drogue-cloud-core 0.7.11 Helm chart

Name: drogue-cloud-core Helm chart 0.7.11: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drogue-iot

Scored 14 Sept 2026

Drogue IoT Cloud core installation

Version 0.7.11 3 years agoapp version 0.11.0 0Artifact Hub

drogue-cloud-core 0.7.11 deploys 22 container images: bitnami/postgresql, ghcr.io/drogue-iot/mqtt-integration, ghcr.io/drogue-iot/websocket-integration, swaggerapi/swagger-ui and 18 more. Across the 21 measured, 2,823 findings — 141 critical, 193 high — 63 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.80.0-r1, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

55,6661411938501,639

2,823 findings over 21 of 22 images measured

KEV ×63 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	15	—	unmeasured
ghcr.io/drogue-iot/mqtt-integration×3	0.11.0	793769	2,505
ghcr.io/drogue-iot/websocket-integration	0.11.0	793769	2,505
swaggerapi/swagger-ui	v4.12.0	3114310	1,879
ghcr.io/drogue-iot/console-backend	0.11.0	793769	2,505
ghcr.io/drogue-iot/console-frontend	0.11.0	9125190	3,318
ghcr.io/drogue-iot/authentication-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/device-management-controller	0.11.0	793769	2,505
ghcr.io/drogue-iot/knative-operator	0.11.0	793769	2,505
ghcr.io/drogue-iot/outbox-controller	0.11.0	793769	2,505
ghcr.io/drogue-iot/device-management-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/topic-strimzi-operator	0.11.0	793769	2,505
ghcr.io/drogue-iot/ttn-operator	0.11.0	793769	2,505
ghcr.io/drogue-iot/user-auth-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/device-state-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/coap-endpoint	0.11.0	793769	2,505
ghcr.io/drogue-iot/command-endpoint	0.11.0	793769	2,505
ghcr.io/drogue-iot/http-endpoint	0.11.0	793769	2,505
ghcr.io/drogue-iot/mqtt-endpoint×3	0.11.0	793769	2,505
ghcr.io/drogue-iot/test-cert-generator	0.11.0	473363	2,044
ghcr.io/drogue-iot/database-migration	0.11.0	893772	2,615
quay.io/keycloak/keycloak	20.0	51094300	5,730

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

593 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2024:10779	python3@3.6.8-48.el8_7	0:3.6.8-69.el8_10
Low	GHSA-wf93-45jw-7689	pip@9.0.3	26.1.2
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.70	1.78
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.86.Final	4.1.135.Final
Low	GHSA-mjmq-gwgm-5qhm	sshd-common@2.7.0	2.9.3
Low	GHSA-jw7r-rxff-gv24	apache-mime4j-core@0.8.3	0.8.10
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.70	1.84
Low	RHSA-2024:3347	python3@3.6.8-48.el8_7	0:3.6.8-62.el8_10
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.70	1.78
Low	RHSA-2024:3233	libssh@0.9.6-3.el8	0:0.9.6-14.el8
Low	RHSA-2026:62218	libssh@0.9.6-3.el8	0:0.9.6-17.el8_10
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.70	no fix listed
Low	GHSA-8rmm-gm28-pj8q	keycloak-services@20.0.5	22.0.10
Low	GHSA-j628-q885-8gr5	keycloak-services@20.0.5	22.0.9
Low	GHSA-4265-ccf5-phj5	commons-compress@1.21	1.26.0
Low	RHSA-2026:0936	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1
Low	GHSA-22wj-vf5f-wrvj	h2@2.1.214	2.2.220
Low	RHSA-2023:3839	libssh@0.9.6-3.el8	0:0.9.6-10.el8_8
Low	RHSA-2023:0837	systemd@239-68.el8	0:239-68.el8_7.4
Low	RHSA-2023:0954	systemd@250-12.el9_1	0:250-12.el9_1.3
Low	RHSA-2026:0458	libpq@13.5-1.el9	0:13.23-1.el9_7
Low	RHSA-2024:0463	rpm@4.16.1.3-19.el9_1	0:4.16.1.3-27.el9_3
Low	RHSA-2024:0647	rpm@4.14.3-24.el8_7	0:4.14.3-28.el8_9
Low	RHSA-2025:7067	krb5@1.19.1-23.el9_1	0:1.21.1-6.el9
Low	GHSA-794g-x443-36f7	keycloak-services@20.0.5	no fix listed
Low	GHSA-w4p5-rfh6-cwrv	keycloak-services@20.0.5	26.6.2
Low	GHSA-32h4-44jj-c5vx	keycloak-services@20.0.5	26.6.4
Low	RHSA-2026:36733	cups@1:2.2.6-50.el8	1:2.2.6-68.el8_10
Low	GHSA-7xf9-4jfc-wgm4	keycloak-services@20.0.5	26.5.6
Low	RHSA-2026:4772	glibc@2.28-211.el8	0:2.28-251.el8_10.31
Low	GHSA-cphf-4846-3xx9	vertx-core@4.3.4	4.5.24
Low	GHSA-jpmx-996v-48fm	wildfly-elytron-http-oidc@1.20.1.Final	2.2.5.Final
Low	GHSA-wv3h-x6c4-r867	keycloak-services@20.0.5	26.4.9
Low	RHSA-2026:16799	krb5@1.18.2-21.el8	0:1.18.2-34.el8_10
Low	RHSA-2026:19357	krb5@1.19.1-23.el9_1	0:1.21.1-10.el9_8
Low	GHSA-hq3p-w4xv-x7vp	keycloak-services@20.0.5	26.6.2
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.86.Final	4.1.133.Final
Low	GHSA-2326-hx7g-3m9r	sshd-common@2.7.0	2.12.0
Low	GHSA-h5fg-jpgr-rv9c	vertx-web@4.3.4	4.5.22
Low	GHSA-5cc8-pgp5-7mpm	keycloak-core@20.0.5	21.1.2
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.86.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.70	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.70	no fix listed
Low	RHSA-2024:2512	file@5.39-10.el9	0:5.39-16.el9
Low	ALPINE-CVE-2023-28322	curl@7.80.0-r1	8.1.0-r0
Low	RHSA-2026:6473	python3@3.6.8-48.el8_7	0:3.6.8-75.el8_10
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.86.Final	4.1.136.Final
Low	GHSA-4vc8-pg5c-vg4x	keycloak-services@20.0.5	24.0.1
Low	GHSA-3677-xxcr-wjqv	jose4j@0.7.11	0.9.6
Low	GHSA-9vm7-v8wj-3fqw	keycloak-core@20.0.5	23.0.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.11latest	3 years ago	0.11.0	1411938501,639	55,666

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-core.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.