kube-acp-stack 2.29.1 Helm chart

Name: kube-acp-stack Helm chart 2.29.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 6 Oct 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.1 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.1 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,880 findings — 13 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

24,27813214461,400

1,880 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362963	1,816
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2055206	3,177
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	442391,009	14,451
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	37117118	4,352
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,511 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-12819	pgbouncer@1.23.1-1.pgdg22.04+1	no fix listed
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u10	no fix listed
Low	UBUNTU-CVE-2023-32570	dav1d@0.9.2-1	no fix listed
Low	GO-2022-0515	stdlib@go1.13.14	1.17.12
Low	GO-2025-3420	stdlib@go1.13.14	1.22.11
Low	UBUNTU-CVE-2026-58050	libssh2@1.10.0-3	1.10.0-3ubuntu0.1
Low	GO-2025-3956	stdlib@go1.13.14	1.23.12
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	UBUNTU-CVE-2022-27943	gdb@12.1-0ubuntu1~22.04.2	no fix listed
Low	USN-8549-1	python-idna@3.3-1ubuntu0.1	3.3-1ubuntu0.2
Low	GO-2026-4946	stdlib@go1.13.14	1.25.9
Low	UBUNTU-CVE-2026-34982	vim@2:8.2.3995-1ubuntu2.23	2:8.2.3995-1ubuntu2.27
Low	UBUNTU-CVE-2025-64720	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.1
Low	UBUNTU-CVE-2026-76641	expat@2.4.7-1ubuntu0.5	2.4.7-1ubuntu0.9
Low	GHSA-3cv6-jpf6-8222	litellm@1.58.2	1.88.6
Low	GHSA-ffc3-869f-jxw9	pyjwt@2.3.0	2.14.0
Low	UBUNTU-CVE-2026-102268	pyjwt@2.3.0-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-6276	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	RHSA-2026:1608	glib2@2.56.1-9.el7_9	0:2.56.1-11.el7_9
Low	UBUNTU-CVE-2025-13601	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7
Low	GO-2025-3595	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.38.0
Low	USN-7675-1	poppler@22.02.0-2ubuntu0.6	22.02.0-2ubuntu0.9
Low	GHSA-9hjg-9r4m-mvj7	requests@2.25.1	2.32.4
Low	UBUNTU-CVE-2024-47081	requests@2.25.1+dfsg-2ubuntu0.1	2.25.1+dfsg-2ubuntu0.3
Low	UBUNTU-CVE-2024-47081	python-pip@22.0.2+dfsg-1ubuntu0.5	22.0.2+dfsg-1ubuntu0.7
Low	UBUNTU-CVE-2025-5222	icu@70.1-2	no fix listed
Low	UBUNTU-CVE-2023-0996	libheif@1.12.0-2build1	1.12.0-2ubuntu0.1~esm1
Low	RHSA-2023:3839	libssh@0.9.6-3.el8	0:0.9.6-10.el8_8
Low	RHSA-2026:19566	glib2@2.56.1-9.el7_9	0:2.56.1-12.el7_9
Low	UBUNTU-CVE-2025-14087	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2026-88373	libde265@1.0.8-1ubuntu0.3	no fix listed
Low	GHSA-w2fm-2cpv-w7v5	aiohttp@3.11.13	3.13.4
Low	USN-8362-1	xz-utils@5.2.5-2ubuntu1	5.2.5-2ubuntu1.1
Low	UBUNTU-CVE-2026-63387	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.2
Low	GHSA-w2mh-qq9q-453x	litellm@1.58.2	no fix listed
Low	RHSA-2025:1352	krb5@1.15.1-54.el7_9	0:1.15.1-55.el7_9.4
Low	RHSA-2024:0647	rpm@4.14.3-24.el8_7	0:4.14.3-28.el8_9
Low	UBUNTU-CVE-2026-45382	libde265@1.0.8-1ubuntu0.3	1.0.8-1ubuntu0.3+esm2
Low	GHSA-8qvm-5x2c-j2w7	protobuf@5.29.3	5.29.5
Low	UBUNTU-CVE-2026-8328	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.16
Low	GHSA-hg6j-4rv6-33pg	aiohttp@3.11.13	3.14.0
Low	UBUNTU-CVE-2026-5545	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2026-45383	libde265@1.0.8-1ubuntu0.3	1.0.8-1ubuntu0.3+esm2
Low	UBUNTU-CVE-2026-4519	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.16
Low	RHSA-2026:58938	sqlite@3.26.0-17.el8_7	0:3.26.0-21.el8_10
Low	UBUNTU-CVE-2026-11822	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.6
Low	UBUNTU-CVE-2021-3515	pglogical@2.4.5-1.pgdg22.04+1	no fix listed
Low	GHSA-pwv6-vv43-88gr	pillow@11.1.0	12.2.0
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2024-2598	stdlib@go1.13.14	1.21.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.1latest	yesterday	—	13214461,400	24,278
2.29.0	8 days ago	—	13214461,400	24,278
2.28.0	2 months ago	—	13214461,400	24,278

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.