ibm-ucv-prod 5.3.0 Helm chart
ibm-helmScored 20 Sept 2026
IBM DevOps Velocity Documentation For additional details regarding install and use of product see here https://www.ibm.com/support/knowledgecenter/SSCKX6 License By installing this product you accept the following license terms: https://github.com/UrbanCode/velocity/blob/master/LICENSE
Version 5.3.0 yesterdaydeploys tag 5.3.0.5 0Artifact Hub
ibm-ucv-prod 5.3.0 deploys 16 container images: registry.access.redhat.com/ubi10/ubi-minimal, cp.icr.io/cp/ibm-ucv-application-api, cp.icr.io/cp/ibm-ucv-release-events-api, cp.icr.io/cp/ibm-ucv-continuous-release-consumer and 12 more. Across the 4 measured, 825 findings — 6 critical, 29 high — 7 on CISA KEV. The highest contribution is RHSA-2021:1586 in glib2 2.56.4-1.el8, fixed in 0:2.56.4-9.el8. Chart.yaml declares kubeVersion >=1.21.0-0; rendered for Kubernetes 1.21.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| registry.access.redhat.com/ | latest | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.0.0.114 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| cp.icr.io/ | 5.3.0.5 | — | unmeasured |
| bitnamilegacy/ | 1.27.1 | 1258246 | 3,453 |
| bitnamilegacy/ | 4.1.2 | 0147181 | 2,658 |
| cp.icr.io/ | 5.0.0.3 | — | unmeasured |
| ibmcom/ | 1.1.2 | 52311393 | 5,313 |
| bitnamilegacy/ | 1.22.13 | 031141 | 821 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
High findings
High: findings whose contribution to the Radar Score is 40–69. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | RHSA-2022:0951 | expat | 0:2.2.5-4.el8_5.3 |
| High | RHSA-2025:12010 | sqlite | 0:3.26.0-20.el8_10 |
| High | DEBIAN-CVE-2025-15467 | openssl | 3.0.18-1~deb12u2 |
| High | RHSA-2022:1065 | openssl | 1:1.1.1k-6.el8_5 |
| High | RHSA-2022:5818 | openssl | 1:1.1.1k-7.el8_6 |
| High | RHSA-2022:1642 | zlib | 0:1.2.11-18.el8_5 |
| High | RHSA-2021:1024 | openssl | 1:1.1.1g-15.el8_3 |
| High | RHSA-2023:1405 | openssl | 1:1.1.1k-9.el8_7 |
| High | RHSA-2025:1301KEV | gcc | 0:8.5.0-23.el8_10 |
| High | RHSA-2021:4424 | openssl | 1:1.1.1k-4.el8 |
| High | RHSA-2021:5226 | openssl | 1:1.1.1k-5.el8_5 |
| High | RHSA-2020:1810 | sqlite | 0:3.26.0-6.el8 |
| High | RHSA-2024:0628 | libssh | 0:0.9.6-13.el8_9 |
| High | BIT-nginx-2026-27654 | nginx | 1.28.3 |
| High | RHSA-2020:1792 | curl | 0:7.61.1-12.el8 |
| High | RHSA-2024:5654 | curl | 0:7.61.1-34.el8_10.2 |
| High | RHSA-2024:4252 | nghttp2 | 0:1.33.0-6.el8_10.1 |
| High | RHSA-2019:3600 | gnutls | 0:3.6.8-8.el8 |
| High | RHSA-2023:0173 | libxml2 | 0:2.9.7-15.el8_7.1 |
| High | RHSA-2024:8860 | krb5 | 0:1.18.2-30.el8_10 |
| High | RHSA-2022:6159 | curl | 0:7.61.1-22.el8_6.4 |
| High | RHSA-2025:21776 | expat | 0:2.5.0-1.el8_10 |
| High | RHSA-2021:4587 | gcc | 0:8.5.0-4.el8_5 |
| High | RHSA-2019:3706 | lua | 0:5.3.4-11.el8 |
| High | RHSA-2020:2637 | gnutls | 0:3.6.8-11.el8_2 |
| High | DLA-4323-1KEV | git | 1:2.30.2-1+deb11u5 |
| High | DSA-5514-1KEV | glibc | 2.31-13+deb11u7 |
| High | DSA-5570-1KEV | nghttp2 | 1.43.0-1+deb11u1 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.3.0latest | yesterday | 5.3.0.5 | 629229561 | 12,245 |
| 5.2.6 | 1 month ago | 5.2.6.6 | 629229561 | 12,245 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.