kube-acp-stack 2.29.1 Helm chart

Name: kube-acp-stack Helm chart 2.29.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 6 Oct 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.1 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.1 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,880 findings — 13 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

24,27813214461,400

1,880 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362963	1,816
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2055206	3,177
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	442391,009	14,451
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	37117118	4,352
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,511 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-m7wr-2xf7-cm9p	github.com/jackc/pgx@v3.6.2+incompatible	4.18.2
Medium	UBUNTU-CVE-2018-13875	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2025-27113	libxml2@2.9.13+dfsg-1ubuntu0.5	2.9.13+dfsg-1ubuntu0.6
Medium	UBUNTU-CVE-2026-33416	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.5
Medium	GO-2024-2609	stdlib@go1.13.14	1.21.8
Medium	RHSA-2023:5249	ncurses@6.1-9.20180224.el8	0:6.1-9.20180224.el8_8.1
Medium	GO-2024-3107	stdlib@go1.13.14	1.22.7
Medium	GHSA-vqfr-h8mv-ghfj	h11@0.14.0	0.16.0
Medium	UBUNTU-CVE-2026-18924	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.29
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd	0.0.0-20220412211240-33da011f77ad
Medium	GO-2022-0493	stdlib@go1.13.14	1.17.10
Medium	DEBIAN-CVE-2026-31790	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82	0.24.0
Medium	RHSA-2025:11327	glib2@2.56.4-159.el8	0:2.56.4-166.el8_10
Medium	UBUNTU-CVE-2026-63385	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.1
Medium	RHBA-2024:5736	ca-certificates@2022.2.54-80.2.el8_6	0:2024.2.69_v8.0.303-80.0.el8_10
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.29.1	1.82.2
Medium	UBUNTU-CVE-2025-69720	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.2
Medium	RHSA-2026:51183	glib2@2.56.1-9.el7_9	0:2.56.1-13.el7_9
Medium	UBUNTU-CVE-2026-58016	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.10
Medium	PYSEC-2023-254	cryptography@3.4.8	41.0.6
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.6.0	1.8.3
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Medium	DEBIAN-CVE-2026-9076	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Medium	UBUNTU-CVE-2026-6100	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.16
Medium	DEBIAN-CVE-2025-69421	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	GO-2023-1751	stdlib@go1.13.14	1.19.9
Medium	GO-2023-1753	stdlib@go1.13.14	1.19.9
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.29.1	1.83.1
Medium	PYSEC-2026-2098	aiohttp@3.11.13	3.13.4
Medium	GO-2023-1878	stdlib@go1.13.14	1.19.11
Medium	GHSA-7gcm-g887-7qv7	protobuf@5.29.3	5.29.6
Medium	GO-2022-0525	stdlib@go1.13.14	1.17.12
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
Medium	GHSA-4jcj-7x88-m979	litellm@1.58.2	1.84.0
Medium	UBUNTU-CVE-2026-11972	python3.10@3.10.12-1~22.04.9	no fix listed
Medium	USN-8093-1	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7
Medium	GO-2022-0520	stdlib@go1.13.14	1.17.12
Medium	GHSA-58pv-8j8x-9vj2	jaraco-context@5.3.0	6.1.0
Medium	GHSA-jr27-m4p2-rc6r	pyasn1@0.6.1	0.6.3
Medium	UBUNTU-CVE-2026-30922	pyasn1@0.4.8-1	0.4.8-1ubuntu0.2
Medium	GHSA-jm66-cg57-jjv5	azure-core@1.32.0	1.38.0
Medium	DEBIAN-CVE-2026-63072	openssl@3.0.15-1~deb12u1	3.0.22-1~deb12u1
Medium	GHSA-3rq5-2g8h-59hc	dnspython@2.1.0	2.6.1
Medium	BIT-redis-2025-46819	redis@7.4.3-0	6.2.20
Medium	DEBIAN-CVE-2025-69420	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Medium	RHSA-2025:17415	gnutls@3.6.16-6.el8_7	0:3.6.16-8.el8_10.4
Medium	UBUNTU-CVE-2024-1580	dav1d@0.9.2-1	no fix listed
Medium	UBUNTU-CVE-2026-8927	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.25
Medium	RHSA-2026:7667	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.1latest	yesterday	—	13214461,400	24,278
2.29.0	8 days ago	—	13214461,400	24,278
2.28.0	2 months ago	—	13214461,400	24,278

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.