robot-shop Helm chart

Name: robot-shop Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Latest 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
robotshop/rs-cart	latest	024373	1,950
robotshop/rs-catalogue	latest	024273	1,931
robotshop/rs-dispatch	latest	0330184	2,584
robotshop/rs-mongodb	latest	717137370	7,786
robotshop/rs-mysql-db	latest	001229	636
robotshop/rs-payment	latest	0690178	3,986
library/rabbitmq	3.7-management-alpine	19294	1,438
robotshop/rs-ratings	latest	042775	1,648
robotshop/rs-shipping	latest	61473123	4,190
robotshop/rs-user	latest	024373	1,950
robotshop/rs-web	latest	022053	1,151
library/redis	4.0.6	00920	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

710 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2024-3106	stdlib@go1.17	1.22.7
Low	GHSA-87hc-h4r5-73f7	werkzeug@2.0.1	3.1.5
Low	UBUNTU-CVE-2026-1965	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm3
Low	GO-2023-1570	stdlib@go1.17	1.19.6
Low	UBUNTU-CVE-2025-3576	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.11
Low	DLA-1935-1	e2fsprogs@1.42.12-2+b1	1.42.12-2+deb8u1
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-7168	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5
Low	DEBIAN-CVE-2021-46667	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	UBUNTU-CVE-2022-3821	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.20
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	DLA-3405-1	libxml2@2.9.4+dfsg1-7+deb10u2	2.9.4+dfsg1-7+deb10u6
Low	DSA-5391-1	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u4
Low	GO-2022-0531	stdlib@go1.17	1.17.11
Low	GO-2024-2600	stdlib@go1.17	1.21.8
Low	UBUNTU-CVE-2026-59847	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-5m4m-73w9-8433	spring-data-commons@2.3.3.RELEASE	no fix listed
Low	DLA-4031-1	git@1:2.30.2-1	1:2.30.2-1+deb11u4
Low	GHSA-m6fv-jmcg-4jfg	send@0.17.1	0.19.0
Low	UBUNTU-CVE-2026-3783	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2026-4873	curl@7.68.0-1ubuntu2.6	no fix listed
Low	UBUNTU-CVE-2023-39804	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.4
Low	GHSA-6gf2-pvqw-37ph	spring-core@5.2.8.RELEASE	5.2.19
Low	GO-2024-2609	stdlib@go1.17	1.21.8
Low	DEBIAN-CVE-2021-46661	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	DEBIAN-CVE-2021-46663	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.4-1ubuntu1	5.2.4-1ubuntu1.1+esm1
Low	GO-2024-3107	stdlib@go1.17	1.22.7
Low	DLA-4247-1	djvulibre@3.5.28-2	3.5.28-2.2~deb11u1
Low	DEBIAN-CVE-2021-46664	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	DEBIAN-CVE-2021-46665	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	DEBIAN-CVE-2021-46668	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	DLA-2800-1	cups@2.2.1-8+deb9u6	2.2.1-8+deb9u7
Low	GO-2023-1751	stdlib@go1.17	1.19.9
Low	GO-2023-1753	stdlib@go1.17	1.19.9
Low	DLA-4145-1	expat@2.2.10-2	2.2.10-2+deb11u7
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.11.2	2.18.8
Low	UBUNTU-CVE-2026-54411	pam@1.3.1-5ubuntu4.2	no fix listed
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.6	2.5.0
Low	DLA-2156-1	e2fsprogs@1.42.12-2+b1	1.42.12-2+deb8u2
Low	DEBIAN-CVE-2021-46662	mariadb-10.5@1:10.5.11-1	1:10.5.15-0+deb11u1
Low	GHSA-c33w-24p9-8m24	configobj@5.0.6	5.0.9
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.7.1	1.17.7
Low	DLA-4208-1	mariadb-10.5@1:10.5.11-1	1:10.5.29-0+deb11u1
Low	UBUNTU-CVE-2026-19487	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@2.3.3.RELEASE	no fix listed
Low	DLA-4481-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u2
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
Low	DSA-5408-1	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u1
Low	GHSA-qw6h-vgh9-j6wx	express@4.17.1	4.20.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	4 years ago	—	14615551,255	29,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.