robot-shop Helm chart

Name: robot-shop Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Latest 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	717137370	7,786
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

710 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-3513-1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u8
Low	DSA-5567-1	tiff@4.2.0-1	4.2.0-1+deb11u5
Low	DLA-4432-1	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u16
Low	UBUNTU-CVE-2026-7017	perl@5.30.0-9ubuntu0.2	no fix listed
Low	DLA-4064-1	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u6
Low	GO-2022-0525	stdlib@go1.17	1.17.12
Low	GO-2022-0520	stdlib@go1.17	1.17.12
Low	MAL-2022-4933	npm-cli-docs@0.1.0	no fix listed
Low	DLA-2932-1	tiff@4.0.8-2+deb9u6	4.0.8-2+deb9u8
Low	UBUNTU-CVE-2025-0395	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.17
Low	UBUNTU-CVE-2023-4039	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	DLA-3850-1	glibc@2.28-10	2.28-10+deb10u4
Low	DSA-5678-1	glibc@2.31-13	2.31-13+deb11u10
Low	UBUNTU-CVE-2026-76642	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	DLA-2210-1	apt@1.0.9.8.4	1.0.9.8.6
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
Low	UBUNTU-CVE-2026-11822	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	DLA-4267-1	gnutls28@3.7.1-5	3.7.1-5+deb11u8
Low	DLA-4074-1	mariadb-10.5@1:10.5.11-1	1:10.5.28-0+deb11u1
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.24+esm1
Low	DLA-3459-1	libxpm@1:3.5.12-1	1:3.5.12-1+deb10u1
Low	DLA-3881-1	aom@1.0.0.errata1-3	1.0.0.errata1-3+deb11u2
Low	DLA-3962-1	glib2.0@2.66.8-1	2.66.8-1+deb11u5
Low	PYSEC-2026-3721	pip@21.2.4	26.2
Low	GO-2023-2375	stdlib@go1.17	1.20.0
Low	UBUNTU-CVE-2025-15079	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm2
Low	GO-2023-1569	stdlib@go1.17	1.19.6
Low	DLA-3107-1	sqlite3@3.27.2-3+deb10u1	3.27.2-3+deb10u2
Low	DLA-4309-1	libxslt@1.1.34-4	1.1.34-4+deb11u3
Low	GHSA-mq26-g339-26xf	pip@21.2.4	23.3
Low	GHSA-cm22-4g7w-348p	serve-static@1.14.1	1.16.0
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.0.1	3.1.6
Low	DLA-2784-1	icu@57.1-6+deb9u4	57.1-6+deb9u5
Low	GO-2023-2382	stdlib@go1.17	1.20.12
Low	UBUNTU-CVE-2026-6429	curl@7.68.0-1ubuntu2.6	no fix listed
Low	DLA-1762-1	systemd@215-17+deb8u7	215-17+deb8u12
Low	GO-2022-1143	stdlib@go1.17	1.18.9
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
Low	UBUNTU-CVE-2024-22365	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7
Low	DSA-5401-1	postgresql-13@13.3-1	13.11-0+deb11u1
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-gvwx-54wh-qm9j	tar@4.4.15	7.5.17
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
Low	GO-2024-2599	stdlib@go1.17	1.21.8
Low	DLA-4344-1	gdk-pixbuf@2.42.2+dfsg-1	2.42.2+dfsg-1+deb11u4
Low	GO-2022-1038	stdlib@go1.17	1.18.7
Low	DSA-5357-1	git@1:2.30.2-1	1:2.30.2-1+deb11u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	14615551,255	29,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.