robot-shop Helm chart

Name: robot-shop Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Latest 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	717137370	7,786
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

710 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-3891-1	mariadb-10.5@1:10.5.11-1	1:10.5.26-0+deb11u2
Low	UBUNTU-CVE-2026-40612	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-44777	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	DLA-4396-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u1
Low	UBUNTU-CVE-2026-50812	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	GO-2025-4014	stdlib@go1.17	1.24.8
Low	DLA-4491-1	glib2.0@2.66.8-1	2.66.8-1+deb11u8
Low	UBUNTU-CVE-2026-41256	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2023-4641	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.5
Low	GO-2025-3503	stdlib@go1.17	1.23.7
Low	DLA-1711-1	systemd@215-17+deb8u7	215-17+deb8u11
Low	UBUNTU-CVE-2026-18938	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.11.2	2.13.0
Low	GHSA-w7fw-mjwx-w883	qs@6.7.0	6.14.2
Low	GO-2026-4976	stdlib@go1.17	1.25.10
Low	UBUNTU-CVE-2025-5278	coreutils@8.30-3ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-47770	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	GO-2026-5856	stdlib@go1.17	1.25.12
Low	UBUNTU-CVE-2026-22795	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	GO-2025-4007	stdlib@go1.17	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.56.0
Low	GO-2026-4980	stdlib@go1.17	1.25.10
Low	GO-2026-5039	stdlib@go1.17	1.25.11
Low	UBUNTU-CVE-2026-41257	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	DLA-3603-1	libxpm@1:3.5.12-1	1:3.5.12-1+deb10u2
Low	GHSA-6rw7-vpxm-498p	qs@6.5.2	6.14.1
Low	UBUNTU-CVE-2025-8114	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2
Low	GO-2025-4013	stdlib@go1.17	1.24.8
Low	GO-2025-3849	stdlib@go1.17	1.23.12
Low	GO-2026-4946	stdlib@go1.17	1.25.9
Low	DLA-4089-1	libxslt@1.1.34-4	1.1.34-4+deb11u2
Low	UBUNTU-CVE-2026-54370	acl@2.2.53-6	no fix listed
Low	DLA-4420-1	postgresql-13@13.3-1	13.23-0+deb11u1
Low	UBUNTU-CVE-2021-36086	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2025-15649	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GO-2026-4603	stdlib@go1.17	1.25.8
Low	GHSA-v422-hmwv-36x6	body-parser@1.19.0	1.20.6
Low	GO-2026-6303	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.55.0
Low	GHSA-jp4c-xjxw-mgf9	pip@21.2.4	26.1
Low	GO-2026-6354	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.56.0
Low	UBUNTU-CVE-2026-29111	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.24+esm3
Low	GO-2026-4982	stdlib@go1.17	1.25.10
Low	GO-2026-6091	stdlib@go1.17	1.25.13
Low	UBUNTU-CVE-2024-56433	shadow@1:4.8.1-1ubuntu5.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.10-0ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-40226	systemd@245.4-4ubuntu3.11	no fix listed
Low	GO-2025-3750	stdlib@go1.17	1.23.10
Low	GO-2026-4864	stdlib@go1.17	1.25.9
Low	GO-2025-3447	stdlib@go1.17	1.22.12
Low	GO-2026-4865	stdlib@go1.17	1.25.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	14615551,255	29,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.