robot-shop 1.1.1 Helm chart

Name: robot-shop Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 15 Sept 2026

Sample micoservices application

Version 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,892 findings — 13 critical, 62 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

29,59413625551,262

1,892 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	618137377	7,825
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

717 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-4878	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm1
Low	UBUNTU-CVE-2025-9403	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-69418	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527	0.44.0
Low	UBUNTU-CVE-2026-59846	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-6141	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
Low	DLA-1563-1	tzdata@2017c-0+deb8u1	2018g-0+deb8u1
Low	DLA-1606-1	gcc-4.9@4.9.2-10	4.9.2-10+deb8u2
Low	DLA-1625-1	tzdata@2017c-0+deb8u1	2018i-0+deb8u1
Low	DLA-1744-1	tzdata@2017c-0+deb8u1	2019a-0+deb8u1
Low	DLA-1762-2	systemd@215-17+deb8u7	215-17+deb8u13
Low	DLA-1833-2	bzip2@1.0.6-7+b3	1.0.6-7+deb8u2
Low	DLA-1957-1	tzdata@2017c-0+deb8u1	2019c-0+deb8u1
Low	DLA-2751-1	postgresql-9.6@9.6.22-0+deb9u1	9.6.23-0+deb9u1
Low	DLA-2759-1	gnutls28@3.5.8-5+deb9u5	3.5.8-5+deb9u6
Low	DLA-2761-1	openssl1.0@1.0.2u-1~deb9u4	1.0.2u-1~deb9u5
Low	DLA-2797-1	tzdata@2021a-0+deb9u1	2021a-0+deb9u2
Low	DLA-2948-1	debian-archive-keyring@2017.5+deb9u1	2017.5+deb9u2
Low	DLA-2963-1	tzdata@2021a-0+deb9u1	2021a-0+deb9u3
Low	DLA-3051-1	tzdata@2021a-0+deb9u1	2021a-0+deb9u4
Low	DLA-3112-1	bzip2@1.0.6-9.2~deb10u1	1.0.6-9.2~deb10u2
Low	DLA-3134-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u7
Low	DLA-3161-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u8
Low	DLA-3366-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u10
Low	DLA-3412-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u11
Low	DLA-3482-1	debian-archive-keyring@2019.1+deb10u1	2019.1+deb10u2
Low	DLA-3684-1	tzdata@2021a-0+deb10u1	2021a-0+deb10u12
Low	DLA-3788-1	tzdata@2021a-0+deb10u1	2024a-0+deb10u1
Low	DLA-3921-1	apache2@2.4.48-3.1+deb11u1	2.4.62-1~deb11u2
Low	DLA-3954-2	postgresql-13@13.3-1	13.18-0+deb11u1
Low	DLA-3972-1	tzdata@2021a-1	2024b-0+deb11u1
Low	DLA-4016-1	ucf@3.0043	3.0043+deb11u2
Low	DLA-4085-1	tzdata@2021a-1	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	DSA-4117-1	gcc-4.9@4.9.2-10	4.9.2-10+deb8u1
Low	DSA-5085-2	expat@2.2.10-2	2.2.10-2+deb11u3
Low	DSA-5682-2	glib2.0@2.66.8-1	2.66.8-1+deb11u3
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	no fix listed
Low	USN-5089-1	ca-certificates@20210119~20.04.1	20210119~20.04.2
Low	USN-5473-1	ca-certificates@20210119~20.04.1	20211016~20.04.1
Low	USN-6105-1	ca-certificates@20210119~20.04.1	20230311ubuntu0.20.04.1
Low	USN-6663-1	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.22
Low	USN-7034-1	ca-certificates@20210119~20.04.1	20240203~20.04.1
Low	USN-8091-1	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.6+esm1
Low	USN-8202-3	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	13625551,262	29,594

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.