ibm-ucv-prod 5.3.0 Helm chart

Name: ibm-ucv-prod Helm chart 5.3.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ibm-helm

Scored 20 Sept 2026

IBM DevOps Velocity Documentation For additional details regarding install and use of product see here https://www.ibm.com/support/knowledgecenter/SSCKX6 License By installing this product you accept the following license terms: https://github.com/UrbanCode/velocity/blob/master/LICENSE

Version 5.3.0 yesterdaydeploys tag 5.3.0.5 0Artifact Hub

ibm-ucv-prod 5.3.0 deploys 16 container images: registry.access.redhat.com/ubi10/ubi-minimal, cp.icr.io/cp/ibm-ucv-application-api, cp.icr.io/cp/ibm-ucv-release-events-api, cp.icr.io/cp/ibm-ucv-continuous-release-consumer and 12 more. Across the 4 measured, 825 findings — 6 critical, 29 high — 7 on CISA KEV. The highest contribution is RHSA-2021:1586 in glib2 2.56.4-1.el8, fixed in 0:2.56.4-9.el8. Chart.yaml declares kubeVersion >=1.21.0-0; rendered for Kubernetes 1.21.0.

Radar Score

12,245629229561

825 findings over 4 of 16 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

16 images

Image	Tag	Vulnerabilities	Radar Score
registry.access.redhat.com/ubi10/ubi-minimal×14	latest	—	unmeasured
cp.icr.io/cp/ibm-ucv-application-api	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-release-events-api×2	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-continuous-release-consumer	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-continuous-release-poller	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-mcp-server	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-multi-app-pipeline-api	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-rcl-client	5.0.0.114	—	unmeasured
cp.icr.io/cp/ibm-ucv-release-events-ui	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-reporting-consumer	5.3.0.5	—	unmeasured
cp.icr.io/cp/ibm-ucv-security-api	5.3.0.5	—	unmeasured
bitnamilegacy/nginx	1.27.1	1258246	3,453
bitnamilegacy/rabbitmq	4.1.2	0147181	2,658
cp.icr.io/cp/ibm-ucv-generator-rabbitmq	5.0.0.3	—	unmeasured
ibmcom/opencontent-common-utils×2	1.1.2	52311393	5,313
bitnamilegacy/kubectl×2	1.22.13	031141	821

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

642 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RHSA-2020:4490	gnupg2@2.2.9-1.el8	0:2.2.20-2.el8
Medium	DEBIAN-CVE-2025-32988	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Medium	RHSA-2024:6989	expat@2.2.5-3.el8	0:2.2.5-15.el8_10
Medium	RHSA-2024:4264	openldap@2.4.46-9.el8	0:2.4.46-19.el8_10
Medium	RHSA-2024:0627	gnutls@3.6.5-2.el8	0:3.6.16-8.el8_9.1
Medium	RHSA-2024:8922	bzip2@1.0.6-26.el8	0:1.0.6-27.el8_10
Medium	DEBIAN-CVE-2026-18924	curl@7.88.1-10+deb12u12	no fix listed
Medium	RHSA-2022:7108	sqlite@3.26.0-3.el8	0:3.26.0-16.el8_6
Medium	RHSA-2020:4539	pcre2@10.32-1.el8	0:10.32-2.el8
Medium	DEBIAN-CVE-2025-9230	openssl@3.0.14-1~deb12u2	3.0.17-1~deb12u3
Medium	RHBA-2019:3621	libidn2@2.0.5-1.el8	0:2.2.0-1.el8
Medium	DEBIAN-CVE-2026-11856	curl@7.88.1-10+deb12u12	no fix listed
Medium	BIT-nginx-2026-27784	nginx@1.27.1-2	1.28.3
Medium	DEBIAN-CVE-2025-49794	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Medium	RHSA-2025:2686	libxml2@2.9.7-5.el8	0:2.9.7-19.el8_10
Medium	BIT-nginx-2026-27651	nginx@1.27.1-2	1.28.3
Medium	RHSA-2021:4060	libsolv@0.6.35-6.el8	0:0.7.16-3.el8_4
Medium	DEBIAN-CVE-2026-33845	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.7.9-2+deb12u3	no fix listed
Medium	RHSA-2022:6463	gnupg2@2.2.9-1.el8	0:2.2.20-3.el8_6
Medium	DEBIAN-CVE-2024-25062	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	RHSA-2024:3626	libxml2@2.9.7-5.el8	0:2.9.7-18.el8_10.1
Medium	DEBIAN-CVE-2025-6021	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Medium	RHSA-2024:3344	glibc@2.28-42.el8_0.1	0:2.28-251.el8_10.2
Medium	RHSA-2023:1569	gnutls@3.6.5-2.el8	0:3.6.16-6.el8_7
Medium	RHSA-2021:4510	lua@5.3.4-10.el8	0:5.3.4-12.el8
Medium	DEBIAN-CVE-2026-63076	openssl@3.0.14-1~deb12u2	no fix listed
Medium	BIT-nginx-2026-32647	nginx@1.27.1-2	1.28.3
Medium	DEBIAN-CVE-2026-42009	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Medium	DEBIAN-CVE-2026-10536	curl@7.88.1-10+deb12u12	no fix listed
Medium	RHSA-2025:3913	expat@2.2.5-3.el8	0:2.2.5-17.el8_10
Medium	DEBIAN-CVE-2011-10007	libfile-find-rule-perl@0.34-3	0.34-4~deb12u1
Medium	BIT-nginx-2026-42946	nginx@1.27.1-2	1.30.1
Medium	DEBIAN-CVE-2026-33846	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Medium	RHSA-2026:8534	libarchive@3.3.2-3.el8	0:3.3.3-7.el8_10
Medium	RHSA-2023:2963	curl@7.61.1-8.el8	0:7.61.1-30.el8
Medium	DEBIAN-CVE-2026-8924	curl@7.88.1-10+deb12u12	no fix listed
Medium	DEBIAN-CVE-2025-0725	curl@7.88.1-10+deb12u12	no fix listed
Medium	RHSA-2024:0253	sqlite@3.26.0-3.el8	0:3.26.0-19.el8_9
Medium	DEBIAN-CVE-2025-13151	libtasn1-6@4.19.0-2	no fix listed
Medium	RHSA-2023:3018	libarchive@3.3.2-3.el8	0:3.3.3-5.el8
Medium	BIT-nginx-2026-60005	nginx@1.27.1-2	1.30.4
Medium	DEBIAN-CVE-2024-26461	krb5@1.20.1-2+deb12u3	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.36-9+deb12u8	no fix listed
Medium	DEBIAN-CVE-2026-5450	glibc@2.36-9+deb12u8	no fix listed
Medium	RHSA-2023:1140	curl@7.61.1-8.el8	0:7.61.1-25.el8_7.3
Medium	RHSA-2020:1913	e2fsprogs@1.44.3-2.el8	0:1.45.4-3.el8
Medium	DEBIAN-CVE-2024-9143	openssl@3.0.14-1~deb12u2	3.0.15-1~deb12u1
Medium	DEBIAN-CVE-2026-34182	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
Medium	RHSA-2023:0116	libtasn1@4.13-3.el8	0:4.13-4.el8_7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.3.0latest	yesterday	5.3.0.5	629229561	12,245
5.2.6	1 month ago	5.2.6.6	629229561	12,245

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ibm-helm/ibm-ucv-prod.svg)](https://charts.stackradar.io/charts/ibm-helm/ibm-ucv-prod)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.