robot-shop Helm chart

Name: robot-shop Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Latest 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	717137370	7,786
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

710 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-3278-1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u5
Low	DSA-5333-1	tiff@4.2.0-1	4.2.0-1+deb11u3
Low	GHSA-775g-4xr8-78h8	spring-expression@5.2.8.RELEASE	no fix listed
Low	GO-2022-0526	stdlib@go1.17	1.17.12
Low	ALPINE-CVE-2020-28928	musl@1.1.24-r9	1.1.24-r10
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.2.8.RELEASE	5.2.18
Low	UBUNTU-CVE-2026-42015	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2024-28834	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.11
Low	GO-2023-1568	stdlib@go1.17	1.19.6
Low	GO-2022-1037	stdlib@go1.17	1.18.7
Low	DSA-5433-1	libx11@2:1.7.2-1	2:1.7.2-1+deb11u1
Low	UBUNTU-CVE-2021-3996	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	UBUNTU-CVE-2021-3995	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	UBUNTU-CVE-2025-40909	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-83g3-92jg-28cx	tar@4.4.15	7.5.8
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GO-2023-1987	stdlib@go1.17	1.19.12
Low	DSA-5746-1	postgresql-13@13.3-1	13.16-0+deb11u1
Low	DLA-4107-1	openjpeg2@2.4.0-3	2.4.0-3+deb11u1
Low	GO-2023-1752	stdlib@go1.17	1.19.9
Low	DLA-3926-1	perl@5.32.1-4+deb11u1	5.32.1-4+deb11u4
Low	UBUNTU-CVE-2025-14524	curl@7.68.0-1ubuntu2.6	no fix listed
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	DSA-5108-1	tiff@4.2.0-1	4.2.0-1+deb11u1
Low	UBUNTU-CVE-2022-35252	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.13
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.2	no fix listed
Low	DSA-5276-1	pixman@0.40.0-1	0.40.0-1.1~deb11u1
Low	GHSA-34jh-p97f-mpxf	urllib3@1.26.6	1.26.19
Low	GHSA-4xh5-x5gv-qwph	pip@21.2.4	25.3
Low	GHSA-w8wr-v893-vjvp	tar@4.4.15	7.5.18
Low	GO-2023-1705	stdlib@go1.17	1.19.8
Low	DSA-5370-1	apr@1.7.0-6	1.7.0-6+deb11u2
Low	UBUNTU-CVE-2021-20223	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4
Low	UBUNTU-CVE-2026-3731	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	DSA-4997-1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u3
Low	GO-2023-1878	stdlib@go1.17	1.19.11
Low	ALPINE-CVE-2021-42374	busybox@1.31.1-r16	1.31.1-r21
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.31-0ubuntu9.2	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@57.4.0	83.0.0
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.2.8.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.2.8.RELEASE	no fix listed
Low	DEBIAN-CVE-2021-46659	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	GO-2022-1039	stdlib@go1.17	1.18.7
Low	DLA-4452-1	apache2@2.4.48-3.1+deb11u1	2.4.66-1~deb11u1
Low	DSA-5364-1	apr-util@1.6.1-5	1.6.1-5+deb11u1
Low	GO-2024-2963	stdlib@go1.17	1.21.12
Low	GO-2023-1702	stdlib@go1.17	1.19.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	14615551,255	29,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.