drogue-cloud-core 0.7.11 Helm chart

Name: drogue-cloud-core Helm chart 0.7.11: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drogue-iot

Scored 14 Sept 2026

Drogue IoT Cloud core installation

Version 0.7.11 3 years agoapp version 0.11.0 0Artifact Hub

drogue-cloud-core 0.7.11 deploys 22 container images: bitnami/postgresql, ghcr.io/drogue-iot/mqtt-integration, ghcr.io/drogue-iot/websocket-integration, swaggerapi/swagger-ui and 18 more. Across the 21 measured, 2,823 findings — 141 critical, 193 high — 63 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.80.0-r1, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

55,6661411938501,639

2,823 findings over 21 of 22 images measured

KEV ×63 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	15	—	unmeasured
ghcr.io/drogue-iot/mqtt-integration×3	0.11.0	793769	2,505
ghcr.io/drogue-iot/websocket-integration	0.11.0	793769	2,505
swaggerapi/swagger-ui	v4.12.0	3114310	1,879
ghcr.io/drogue-iot/console-backend	0.11.0	793769	2,505
ghcr.io/drogue-iot/console-frontend	0.11.0	9125190	3,318
ghcr.io/drogue-iot/authentication-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/device-management-controller	0.11.0	793769	2,505
ghcr.io/drogue-iot/knative-operator	0.11.0	793769	2,505
ghcr.io/drogue-iot/outbox-controller	0.11.0	793769	2,505
ghcr.io/drogue-iot/device-management-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/topic-strimzi-operator	0.11.0	793769	2,505
ghcr.io/drogue-iot/ttn-operator	0.11.0	793769	2,505
ghcr.io/drogue-iot/user-auth-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/device-state-service	0.11.0	793769	2,505
ghcr.io/drogue-iot/coap-endpoint	0.11.0	793769	2,505
ghcr.io/drogue-iot/command-endpoint	0.11.0	793769	2,505
ghcr.io/drogue-iot/http-endpoint	0.11.0	793769	2,505
ghcr.io/drogue-iot/mqtt-endpoint×3	0.11.0	793769	2,505
ghcr.io/drogue-iot/test-cert-generator	0.11.0	473363	2,044
ghcr.io/drogue-iot/database-migration	0.11.0	893772	2,615
quay.io/keycloak/keycloak	20.0	51094300	5,730

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

593 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2024:1784	gnutls@3.6.16-5.el8_6	0:3.6.16-8.el8_9.3
Low	RHSA-2024:1879	gnutls@3.7.6-12.el9_0	0:3.7.6-23.el9_3.4
Low	RHSA-2024:2570	gnutls@3.7.6-12.el9_0	0:3.8.3-4.el9_4
Low	RHSA-2026:39315	libsolv@0.7.22-1.el9	0:0.7.24-6.el9_8
Low	GHSA-mv64-86g8-cqq7	resteasy-reactive@2.13.7.Final	3.2.11.Final
Low	RHSA-2023:7836	avahi@0.7-20.el8	0:0.7-21.el8_9.1
Low	RHSA-2026:20597	glibc@2.34-40.el9	0:2.34-270.el9_8
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.86.Final	4.1.136.Final
Low	RHSA-2023:0340	bash@5.1.8-5.el9	0:5.1.8-6.el9_1
Low	GHSA-53jx-vvf9-4x38	vertx-web@4.3.4	4.3.8
Low	RHSA-2026:42733	glibc@2.28-211.el8	0:2.28-251.el8_10.40
Low	RHSA-2026:42952	glibc@2.34-40.el9	0:2.34-274.el9_8
Low	GHSA-rr5q-3xwr-f323	keycloak-server-spi-private@20.0.5	26.6.3
Low	GHSA-rr5q-3xwr-f323	keycloak-services@20.0.5	26.6.3
Low	GHSA-4x37-hw65-52w8	keycloak-services@20.0.5	26.6.2
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.86.Final	4.1.133.Final
Low	RHSA-2026:0596	cups@1:2.2.6-50.el8	1:2.2.6-66.el8_10
Low	GHSA-f8h5-v2vg-46rr	quarkus-core@2.13.7.Final	3.2.12.Final
Low	RHSA-2026:4188	gnutls@3.7.6-12.el9_0	0:3.8.3-10.el9_7
Low	RHSA-2026:5585	gnutls@3.6.16-5.el8_6	0:3.6.16-8.el8_10.5
Low	ALPINE-CVE-2022-35252	curl@7.80.0-r1	7.80.0-r3
Low	GHSA-4xh5-x5gv-qwph	pip@9.0.3	25.3
Low	GHSA-c739-f6xw-6pv2	keycloak-services@20.0.5	26.6.2
Low	RHSA-2023:4864	cups@1:2.2.6-50.el8	1:2.2.6-51.el8_8.1
Low	GHSA-v5g5-wwmp-jppw	keycloak-services@20.0.5	no fix listed
Low	GHSA-2p82-5wwr-43cw	keycloak-ldap-federation@20.0.5	26.0.10
Low	RHSA-2023:7190	avahi@0.7-20.el8	0:0.7-21.el8
Low	GHSA-h35f-9h28-mq5c	setuptools@39.2.0	83.0.0
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.86.Final	4.1.135.Final
Low	GHSA-f4v7-3mww-9gc2	keycloak-quarkus-server@20.0.5	26.0.8
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.21	1.26.0
Low	RHSA-2026:61623	gzip@1.12-1.el9	0:1.12-2.el9_8
Low	RHSA-2025:10585	jq@1.6-12.el9	0:1.6-17.el9_6.2
Low	RHSA-2025:10618	jq@1.6-3.el8	0:1.6-11.el8_10
Low	GHSA-cvg2-7c3j-g36j	keycloak-services@20.0.5	23.0.3
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.86.Final	4.1.129.Final
Low	RHSA-2026:64800	glib2@2.68.4-5.el9	0:2.68.4-19.el9_8.10
Low	RHSA-2026:58936	sqlite@3.34.1-5.el9	0:3.34.1-11.el9_8
Low	RHSA-2026:58938	sqlite@3.26.0-16.el8_6	0:3.26.0-21.el8_10
Low	RHSA-2025:22660	systemd@250-12.el9_1	0:252-55.el9_7.7
Low	GHSA-m6qj-3mpp-57v8	keycloak-services@20.0.5	26.6.3
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.86.Final	4.1.135.Final
Low	GHSA-2935-2wfm-hhpv	keycloak-services@20.0.5	no fix listed
Low	PYSEC-2026-3721	pip@9.0.3	26.2
Low	GHSA-mq26-g339-26xf	pip@9.0.3	23.3
Low	RHSA-2023:3840	sqlite@3.26.0-16.el8_6	0:3.26.0-18.el8_8
Low	RHSA-2026:50147	libgcrypt@1.10.0-8.el9_0	0:1.10.0-13.el9_8
Low	RHSA-2024:2438	pam@1.5.1-12.el9	0:1.5.1-19.el9
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.86.Final	4.1.136.Final
Low	GHSA-4f53-xh3v-g8x4	keycloak-services@20.0.5	22.0.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.11latest	3 years ago	0.11.0	1411938501,639	55,666

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-core.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.