robot-shop 1.1.1 Helm chart

Name: robot-shop Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Version 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	717137370	7,786
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

710 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-43fp-rhv2-5gv8	certifi@2021.5.30	2022.12.07
Low	DLA-3878-1	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u5
Low	UBUNTU-CVE-2026-8932	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm7
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1
Low	DLA-2771-1	krb5@1.15-1+deb9u2	1.15-1+deb9u3
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	UBUNTU-CVE-2026-8286	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm4
Low	GHSA-6qh9-h6wf-jgqc	symfony/cache@v5.3.7	5.4.52
Low	GHSA-wf93-45jw-7689	pip@21.2.4	26.1.2
Low	UBUNTU-CVE-2024-33602	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.16
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@4.4.15	7.5.4
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.3.3.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-4046	glibc@2.31-0ubuntu9.2	no fix listed
Low	GHSA-r292-9mhp-454m	tar@4.4.15	7.5.21
Low	UBUNTU-CVE-2026-0966	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GO-2022-0537	stdlib@go1.17	1.17.13
Low	DLA-3037-1	libjpeg-turbo@1:1.5.1-2+deb9u1	1:1.5.1-2+deb9u2
Low	GHSA-42wg-hm62-jcwg	tomcat-embed-core@9.0.37	9.0.106
Low	UBUNTU-CVE-2026-48959	perl@5.30.0-9ubuntu0.2	no fix listed
Low	DSA-5266-1	expat@2.2.10-2	2.2.10-2+deb11u5
Low	UBUNTU-CVE-2026-59843	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	DLA-2777-1	tiff@4.0.8-2+deb9u6	4.0.8-2+deb9u7
Low	UBUNTU-CVE-2026-5928	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-3833	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	DSA-5202-1	unzip@6.0-26	6.0-26+deb11u1
Low	UBUNTU-CVE-2026-40164	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	GHSA-h75v-3vvj-5mfj	jinja2@3.0.1	3.1.4
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@2.3.3.RELEASE	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-6791	glibc@2.31-0ubuntu9.2	no fix listed
Low	ALPINE-CVE-2021-23839	openssl@1.1.1g-r0	1.1.1j-r0
Low	UBUNTU-CVE-2026-8458	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm4
Low	DSA-5484-1	librsvg@2.50.3+dfsg-1	2.50.3+dfsg-1+deb11u1
Low	UBUNTU-CVE-2026-6253	curl@7.68.0-1ubuntu2.6	no fix listed
Low	GHSA-w5hq-g745-h8pq	uuid@3.3.3	11.1.1
Low	UBUNTU-CVE-2020-27618	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Low	DLA-4251-1	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u8
Low	DLA-3879-1	bluez@5.55-3.1	5.55-3.1+deb11u2
Low	GO-2023-1703	stdlib@go1.17	1.19.8
Low	GHSA-9hjg-9r4m-mvj7	requests@2.26.0	2.32.4
Low	GO-2021-0241	stdlib@go1.16.3	1.15.13
Low	GO-2022-0521	stdlib@go1.17	1.17.12
Low	UBUNTU-CVE-2022-4415	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.20
Low	GHSA-8qvm-5x2c-j2w7	protobuf@3.18.0rc2	4.25.8
Low	DLA-3782-1	util-linux@2.33.1-0.1	2.33.1-0.1+deb10u1
Low	DSA-5650-1	util-linux@2.36.1-8	2.36.1-8+deb11u2
Low	DSA-4071-1	sensible-utils@0.0.9	0.0.9+deb8u1
Low	DSA-5490-1	aom@1.0.0.errata1-3	1.0.0.errata1-3+deb11u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	14615551,255	29,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.