kube-acp-stack 2.29.1 Helm chart

Name: kube-acp-stack Helm chart 2.29.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 6 Oct 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.1 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.1 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,880 findings — 13 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

24,27813214461,400

1,880 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362963	1,816
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2055206	3,177
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	442391,009	14,451
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	37117118	4,352
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

358 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	PYSEC-2026-2098	aiohttp@3.11.13	3.13.4
Medium	GO-2023-1878	stdlib@go1.13.14	1.19.11
Medium	GHSA-7gcm-g887-7qv7	protobuf@5.29.3	5.29.6
Medium	GO-2022-0525	stdlib@go1.13.14	1.17.12
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
Medium	GHSA-4jcj-7x88-m979	litellm@1.58.2	1.84.0
Medium	UBUNTU-CVE-2026-11972	python3.10@3.10.12-1~22.04.9	no fix listed
Medium	USN-8093-1	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7
Medium	GO-2022-0520	stdlib@go1.13.14	1.17.12
Medium	GHSA-58pv-8j8x-9vj2	jaraco-context@5.3.0	6.1.0
Medium	GHSA-jr27-m4p2-rc6r	pyasn1@0.6.1	0.6.3
Medium	UBUNTU-CVE-2026-30922	pyasn1@0.4.8-1	0.4.8-1ubuntu0.2
Medium	GHSA-jm66-cg57-jjv5	azure-core@1.32.0	1.38.0
Medium	DEBIAN-CVE-2026-63072	openssl@3.0.15-1~deb12u1	3.0.22-1~deb12u1
Medium	GHSA-3rq5-2g8h-59hc	dnspython@2.1.0	2.6.1
Medium	BIT-redis-2025-46819	redis@7.4.3-0	6.2.20
Medium	DEBIAN-CVE-2025-69420	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	RHSA-2025:17415	gnutls@3.6.16-6.el8_7	0:3.6.16-8.el8_10.4
Medium	UBUNTU-CVE-2024-1580	dav1d@0.9.2-1	no fix listed
Medium	UBUNTU-CVE-2026-8927	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.25
Medium	RHSA-2026:7667	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.2
Medium	UBUNTU-CVE-2026-27135	nghttp2@1.43.0-1ubuntu0.2	1.43.0-1ubuntu0.3
Medium	USN-8039-1	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.4
Medium	DEBIAN-CVE-2026-7383	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Medium	UBUNTU-CVE-2026-44432	python-pip@22.0.2+dfsg-1ubuntu0.5	no fix listed
Medium	RHSA-2023:4523	curl@7.61.1-25.el8_7.3	0:7.61.1-30.el8_8.3
Medium	GHSA-63hw-fmq6-xxg2	aiohttp@3.11.13	3.14.1
Medium	UBUNTU-CVE-2019-8396	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	GHSA-whj4-6x5x-4v2j	pillow@11.1.0	12.2.0
Medium	UBUNTU-CVE-2018-17437	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	USN-7600-1	libxslt@1.1.34-4ubuntu0.22.04.1	1.1.34-4ubuntu0.22.04.4
Medium	BIT-redis-2025-21605	redis@7.4.3-0	6.2.18
Medium	DEBIAN-CVE-2026-3833	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2018-17432	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2018-17436	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-w7pp-m8wf-vj6r	cryptography@3.4.8	39.0.1
Medium	UBUNTU-CVE-2015-9019	libxslt@1.1.34-4ubuntu0.22.04.1	no fix listed
Medium	UBUNTU-CVE-2026-11940	python3.10@3.10.12-1~22.04.9	no fix listed
Medium	UBUNTU-CVE-2026-4738	gdal@3.4.1+dfsg-1build4	no fix listed
Medium	GHSA-xcgm-r5h9-7989	aiohttp@3.11.13	3.14.1
Medium	RHSA-2026:61766	glib2@2.56.4-159.el8	0:2.56.4-177.el8_10
Medium	RHSA-2026:65773	glib2@2.56.1-9.el7_9	0:2.56.1-13.el7_9.1
Medium	GO-2026-4601	stdlib@go1.13.14	1.25.8
Medium	UBUNTU-CVE-2018-17439	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2018-17433	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2026-63383	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.1
Medium	UBUNTU-CVE-2026-63384	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.1latest	yesterday	—	13214461,400	24,278
2.29.0	8 days ago	—	13214461,400	24,278
2.28.0	2 months ago	—	13214461,400	24,278

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.