kube-ecp-stack 2.5.1 Helm chart

Name: kube-ecp-stack Helm chart 2.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

emqx-operator

Scored 14 Sept 2026

A Helm chart stack for EMQX ECP

Version 2.5.1 11 days agoapp version 2.5.1 0Artifact Hub

kube-ecp-stack 2.5.1 deploys 16 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, emqx/neuronex-operator and 12 more. Across the 14 measured, 2,257 findings — 9 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

23,6859223251,901

2,257 findings over 14 of 16 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.16.1	00887	794
quay.io/jetstack/cert-manager-controller	v1.16.1	009100	935
quay.io/jetstack/cert-manager-webhook	v1.16.1	00994	878
emqx/neuronex-operator	0.1.0-rc.8	—	unmeasured
emqxecp/otelcol	2.5.0	0223132	1,566
quay.io/prometheus/pushgateway	v1.10.0	00989	825
quay.io/prometheus-operator/prometheus-config-reloader	v0.78.1	00991	837
quay.io/prometheus/prometheus	v2.55.1	0011108	1,008
emqx/ecp-emqx-agent-downloader	2.5.1	0118109	1,216
emqx/emqx	4.4.19	2452	541
library/telegraf	1.27	51083397	6,062
bitnami/postgresql	17.1.0-debian-12-r0	—	unmeasured
datalayers/datalayers	v2.2.10	0438128	2,096
emqx/ecp-ui	2.5.1	2182343	4,868
emqx/ecp-main	2.5.1	0013134	1,265
quay.io/jetstack/cert-manager-startupapicheck	v1.16.1	00887	794

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

16 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2025-15467	openssl@3.3.2-r0	3.3.6-r0
High	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.21
High	ALPINE-CVE-2022-0778	libretls@3.3.4-r2	3.3.4-r3
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.18	no fix listed
High	ALPINE-CVE-2023-38039	curl@8.1.2-r0	8.3.0-r0
High	DEBIAN-CVE-2024-2398	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.12.0	0.17.0
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v27.0.3+incompatible	27.1.1
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.14.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.14.0	0.23.0
High	DEBIAN-CVE-2024-28182	nghttp2@1.52.0-1+deb12u1	1.52.0-1+deb12u2
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.5	1.1.12
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.18	no fix listed
High	UBUNTU-CVE-2024-3596	krb5@1.19.2-2ubuntu0.4	1.19.2-2ubuntu0.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.5.1latest	11 days ago	2.5.1	9223251,901	23,685

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/emqx-operator/kube-ecp-stack.svg)](https://charts.stackradar.io/charts/emqx-operator/kube-ecp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.