	DEBIAN-CVE-2019-1010024	glibc@2.36-9+deb12u10	no fix listed
Medium	DEBIAN-CVE-2026-33846	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2019-6988	openjpeg2@2.4.0-6ubuntu0.3	no fix listed
Medium	UBUNTU-CVE-2023-6237	openssl@3.0.2-0ubuntu1.19	no fix listed
Medium	UBUNTU-CVE-2022-41409	pcre2@10.39-3ubuntu0.1	no fix listed
Medium	GHSA-3ww4-gg4f-jr7f	cryptography@3.4.8	42.0.0
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
Medium	GO-2023-1570	stdlib@go1.13.14	1.19.6
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	UBUNTU-CVE-2024-9143	openssl@3.0.2-0ubuntu1.19	no fix listed
Medium	RHSA-2023:5615	libssh2@1.8.0-4.el7	0:1.8.0-4.el7_9.1
Medium	DEBIAN-CVE-2025-32990	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u5
Medium	UBUNTU-CVE-2026-39979	jq@1.6-2.1ubuntu3	1.6-2.1ubuntu3.2
Medium	DEBIAN-CVE-2026-8376	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Medium	GHSA-m7wr-2xf7-cm9p	github.com/jackc/pgx@v3.6.2+incompatible	4.18.2
Medium	UBUNTU-CVE-2018-13875	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2025-27113	libxml2@2.9.13+dfsg-1ubuntu0.5	2.9.13+dfsg-1ubuntu0.6
Medium	UBUNTU-CVE-2026-33416	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.5
Medium	GO-2024-2609	stdlib@go1.13.14	1.21.8
Medium	RHSA-2023:5249	ncurses@6.1-9.20180224.el8	0:6.1-9.20180224.el8_8.1
Medium	GO-2024-3107	stdlib@go1.13.14	1.22.7
Medium	GHSA-vqfr-h8mv-ghfj	h11@0.14.0	0.16.0
Medium	UBUNTU-CVE-2026-18924	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.29
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd	0.0.0-20220412211240-33da011f77ad
Medium	GO-2022-0493	stdlib@go1.13.14	1.17.10
Medium	DEBIAN-CVE-2026-31790	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82	0.24.0
Medium	RHSA-2025:11327	glib2@2.56.4-159.el8	0:2.56.4-166.el8_10
Medium	UBUNTU-CVE-2026-63385	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.1
Medium	RHBA-2024:5736	ca-certificates@2022.2.54-80.2.el8_6	0:2024.2.69_v8.0.303-80.0.el8_10
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.29.1	1.82.2
Medium	UBUNTU-CVE-2025-69720	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.2
Medium	RHSA-2026:51183	glib2@2.56.1-9.el7_9	0:2.56.1-13.el7_9
Medium	UBUNTU-CVE-2026-58016	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.10
Medium	PYSEC-2023-254	cryptography@3.4.8	41.0.6
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.6.0	1.8.3
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Medium	DEBIAN-CVE-2026-9076	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Medium	UBUNTU-CVE-2026-6100	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.16
Medium	DEBIAN-CVE-2025-69421	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	GO-2023-1751	stdlib@go1.13.14	1.19.9
Medium	GO-2023-1753	stdlib@go1.13.14	1.19.9
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.29.1	1.83.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.1latest	yesterday	—	13214461,400	24,278
2.29.0	8 days ago	—	13214461,400	24,278
2.28.0	2 months ago	—	13214461,400	24,278

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.