kube-ecp-stack Helm chart

Name: kube-ecp-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

emqx-operator

Scored 14 Sept 2026

A Helm chart stack for EMQX ECP

Latest 2.5.1 11 days agoapp version 2.5.1 0Artifact Hub

kube-ecp-stack 2.5.1 deploys 16 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, emqx/neuronex-operator and 12 more. Across the 14 measured, 2,257 findings — 9 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

23,6859223251,901

2,257 findings over 14 of 16 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.16.1	00887	794
quay.io/jetstack/cert-manager-controller	v1.16.1	009100	935
quay.io/jetstack/cert-manager-webhook	v1.16.1	00994	878
emqx/neuronex-operator	0.1.0-rc.8	—	unmeasured
emqxecp/otelcol	2.5.0	0223132	1,566
quay.io/prometheus/pushgateway	v1.10.0	00989	825
quay.io/prometheus-operator/prometheus-config-reloader	v0.78.1	00991	837
quay.io/prometheus/prometheus	v2.55.1	0011108	1,008
emqx/ecp-emqx-agent-downloader	2.5.1	0118109	1,216
emqx/emqx	4.4.19	2452	541
library/telegraf	1.27	51083397	6,062
bitnami/postgresql	17.1.0-debian-12-r0	—	unmeasured
datalayers/datalayers	v2.2.10	0438128	2,096
emqx/ecp-ui	2.5.1	2182343	4,868
emqx/ecp-main	2.5.1	0013134	1,265
quay.io/jetstack/cert-manager-startupapicheck	v1.16.1	00887	794

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

613 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-9547	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2025-8177	tiff@4.5.0-6+deb12u1	no fix listed
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v4@v4.0.2	4.0.5
Low	DEBIAN-CVE-2021-45346	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.5.2-6+deb12u1	no fix listed
Low	DSA-6015-1	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Low	DEBIAN-CVE-2025-70873	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2025-66293	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	UBUNTU-CVE-2026-42012	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9
Low	GHSA-479m-364c-43vc	github.com/russellhaering/goxmldsig@v1.2.0	1.6.0
Low	DEBIAN-CVE-2022-49043	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	DEBIAN-CVE-2026-56209	aom@3.6.0-1+deb12u1	3.6.0-1+deb12u3
Low	UBUNTU-CVE-2026-57432	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8
Low	GO-2024-2887	stdlib@go1.22.0	1.21.11
Low	DEBIAN-CVE-2026-6276	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2024-38950	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-32741	libheif@1.15.1-1+deb12u1	no fix listed
Low	GHSA-6294-6rgp-fr7r	github.com/dvsekhvalnov/jose2go@v1.5.0	1.6.0
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v27.3.1+incompatible	no fix listed
Low	UBUNTU-CVE-2024-26458	krb5@1.19.2-2ubuntu0.4	1.19.2-2ubuntu0.6
Low	DEBIAN-CVE-2024-38949	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-49295	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-49346	libde265@1.0.11-1+deb12u2	no fix listed
Low	ALPINE-CVE-2025-26519	musl@1.2.5-r0	1.2.5-r1
Low	DSA-5726-1	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u2
Low	DEBIAN-CVE-2025-68431	libheif@1.15.1-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2016-2781	coreutils@8.32-4.1ubuntu1.2	no fix listed
Low	DEBIAN-CVE-2026-89147	net-snmp@5.9.3+dfsg-2	no fix listed
Low	GHSA-xhf5-7wjv-pqxp	github.com/containerd/containerd@v1.7.3	1.7.33
Low	DEBIAN-CVE-2026-32882	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8176	tiff@4.5.0-6+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-42767	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25
Low	DEBIAN-CVE-2026-5545	curl@7.88.1-10+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-48962	perl@5.34.0-3ubuntu1.3	no fix listed
Low	DEBIAN-CVE-2025-7709	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2026-3784	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-56210	aom@3.6.0-1+deb12u1	3.6.0-1+deb12u3
Low	DEBIAN-CVE-2025-14819	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-48029	libheif@1.15.1-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-42015	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u2	no fix listed
Low	DEBIAN-CVE-2024-28834	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u3
Low	DEBIAN-CVE-2026-11822	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2026-11824	sqlite3@3.40.1-2	no fix listed
Low	UBUNTU-CVE-2025-40909	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.5
Low	GHSA-9mj6-hxhv-w67j	github.com/dvsekhvalnov/jose2go@v1.5.0	1.7.0
Low	UBUNTU-CVE-2026-48961	perl@5.34.0-3ubuntu1.3	no fix listed
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.28.0	1.43.0
Low	UBUNTU-CVE-2026-63074	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.29
Low	GHSA-v86x-5fm3-5p7j	github.com/prometheus/alertmanager@v0.25.0	0.25.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.5.1latest	11 days ago	2.5.1	9223251,901	23,685

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/emqx-operator/kube-ecp-stack.svg)](https://charts.stackradar.io/charts/emqx-operator/kube-ecp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.