cruise-control 2.3.0 Helm chart
helm-cruise-controlVerified publisherScored 3 Oct 2026
A Helm chart to deploy Cruise Control for Apache Kafka
Version 2.3.0 todayapp version jdk17-cc2.5.146-iam2.3.9 0Artifact Hub
cruise-control 2.3.0 deploys 2 container images: ghcr.io/devops-ia/kafka-cruise-control and ghcr.io/devops-ia/kafka-cruise-control-ui. Across them, 196 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-42055 in nginx 1.28.3-r1, fixed in 1.28.3-r4.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | jdk17-cc2.5.146-iam2.3.9 | 001659 | 912 |
| ghcr.io/ | 0.4.0 | 003586 | 1,530 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-1965 | curl | 8.19.0-r0 |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.1.137.Final |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | ALPINE-CVE-2026-89156 | pcre2 | 10.48-r0 |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | ALPINE-CVE-2026-56406 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56407 | expat | 2.8.2-r0 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | ALPINE-CVE-2026-40930 | libpng | 1.6.58-r1 |
| Low | ALPINE-CVE-2026-56403 | expat | 2.8.2-r0 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-qh8g-58pp-2wxh | jetty-http | 12.0.12 |
| Low | ALPINE-CVE-2026-7009 | curl | 8.20.0-r0 |
| Low | GHSA-vvgp-rfg2-7rr6 | jackson-databind | 2.18.9 |
| Low | GHSA-3g76-f9xq-8vp6 | vertx-core | 4.5.27 |
| Low | GHSA-7p3p-8qv8-m2vh | jetty-server | no fix listed |
| Low | ALPINE-CVE-2025-14104 | util-linux | 2.41.4-r0 |
| Low | ALPINE-CVE-2026-56404 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56410 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56411 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56405 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56408 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-50219 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56412 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-42769 | openssl | 3.5.7-r0 |
| Low | GHSA-45p5-v273-3qqr | vertx-web | 4.5.22 |
| Low | ALPINE-CVE-2026-56132 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56409 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-27171 | zlib | 1.3.2-r0 |
| Low | ALPINE-CVE-2025-14017 | curl | 8.18.0-r0 |
| Low | ALPINE-CVE-2026-45446 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-4367 | libxpm | 3.5.19-r0 |
| Low | ALPINE-CVE-2026-56131 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-6042 | musl | 1.2.5-r22 |
| Low | ALPINE-CVE-2026-42768 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-34757 | libpng | 1.6.57-r0 |
| Low | ALPINE-CVE-2026-42770 | openssl | 3.5.7-r0 |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | ALPINE-CVE-2026-27456 | util-linux | 2.41.4-r0 |
| Low | ALPINE-CVE-2026-41080 | expat | 2.8.1-r0 |
| Low | GHSA-wjpw-4j6x-6rwh | jetty-http | no fix listed |
| Low | ALPINE-CVE-2026-89162 | pcre2 | 10.48-r0 |
| Low | GHSA-fghv-69vj-qj49 | netty-codec-http | 4.1.125.Final |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.3.0latest | today | jdk17-cc2.5.146-iam2.3.9 | 0051145 | 2,442 |
| 2.2.0 | yesterday | jdk17-cc2.5.146-iam2.3.9 | 023579 | 1,598 |
| 2.1.2 | 6 days ago | jdk17-cc2.5.146-iam2.3.9 | 023579 | 1,598 |
| 2.1.1 | 25 days ago | jdk17-cc2.5.146-iam2.3.8 | 023571 | 1,505 |
| 2.1.0 | 3 months ago | jdk17-cc2.5.146-iam2.3.7 | 021821 | 685 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.