kube-acp-stack 2.29.1 Helm chart

Name: kube-acp-stack Helm chart 2.29.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 6 Oct 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.1 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.1 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,880 findings — 13 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

24,27813214461,400

1,880 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362963	1,816
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2055206	3,177
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	442391,009	14,451
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	37117118	4,352
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,511 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-27135	nghttp2@1.43.0-1ubuntu0.2	1.43.0-1ubuntu0.3
Medium	USN-8039-1	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.4
Medium	DEBIAN-CVE-2026-7383	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Medium	UBUNTU-CVE-2026-44432	python-pip@22.0.2+dfsg-1ubuntu0.5	no fix listed
Medium	RHSA-2023:4523	curl@7.61.1-25.el8_7.3	0:7.61.1-30.el8_8.3
Medium	GHSA-63hw-fmq6-xxg2	aiohttp@3.11.13	3.14.1
Medium	UBUNTU-CVE-2019-8396	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	GHSA-whj4-6x5x-4v2j	pillow@11.1.0	12.2.0
Medium	UBUNTU-CVE-2018-17437	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	USN-7600-1	libxslt@1.1.34-4ubuntu0.22.04.1	1.1.34-4ubuntu0.22.04.4
Medium	BIT-redis-2025-21605	redis@7.4.3-0	6.2.18
Medium	DEBIAN-CVE-2026-3833	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2018-17432	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2018-17436	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-w7pp-m8wf-vj6r	cryptography@3.4.8	39.0.1
Medium	UBUNTU-CVE-2015-9019	libxslt@1.1.34-4ubuntu0.22.04.1	no fix listed
Medium	UBUNTU-CVE-2026-11940	python3.10@3.10.12-1~22.04.9	no fix listed
Medium	UBUNTU-CVE-2026-4738	gdal@3.4.1+dfsg-1build4	no fix listed
Medium	GHSA-xcgm-r5h9-7989	aiohttp@3.11.13	3.14.1
Medium	RHSA-2026:61766	glib2@2.56.4-159.el8	0:2.56.4-177.el8_10
Medium	RHSA-2026:65773	glib2@2.56.1-9.el7_9	0:2.56.1-13.el7_9.1
Medium	GO-2026-4601	stdlib@go1.13.14	1.25.8
Medium	UBUNTU-CVE-2018-17439	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2018-17433	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	UBUNTU-CVE-2026-63383	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.1
Medium	UBUNTU-CVE-2026-63384	libevent@2.1.12-stable-1build3	2.1.12-stable-1ubuntu0.1
Medium	PYSEC-2026-2132	click@8.0.3	8.3.3
Medium	GO-2026-4981	stdlib@go1.13.14	1.25.10
Medium	DEBIAN-CVE-2026-28390	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	RHSA-2026:38503	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6
Medium	UBUNTU-CVE-2020-25658	python-rsa@4.8-1	no fix listed
Medium	UBUNTU-CVE-2018-15671	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u10	no fix listed
Low	GO-2026-4977	stdlib@go1.13.14	1.25.10
Low	GO-2021-0241	stdlib@go1.13.14	1.15.13
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2024-32609	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-6653	libxml2@2.9.13+dfsg-1ubuntu0.5	2.9.13+dfsg-1ubuntu0.12
Low	UBUNTU-CVE-2026-19445	python3.10@3.10.12-1~22.04.9	no fix listed
Low	UBUNTU-CVE-2026-9669	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.16
Low	GO-2026-4986	stdlib@go1.13.14	1.25.10
Low	UBUNTU-CVE-2019-8398	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2024-3651	python-pip@22.0.2+dfsg-1ubuntu0.5	22.0.2+dfsg-1ubuntu0.7
Low	RHSA-2023:3106	curl@7.61.1-25.el8_7.3	0:7.61.1-30.el8_8.2
Low	GO-2026-4918	stdlib@go1.13.14	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.53.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.1latest	yesterday	—	13214461,400	24,278
2.29.0	8 days ago	—	13214461,400	24,278
2.28.0	2 months ago	—	13214461,400	24,278

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.