robot-shop Helm chart

Name: robot-shop Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Latest 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	717137370	7,786
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

710 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-3586-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4
Low	DLA-3692-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u8
Low	DSA-5236-1	expat@2.2.10-2	2.2.10-2+deb11u4
Low	GO-2022-0477	stdlib@go1.17	1.17.11
Low	GHSA-h5c8-rqwp-cp95	jinja2@3.0.1	3.1.3
Low	DLA-3758-1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9
Low	DLA-4026-1	tiff@4.2.0-1	4.2.0-1+deb11u6
Low	GHSA-9ppj-qmqm-q256	tar@4.4.15	7.5.11
Low	GHSA-29vq-49wr-vm6x	werkzeug@2.0.1	3.1.6
Low	UBUNTU-CVE-2020-13776	systemd@245.4-4ubuntu3.11	no fix listed
Low	GHSA-mpwj-fcr6-x34c	yarn@1.22.5	1.22.13
Low	GO-2026-4341	stdlib@go1.17	1.24.12
Low	GO-2022-0533	stdlib@go1.17	1.17.11
Low	DSA-5346-1	libde265@1.0.8-1	1.0.11-0+deb11u1
Low	DLA-1684-1	systemd@215-17+deb8u7	215-17+deb8u10
Low	GHSA-hgf8-39gv-g3f2	werkzeug@2.0.1	3.1.4
Low	DLA-3398-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u6
Low	GHSA-2rmj-mq67-h97g	spring-web@5.2.8.RELEASE	5.3.38
Low	UBUNTU-CVE-2026-42012	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GO-2022-0523	stdlib@go1.17	1.17.12
Low	UBUNTU-CVE-2026-57432	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GO-2024-2887	stdlib@go1.17	1.21.11
Low	DLA-4127-1	subversion@1.14.1-3	1.14.1-3+deb11u2
Low	GO-2022-0522	stdlib@go1.17	1.17.12
Low	GO-2022-0527	stdlib@go1.17	1.17.12
Low	GO-2022-0524	stdlib@go1.17	1.17.12
Low	DLA-2817-1	postgresql-9.6@9.6.22-0+deb9u1	9.6.24-0+deb9u1
Low	DSA-5007-1	postgresql-13@13.3-1	13.5-0+deb11u1
Low	UBUNTU-CVE-2024-26458	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	DLA-3007-1	imagemagick@8:6.9.7.4+dfsg-11+deb9u13	8:6.9.7.4+dfsg-11+deb9u14
Low	DSA-5228-1	gdk-pixbuf@2.42.2+dfsg-1	2.42.2+dfsg-1+deb11u1
Low	GO-2023-1704	stdlib@go1.17	1.19.8
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.37	9.0.116
Low	DLA-3070-1	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u9
Low	DSA-5726-1	krb5@1.18.3-6	1.18.3-6+deb11u5
Low	GO-2022-0289	stdlib@go1.17	1.16.12
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	UBUNTU-CVE-2016-2781	coreutils@8.30-3ubuntu2	no fix listed
Low	DSA-5686-1	dav1d@0.7.1-3	0.7.1-3+deb11u1
Low	DLA-3783-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u7
Low	DLA-3893-1	expat@2.2.10-2	2.2.10-2+deb11u6
Low	DSA-5622-1	postgresql-13@13.3-1	13.14-0+deb11u1
Low	GHSA-h5x3-xfc9-m39h	symfony/routing@v5.3.7	5.4.53
Low	UBUNTU-CVE-2026-5545	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-3784	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm3
Low	DSA-5299-1	openexr@2.5.4-2	2.5.4-2+deb11u1
Low	DLA-2975-1	openjpeg2@2.1.2-1.1+deb9u6	2.1.2-1.1+deb9u7
Low	UBUNTU-CVE-2023-28322	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.19
Low	DLA-2897-1	apr@1.5.2-5	1.5.2-5+deb9u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	14615551,255	29,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.