cruise-control 2.3.0 Helm chart

Name: cruise-control Helm chart 2.3.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helm-cruise-control

Scored 3 Oct 2026

A Helm chart to deploy Cruise Control for Apache Kafka

Version 2.3.0 todayapp version jdk17-cc2.5.146-iam2.3.9 0Artifact Hub

cruise-control 2.3.0 deploys 2 container images: ghcr.io/devops-ia/kafka-cruise-control and ghcr.io/devops-ia/kafka-cruise-control-ui. Across them, 196 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-42055 in nginx 1.28.3-r1, fixed in 1.28.3-r4.

Radar Score

2,4420051145

196 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/devops-ia/kafka-cruise-control	jdk17-cc2.5.146-iam2.3.9	001659	912
ghcr.io/devops-ia/kafka-cruise-control-ui	0.4.0	003586	1,530

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

196 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-28390	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-8926	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-42764	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11564	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-31789	openssl@3.5.5-r0	3.5.6-r0
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.16.2	2.18.8
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.118.Final	4.1.135.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.118.Final	4.1.136.Final
Low	ALPINE-CVE-2026-45445	openssl@3.5.5-r0	3.5.7-r0
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.110.Final	4.1.132.Final
Low	ALPINE-CVE-2026-60005	nginx@1.28.3-r1	1.28.3-r6
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.110.Final	4.1.133.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.110.Final	4.1.136.Final
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.110.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.110.Final	4.1.136.Final
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.110.Final	4.1.133.Final
Low	ALPINE-CVE-2026-5773	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-93990	expat@2.7.5-r0	2.8.5-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11586	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.16.2	2.18.10
Low	ALPINE-CVE-2026-56434	nginx@1.28.3-r1	1.28.3-r6
Low	ALPINE-CVE-2026-80229	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.110.Final	4.1.135.Final
Low	ALPINE-CVE-2026-76641	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-p6pp-m3f8-5c89	jackson-core@2.22.1	2.22.3
Low	ALPINE-CVE-2026-42766	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r0	10.48-r0
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.118.Final	4.1.137.Final
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.22.1	2.22.3
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-82209	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.118.Final	4.1.133.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.2	2.25.5
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	ALPINE-CVE-2026-80255	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.110.Final	4.1.136.Final
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.118.Final	4.1.125.Final
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.56.v20240826	9.4.57.v20241219
Low	ALPINE-CVE-2026-13608	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.110.Final	4.1.135.Final
Low	ALPINE-CVE-2026-9080	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.17.2	2.25.3
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.16.2	2.18.11
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.16.2	2.18.11
Low	ALPINE-CVE-2026-75803	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.0latest	today	jdk17-cc2.5.146-iam2.3.9	0051145	2,442
2.2.0	yesterday	jdk17-cc2.5.146-iam2.3.9	023579	1,598
2.1.2	6 days ago	jdk17-cc2.5.146-iam2.3.9	023579	1,598
2.1.1	25 days ago	jdk17-cc2.5.146-iam2.3.8	023571	1,505
2.1.0	3 months ago	jdk17-cc2.5.146-iam2.3.7	021821	685

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helm-cruise-control/cruise-control.svg)](https://charts.stackradar.io/charts/helm-cruise-control/cruise-control)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.