kube-ecp-stack Helm chart

Name: kube-ecp-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

emqx-operator

Scored 14 Sept 2026

A Helm chart stack for EMQX ECP

Latest 2.5.1 11 days agoapp version 2.5.1 0Artifact Hub

kube-ecp-stack 2.5.1 deploys 16 container images: quay.io/jetstack/cert-manager-cainjector, quay.io/jetstack/cert-manager-controller, quay.io/jetstack/cert-manager-webhook, emqx/neuronex-operator and 12 more. Across the 14 measured, 2,257 findings — 9 critical, 22 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 8.1.2-r0, fixed in 8.4.0-r0.

Radar Score

23,6859223251,901

2,257 findings over 14 of 16 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/jetstack/cert-manager-cainjector	v1.16.1	00887	794
quay.io/jetstack/cert-manager-controller	v1.16.1	009100	935
quay.io/jetstack/cert-manager-webhook	v1.16.1	00994	878
emqx/neuronex-operator	0.1.0-rc.8	—	unmeasured
emqxecp/otelcol	2.5.0	0223132	1,566
quay.io/prometheus/pushgateway	v1.10.0	00989	825
quay.io/prometheus-operator/prometheus-config-reloader	v0.78.1	00991	837
quay.io/prometheus/prometheus	v2.55.1	0011108	1,008
emqx/ecp-emqx-agent-downloader	2.5.1	0118109	1,216
emqx/emqx	4.4.19	2452	541
library/telegraf	1.27	51083397	6,062
bitnami/postgresql	17.1.0-debian-12-r0	—	unmeasured
datalayers/datalayers	v2.2.10	0438128	2,096
emqx/ecp-ui	2.5.1	2182343	4,868
emqx/ecp-main	2.5.1	0013134	1,265
quay.io/jetstack/cert-manager-startupapicheck	v1.16.1	00887	794

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

778 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-4598	systemd@249.11-0ubuntu3.12	249.11-0ubuntu3.16
Low	DEBIAN-CVE-2026-58470	wget@1.21.3-1+b2	no fix listed
Low	DEBIAN-CVE-2024-28085	util-linux@2.38.1-5+b1	2.38.1-5+deb12u1
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u8	no fix listed
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.29.0	0.38.0
Low	DSA-5979-1	libxslt@1.1.35-1	1.1.35-1+deb12u2
Low	DEBIAN-CVE-2026-58471	wget@1.21.3-1+b2	no fix listed
Low	DEBIAN-CVE-2026-58472	wget@1.21.3-1+b2	no fix listed
Low	GHSA-8r68-gvr4-jh7j	github.com/nats-io/nats-server/v2@v2.9.9	2.11.15
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.66.2	1.83.1
Low	GO-2023-2382	stdlib@go1.20.7	1.20.12
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u8	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.27.0	0.52.0
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	ALPINE-CVE-2026-22796	openssl@3.3.2-r0	3.3.6-r0
Low	UBUNTU-CVE-2026-22796	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.21
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.27.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.27.0	0.52.0
Low	GO-2024-2599	stdlib@go1.22.0	1.21.8
Low	DEBIAN-CVE-2025-10148	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2024-26462	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3
Low	DEBIAN-CVE-2026-22695	libpng1.6@1.6.39-2	1.6.39-2+deb12u2
Low	GO-2024-3106	stdlib@go1.22.0	1.22.7
Low	DEBIAN-CVE-2024-2004	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u8	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u2	no fix listed
Low	UBUNTU-CVE-2025-3576	krb5@1.19.2-2ubuntu0.4	1.19.2-2ubuntu0.7
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4	1:2.66-4+deb12u3
Low	DEBIAN-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5
Low	DEBIAN-CVE-2023-2908	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2023-25433	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-41069	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-26966	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	GO-2024-2600	stdlib@go1.22.0	1.21.8
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.66.2	1.82.1
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u8	no fix listed
Low	DSA-6189-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u4
Low	GO-2024-2609	stdlib@go1.22.0	1.21.8
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.5-2ubuntu1	5.2.5-2ubuntu1.1
Low	GO-2024-3107	stdlib@go1.22.0	1.22.7
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	GHSA-fcjp-h8cc-6879	github.com/nats-io/nats-server/v2@v2.9.9	2.11.15
Low	GHSA-hwqm-qvj9-4jr2	github.com/russellhaering/gosaml2@v0.8.1	0.11.0
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u2	no fix listed
Low	GO-2024-2824	stdlib@go1.22.0	1.22.3
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.14.0	1.17.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.5.1latest	11 days ago	2.5.1	9223251,901	23,685

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/emqx-operator/kube-ecp-stack.svg)](https://charts.stackradar.io/charts/emqx-operator/kube-ecp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.