robot-shop 1.1.1 Helm chart

Name: robot-shop Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 15 Sept 2026

Sample micoservices application

Version 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,892 findings — 13 critical, 62 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

29,59413625551,262

1,892 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	618137377	7,825
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

717 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-65pc-fj4g-8rjx	idna@3.2	3.15
Low	UBUNTU-CVE-2026-89158	pcre2@10.34-7	no fix listed
Low	GO-2023-2041	stdlib@go1.17	1.20.8
Low	GHSA-9wx4-h78v-vm56	requests@2.26.0	2.32.0
Low	DLA-3945-1	libheif@1.11.0-1	1.11.0-1+deb11u2
Low	GO-2023-2043	stdlib@go1.17	1.20.8
Low	GO-2022-0515	stdlib@go1.17	1.17.12
Low	GHSA-72xp-p242-47p9	symfony/routing@v5.3.7	5.4.52
Low	GO-2023-2186	stdlib@go1.17	1.20.11
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-2827-2mxx-j8pv	spring-retry@1.2.5.RELEASE	no fix listed
Low	DLA-1405-1	libgcrypt20@1.6.3-2+deb8u4	1.6.3-2+deb8u5
Low	DLA-4490-1	openssl@1.1.1k-1	1.1.1w-0+deb11u5
Low	UBUNTU-CVE-2026-33947	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.11.2	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1	no fix listed
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25
Low	UBUNTU-CVE-2025-5372	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GO-2024-3105	stdlib@go1.17	1.22.7
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.2.8.RELEASE	no fix listed
Low	GO-2022-1095	stdlib@go1.17	1.18.8
Low	UBUNTU-CVE-2026-49839	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	DLA-4412-1	glib2.0@2.66.8-1	2.66.8-1+deb11u7
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GO-2023-1621	stdlib@go1.17	1.19.7
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
Low	GO-2026-4981	stdlib@go1.17	1.25.10
Low	GO-2025-3563	stdlib@go1.17	1.23.8
Low	DLA-3934-1	libheif@1.11.0-1	1.11.0-1+deb11u1
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.11.2	2.18.9
Low	GHSA-vmf3-w455-68vh	tar@4.4.15	7.5.16
Low	DLA-4455-1	python3.9@3.9.2-1	3.9.2-1+deb11u5
Low	GO-2026-4977	stdlib@go1.17	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GO-2024-2610	stdlib@go1.17	1.21.8
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-59848	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	DLA-4315-1	tiff@4.2.0-1	4.2.0-1+deb11u7
Low	GO-2026-4986	stdlib@go1.17	1.25.10
Low	UBUNTU-CVE-2026-5704	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.4+esm3
Low	GO-2026-4918	stdlib@go1.17	1.25.10
Low	DEBIAN-CVE-2023-52968	mariadb-10.5@1:10.5.11-1	1:10.5.26-0+deb11u1
Low	GO-2026-4337	stdlib@go1.17	1.24.13
Low	UBUNTU-CVE-2023-6004	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.6	2.7.0
Low	DSA-5682-1	glib2.0@2.66.8-1	2.66.8-1+deb11u2
Low	DLA-4339-1	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	13625551,262	29,594

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.