ibm-ucv-prod Helm chart

Name: ibm-ucv-prod Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ibm-helm

Scored 14 Sept 2026

IBM DevOps Velocity Documentation For additional details regarding install and use of product see here https://www.ibm.com/support/knowledgecenter/SSCKX6 License By installing this product you accept the following license terms: https://github.com/UrbanCode/velocity/blob/master/LICENSE

Latest 5.2.6 1 month agodeploys tag 5.2.6.6 0Artifact Hub

ibm-ucv-prod 5.2.6 deploys 16 container images: registry.access.redhat.com/ubi10/ubi-minimal, cp.icr.io/cp/ibm-ucv-application-api, cp.icr.io/cp/ibm-ucv-release-events-api, cp.icr.io/cp/ibm-ucv-continuous-release-consumer and 12 more. Across the 4 measured, 820 findings — 7 critical, 28 high — 7 on CISA KEV. The highest contribution is RHSA-2021:1586 in glib2 2.56.4-1.el8, fixed in 0:2.56.4-9.el8. Chart.yaml declares kubeVersion >=1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,105728226559

820 findings over 4 of 16 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
registry.access.redhat.com/ubi10/ubi-minimal×14	latest	—	unmeasured
cp.icr.io/cp/ibm-ucv-application-api	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-release-events-api×2	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-continuous-release-consumer	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-continuous-release-poller	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-mcp-server	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-multi-app-pipeline-api	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-rcl-client	5.0.0.111	—	unmeasured
cp.icr.io/cp/ibm-ucv-release-events-ui	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-reporting-consumer	5.2.6.6	—	unmeasured
cp.icr.io/cp/ibm-ucv-security-api	5.2.6.6	—	unmeasured
bitnamilegacy/nginx	1.27.1	1256245	3,368
bitnamilegacy/rabbitmq	4.1.2	0146180	2,604
cp.icr.io/cp/ibm-ucv-generator-rabbitmq	5.0.0.3	—	unmeasured
ibmcom/opencontent-common-utils×2	1.1.2	62211393	5,313
bitnamilegacy/kubectl×2	1.22.13	031141	820

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

639 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2021:1586KEV	glib2@2.56.4-1.el8	0:2.56.4-9.el8
Critical	RHSA-2024:2722	glibc@2.28-42.el8_0.1	0:2.28-236.el8_9.13
Critical	BIT-nginx-2026-42945	nginx@1.27.1-2	1.30.1
Critical	RHSA-2023:5455KEV	glibc@2.28-42.el8_0.1	0:2.28-225.el8_8.6
Critical	RHSA-2023:5837KEV	nghttp2@1.33.0-1.el8	0:1.33.0-5.el8_8
Critical	RHSA-2025:12010	sqlite@3.26.0-3.el8	0:3.26.0-20.el8_10
Critical	RHSA-2019:2692	nghttp2@1.33.0-1.el8	0:1.33.0-1.el8_0.1
High	RHSA-2022:0951	expat@2.2.5-3.el8	0:2.2.5-4.el8_5.3
High	DEBIAN-CVE-2025-15467	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
High	RHSA-2022:1065	openssl@1:1.1.1-8.el8	1:1.1.1k-6.el8_5
High	RHSA-2022:5818	openssl@1:1.1.1-8.el8	1:1.1.1k-7.el8_6
High	RHSA-2022:1642	zlib@1.2.11-10.el8	0:1.2.11-18.el8_5
High	RHSA-2021:1024	openssl@1:1.1.1-8.el8	1:1.1.1g-15.el8_3
High	RHSA-2023:1405	openssl@1:1.1.1-8.el8	1:1.1.1k-9.el8_7
High	RHSA-2025:1301KEV	gcc@8.2.1-3.5.el8	0:8.5.0-23.el8_10
High	RHSA-2021:4424	openssl@1:1.1.1-8.el8	1:1.1.1k-4.el8
High	RHSA-2021:5226	openssl@1:1.1.1-8.el8	1:1.1.1k-5.el8_5
High	RHSA-2020:1810	sqlite@3.26.0-3.el8	0:3.26.0-6.el8
High	RHSA-2024:0628	libssh@0.8.5-2.el8	0:0.9.6-13.el8_9
High	BIT-nginx-2026-27654	nginx@1.27.1-2	1.28.3
High	RHSA-2020:1792	curl@7.61.1-8.el8	0:7.61.1-12.el8
High	RHSA-2024:5654	curl@7.61.1-8.el8	0:7.61.1-34.el8_10.2
High	RHSA-2024:4252	nghttp2@1.33.0-1.el8	0:1.33.0-6.el8_10.1
High	RHSA-2019:3600	gnutls@3.6.5-2.el8	0:3.6.8-8.el8
High	RHSA-2024:8860	krb5@1.16.1-22.el8	0:1.18.2-30.el8_10
High	RHSA-2023:0173	libxml2@2.9.7-5.el8	0:2.9.7-15.el8_7.1
High	RHSA-2022:6159	curl@7.61.1-8.el8	0:7.61.1-22.el8_6.4
High	RHSA-2025:21776	expat@2.2.5-3.el8	0:2.5.0-1.el8_10
High	RHSA-2021:4587	gcc@8.2.1-3.5.el8	0:8.5.0-4.el8_5
High	RHSA-2019:3706	lua@5.3.4-10.el8	0:5.3.4-11.el8
High	RHSA-2020:2637	gnutls@3.6.5-2.el8	0:3.6.8-11.el8_2
High	DLA-4323-1KEV	git@1:2.30.2-1	1:2.30.2-1+deb11u5
High	DSA-5514-1KEV	glibc@2.31-13+deb11u4	2.31-13+deb11u7
High	DSA-5570-1KEV	nghttp2@1.43.0-1	1.43.0-1+deb11u1
Medium	DLA-3859-1	systemd@247.3-7+deb11u1	247.3-7+deb11u6
Medium	RHSA-2022:7106	zlib@1.2.11-10.el8	0:1.2.11-19.el8_6
Medium	DSA-5673-1	glibc@2.31-13+deb11u4	2.31-13+deb11u9
Medium	RHSA-2021:4396	sqlite@3.26.0-3.el8	0:3.26.0-15.el8
Medium	DLA-3898-1	nghttp2@1.43.0-1	1.43.0-1+deb11u2
Medium	RHSA-2021:2569	libxml2@2.9.7-5.el8	0:2.9.7-9.el8_4.2
Medium	DSA-5523-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u10
Medium	RHSA-2025:11035	lz4@1.8.1.2-4.el8	0:1.8.3-5.el8_10
Medium	DSA-5417-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u5
Medium	RHSA-2022:7704	glib2@2.56.4-1.el8	0:2.56.4-159.el8
Medium	RHSA-2023:0110	sqlite@3.26.0-3.el8	0:3.26.0-17.el8_7
Medium	RHEA-2023:3850	krb5@1.16.1-22.el8	0:1.18.2-25.el8_8
Medium	RHSA-2021:3576	krb5@1.16.1-22.el8	0:1.18.2-8.3.el8_4
Medium	DEBIAN-CVE-2024-5535	openssl@3.0.14-1~deb12u2	3.0.15-1~deb12u1
Medium	RHSA-2021:1610	curl@7.61.1-8.el8	0:7.61.1-18.el8
Medium	DSA-5343-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.2.6latest	1 month ago	5.2.6.6	728226559	12,105

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ibm-helm/ibm-ucv-prod.svg)](https://charts.stackradar.io/charts/ibm-helm/ibm-ucv-prod)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.