robot-shop Helm chart

Name: robot-shop Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Latest 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	717137370	7,786
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

710 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-gmj6-6f8f-6699	jinja2@3.0.1	3.1.5
Low	UBUNTU-CVE-2025-6020	pam@1.3.1-5ubuntu4.2	no fix listed
Low	UBUNTU-CVE-2023-27538	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.18
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	UBUNTU-CVE-2023-7104	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.6
Low	UBUNTU-CVE-2022-45142	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5
Low	GO-2021-0239	stdlib@go1.16.3	1.15.13
Low	UBUNTU-CVE-2026-86145	pcre2@10.34-7	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.13.3	2.25.5
Low	GO-2021-0347	stdlib@go1.17	1.16.15
Low	UBUNTU-CVE-2024-8096	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.24
Low	GO-2021-0245	stdlib@go1.16.3	1.15.15
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GHSA-mgvc-8q2h-5pgc	spring-boot-starter-actuator@2.3.3.RELEASE	no fix listed
Low	GO-2021-0319	stdlib@go1.17	1.16.14
Low	UBUNTU-CVE-2023-47039	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@9.0.37	9.0.118
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	UBUNTU-CVE-2025-15281	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1
Low	UBUNTU-CVE-2025-6297	dpkg@1.19.7ubuntu3	no fix listed
Low	GHSA-f9vj-2wh5-fj8j	werkzeug@2.0.1	3.0.6
Low	DLA-1639-1	systemd@215-17+deb8u7	215-17+deb8u9
Low	UBUNTU-CVE-2026-42011	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2024-12243	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12
Low	UBUNTU-CVE-2022-41916	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2
Low	UBUNTU-CVE-2026-9538	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GO-2022-0493	stdlib@go1.17	1.17.10
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.37	9.0.117
Low	GHSA-gfwj-fwqj-fp3v	spring-web@5.2.8.RELEASE	5.2.15
Low	UBUNTU-CVE-2025-6395	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm1
Low	UBUNTU-CVE-2025-24528	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.15	7.5.18
Low	GHSA-jjfh-589g-3hjx	spring-boot-actuator@2.3.3.RELEASE	2.7.18
Low	GO-2021-0317	stdlib@go1.17	1.16.14
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu1.2	no fix listed
Low	GHSA-rv95-896h-c2vc	express@4.17.1	4.19.2
Low	DSA-5200-1	libtirpc@1.3.1-1	1.3.1-1+deb11u1
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.37	9.0.113
Low	DSA-5628-1	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u3
Low	GO-2023-2185	stdlib@go1.17	1.20.11
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-41992	gzip@1.10-0ubuntu4	no fix listed
Low	UBUNTU-CVE-2023-7008	systemd@245.4-4ubuntu3.11	no fix listed
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@9.0.37	9.0.110
Low	DLA-2760-1	nettle@3.3-1+b2	3.3-1+deb9u1
Low	ALPINE-CVE-2020-15358	sqlite@3.32.1-r0	3.32.1-r1
Low	UBUNTU-CVE-2020-29562	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	14615551,255	29,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.