kube-ecp-stack 2.5.1 Helm chart

Name: kube-ecp-stack Helm chart 2.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

emqx-operator

Scored 14 Sept 2026

A Helm chart stack for EMQX ECP

Version 2.5.1 11 days agoapp version 2.5.1 0Artifact Hub

kube-ecp-stack 2.5.1 deploys 16 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, emqx/neuronex-operator and 12 more. Across the 14 measured, 2,257 findings — 9 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

23,6859223251,901

2,257 findings over 14 of 16 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.16.1	00887	794
quay.io/jetstack/cert-manager-controller	v1.16.1	009100	935
quay.io/jetstack/cert-manager-webhook	v1.16.1	00994	878
emqx/neuronex-operator	0.1.0-rc.8	—	unmeasured
emqxecp/otelcol	2.5.0	0223132	1,566
quay.io/prometheus/pushgateway	v1.10.0	00989	825
quay.io/prometheus-operator/prometheus-config-reloader	v0.78.1	00991	837
quay.io/prometheus/prometheus	v2.55.1	0011108	1,008
emqx/ecp-emqx-agent-downloader	2.5.1	0118109	1,216
emqx/emqx	4.4.19	2452	541
library/telegraf	1.27	51083397	6,062
bitnami/postgresql	17.1.0-debian-12-r0	—	unmeasured
datalayers/datalayers	v2.2.10	0438128	2,096
emqx/ecp-ui	2.5.1	2182343	4,868
emqx/ecp-main	2.5.1	0013134	1,265
quay.io/jetstack/cert-manager-startupapicheck	v1.16.1	00887	794

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

613 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-cfpf-hrx2-8rv6	github.com/expr-lang/expr@v1.16.9	1.17.7
Low	DEBIAN-CVE-2025-15661	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GO-2023-2185	stdlib@go1.20.7	1.20.11
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-2219	dpkg@1.21.22	1.21.23
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.3	no fix listed
Low	DEBIAN-CVE-2025-24928	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2026-41992	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	UBUNTU-CVE-2023-7008	systemd@249.11-0ubuntu3.12	249.11-0ubuntu3.21
Low	DEBIAN-CVE-2026-56211	aom@3.6.0-1+deb12u1	3.6.0-1+deb12u3
Low	ALPINE-CVE-2023-46219	curl@8.1.2-r0	8.5.0-r0
Low	DEBIAN-CVE-2026-12912	tiff@4.5.0-6+deb12u1	no fix listed
Low	UBUNTU-CVE-2024-4603	openssl@3.0.2-0ubuntu1.18	no fix listed
Low	DEBIAN-CVE-2026-12064	curl@7.88.1-10+deb12u8	no fix listed
Low	GHSA-x6g4-f6q3-fqvv	github.com/nats-io/nats-server/v2@v2.9.9	2.11.15
Low	DEBIAN-CVE-2026-8932	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2024-55549	libxslt@1.1.35-1	1.1.35-1+deb12u1
Low	DEBIAN-CVE-2025-24855	libxslt@1.1.35-1	1.1.35-1+deb12u1
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.1
Low	DEBIAN-CVE-2026-8286	curl@7.88.1-10+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.29
Low	DEBIAN-CVE-2024-33602	glibc@2.36-9+deb12u4	2.36-9+deb12u7
Low	UBUNTU-CVE-2026-4046	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.14
Low	DEBIAN-CVE-2026-41071	libheif@1.15.1-1+deb12u1	no fix listed
Low	ALPINE-CVE-2025-15468	openssl@3.3.2-r0	3.3.6-r0
Low	DEBIAN-CVE-2026-58051	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	UBUNTU-CVE-2026-48959	perl@5.34.0-3ubuntu1.3	no fix listed
Low	GHSA-mr45-rx8q-wcm9	github.com/nats-io/nkeys@v0.4.4	0.4.6
Low	DEBIAN-CVE-2025-32414	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2026-5928	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.14
Low	DEBIAN-CVE-2026-7598	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358	0.1.1
Low	DEBIAN-CVE-2023-32570	dav1d@1.0.0-2+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-6791	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2022-27943	gcc-12@12.3.0-1ubuntu1~22.04	no fix listed
Low	DEBIAN-CVE-2025-64720	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-8458	curl@7.88.1-10+deb12u8	no fix listed
Low	GHSA-q675-qj96-32m9	golang.org/x/image@v0.18.0	0.41.0
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.55.0	0.311.3
Low	DEBIAN-CVE-2026-6253	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-33164	libde265@1.0.11-1+deb12u2	no fix listed
Low	DSA-5949-1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	DEBIAN-CVE-2025-5222	icu@72.1-3	72.1-3+deb12u1
Low	GHSA-6gc3-crp7-25w5	github.com/russellhaering/gosaml2@v0.8.1	0.9.0
Low	DEBIAN-CVE-2026-45382	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-45383	libde265@1.0.11-1+deb12u2	no fix listed
Low	GHSA-m5vv-6r4h-3vj9	github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0	1.6.0-beta.4.0.20240610221955-50774cd97099
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	GO-2026-4341	stdlib@go1.23.2	1.24.12
Low	GHSA-9f3f-wv7r-qc8r	github.com/pion/dtls/v2@v2.2.7	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.5.1latest	11 days ago	2.5.1	9223251,901	23,685

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/emqx-operator/kube-ecp-stack.svg)](https://charts.stackradar.io/charts/emqx-operator/kube-ecp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.