StackRadar

robot-shop Helm chart

cloud-native-toolkit

Scored 14 Sept 2026

Sample micoservices application

Latest 1.1.1 4 years agoApp version not verified against the render 0Artifact Hub

robot-shop 1.1.1 deploys 12 container images: robotshop/rs-cart, robotshop/rs-catalogue, robotshop/rs-dispatch, robotshop/rs-mongodb and 8 more. Across them, 1,885 findings — 14 critical, 61 high — 24 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

29,55514615551,255

1,885 findings over 12 of 12 images measured

KEV ×24 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images
ImageTagVulnerabilitiesRadar Score
robotshop/rs-cartlatest0243731,950
robotshop/rs-cataloguelatest0242731,931
robotshop/rs-dispatchlatest03301842,584
robotshop/rs-mongodblatest7171373707,786
robotshop/rs-mysql-dblatest001229636
robotshop/rs-paymentlatest06901783,986
library/rabbitmq3.7-management-alpine192941,438
robotshop/rs-ratingslatest0427751,648
robotshop/rs-shippinglatest614731234,190
robotshop/rs-userlatest0243731,950
robotshop/rs-weblatest0220531,151
library/redis4.0.600920305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,130 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-42013gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm3
LowUBUNTU-CVE-2026-0861glibc@2.31-0ubuntu9.22.31-0ubuntu9.18+esm1
LowUBUNTU-CVE-2024-2236libgcrypt20@1.8.5-5ubuntu1no fix listed
LowUBUNTU-CVE-2025-69419openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm2
LowGHSA-23hv-mwm6-g8jftomcat-embed-core@9.0.379.0.106
LowGHSA-hmw2-7cc7-3qxxform-data@2.3.32.5.6
LowUBUNTU-CVE-2022-23491ca-certificates@20210119~20.04.120211016ubuntu0.20.04.1
LowUBUNTU-CVE-2025-48060jq@1.6-1ubuntu0.20.04.11.6-1ubuntu0.20.04.1+esm1
LowGO-2021-0240stdlib@go1.16.31.15.13
LowUBUNTU-CVE-2026-54874openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm5
LowDLA-3781-1libgd2@2.2.5-5.22.2.5-5.2+deb10u1
LowGHSA-563x-q5rq-57qptomcat-embed-core@9.0.379.0.116
LowGHSA-7r86-cg39-jmmjminimatch@3.0.43.1.3
LowUBUNTU-CVE-2026-42766openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm4
LowGO-2021-0242stdlib@go1.16.31.15.13
LowUBUNTU-CVE-2025-32990gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm1
LowGHSA-8qq5-rm4j-mr97tar@4.4.157.5.3
LowGO-2021-0264stdlib@go1.171.16.10
LowUBUNTU-CVE-2023-6918libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.5
LowGO-2022-0969stdlib@go1.171.18.6
LowGHSA-gmj6-6f8f-6699jinja2@3.0.13.1.5
LowUBUNTU-CVE-2025-6020pam@1.3.1-5ubuntu4.2no fix listed
LowUBUNTU-CVE-2023-27538curl@7.68.0-1ubuntu2.67.68.0-1ubuntu2.18
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.261.31
LowUBUNTU-CVE-2023-7104sqlite3@3.31.1-4ubuntu0.23.31.1-4ubuntu0.6
LowUBUNTU-CVE-2022-45142heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.4
LowDLA-3682-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u5
LowGO-2021-0239stdlib@go1.16.31.15.13
LowUBUNTU-CVE-2026-86145pcre2@10.34-7no fix listed
LowGHSA-qv9r-c865-cp47log4j-api@2.13.32.25.5
LowGO-2021-0347stdlib@go1.171.16.15
LowUBUNTU-CVE-2024-8096curl@7.68.0-1ubuntu2.67.68.0-1ubuntu2.24
LowGO-2021-0245stdlib@go1.16.31.15.15
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a0730.52.0
LowGHSA-23c5-xmqv-rm74minimatch@3.0.43.1.4
LowGHSA-mgvc-8q2h-5pgcspring-boot-starter-actuator@2.3.3.RELEASEno fix listed
LowGO-2021-0319stdlib@go1.171.16.14
LowUBUNTU-CVE-2023-47039perl@5.30.0-9ubuntu0.2no fix listed
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@9.0.379.0.118
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.0.0-20200302210943-78000ba7a0730.52.0
LowGHSA-mh99-v99m-4gvgbrace-expansion@1.1.111.1.17
LowUBUNTU-CVE-2025-15281glibc@2.31-0ubuntu9.22.31-0ubuntu9.18+esm1
LowUBUNTU-CVE-2025-6297dpkg@1.19.7ubuntu3no fix listed
LowGHSA-f9vj-2wh5-fj8jwerkzeug@2.0.13.0.6
LowDLA-1639-1systemd@215-17+deb8u7215-17+deb8u9
LowUBUNTU-CVE-2026-42011gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm3
LowUBUNTU-CVE-2024-12243gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12
LowUBUNTU-CVE-2022-41916heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.2
LowUBUNTU-CVE-2026-9538perl@5.30.0-9ubuntu0.2no fix listed
LowGO-2022-0493stdlib@go1.171.17.10

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.1latest4 years ago—14615551,25529,555

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloud-native-toolkit/robot-shop.svg)](https://charts.stackradar.io/charts/cloud-native-toolkit/robot-shop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.