StackRadar

drogue-cloud-core Helm chart

drogue-iotVerified publisher

Scored 14 Sept 2026

Drogue IoT Cloud core installation

Latest 0.7.11 3 years agoapp version 0.11.0 0Artifact Hub

drogue-cloud-core 0.7.11 deploys 22 container images: bitnami/postgresql, ghcr.io/drogue-iot/mqtt-integration, ghcr.io/drogue-iot/websocket-integration, swaggerapi/swagger-ui and 18 more. Across the 21 measured, 2,823 findings — 141 critical, 193 high — 63 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.80.0-r1, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

55,6661411938501,639

2,823 findings over 21 of 22 images measured

KEV ×63 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

22 images
ImageTagVulnerabilitiesRadar Score
bitnami/postgresql15—unmeasured
ghcr.io/drogue-iot/mqtt-integration×30.11.07937692,505
ghcr.io/drogue-iot/websocket-integration0.11.07937692,505
swaggerapi/swagger-uiv4.12.031143101,879
ghcr.io/drogue-iot/console-backend0.11.07937692,505
ghcr.io/drogue-iot/console-frontend0.11.091251903,318
ghcr.io/drogue-iot/authentication-service0.11.07937692,505
ghcr.io/drogue-iot/device-management-controller0.11.07937692,505
ghcr.io/drogue-iot/knative-operator0.11.07937692,505
ghcr.io/drogue-iot/outbox-controller0.11.07937692,505
ghcr.io/drogue-iot/device-management-service0.11.07937692,505
ghcr.io/drogue-iot/topic-strimzi-operator0.11.07937692,505
ghcr.io/drogue-iot/ttn-operator0.11.07937692,505
ghcr.io/drogue-iot/user-auth-service0.11.07937692,505
ghcr.io/drogue-iot/device-state-service0.11.07937692,505
ghcr.io/drogue-iot/coap-endpoint0.11.07937692,505
ghcr.io/drogue-iot/command-endpoint0.11.07937692,505
ghcr.io/drogue-iot/http-endpoint0.11.07937692,505
ghcr.io/drogue-iot/mqtt-endpoint×30.11.07937692,505
ghcr.io/drogue-iot/test-cert-generator0.11.04733632,044
ghcr.io/drogue-iot/database-migration0.11.08937722,615
quay.io/keycloak/keycloak20.0510943005,730

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

371 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2024:0647rpm@4.14.3-24.el8_70:4.14.3-28.el8_9
LowRHSA-2025:7067krb5@1.19.1-23.el9_10:1.21.1-6.el9
LowGHSA-794g-x443-36f7keycloak-services@20.0.5no fix listed
LowGHSA-w4p5-rfh6-cwrvkeycloak-services@20.0.526.6.2
LowGHSA-32h4-44jj-c5vxkeycloak-services@20.0.526.6.4
LowRHSA-2026:36733cups@1:2.2.6-50.el81:2.2.6-68.el8_10
LowGHSA-7xf9-4jfc-wgm4keycloak-services@20.0.526.5.6
LowRHSA-2026:4772glibc@2.28-211.el80:2.28-251.el8_10.31
LowGHSA-cphf-4846-3xx9vertx-core@4.3.44.5.24
LowGHSA-jpmx-996v-48fmwildfly-elytron-http-oidc@1.20.1.Final2.2.5.Final
LowGHSA-wv3h-x6c4-r867keycloak-services@20.0.526.4.9
LowRHSA-2026:16799krb5@1.18.2-21.el80:1.18.2-34.el8_10
LowRHSA-2026:19357krb5@1.19.1-23.el9_10:1.21.1-10.el9_8
LowGHSA-hq3p-w4xv-x7vpkeycloak-services@20.0.526.6.2
LowGHSA-xxqh-mfjm-7mv9netty-codec-http@4.1.86.Final4.1.133.Final
LowGHSA-2326-hx7g-3m9rsshd-common@2.7.02.12.0
LowGHSA-h5fg-jpgr-rv9cvertx-web@4.3.44.5.22
LowGHSA-5cc8-pgp5-7mpmkeycloak-core@20.0.521.1.2
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.86.Final4.1.137.Final
LowGHSA-4cx2-fc23-5wg6bcpkix-jdk15on@1.701.79
LowGHSA-hr8g-6v94-x4m9bcprov-jdk15on@1.70no fix listed
LowRHSA-2024:2512file@5.39-10.el90:5.39-16.el9
LowALPINE-CVE-2023-28322curl@7.80.0-r18.1.0-r0
LowRHSA-2026:6473python3@3.6.8-48.el8_70:3.6.8-75.el8_10
LowGHSA-q4f6-jm68-57wwnetty-codec-http@4.1.86.Final4.1.136.Final
LowGHSA-4vc8-pg5c-vg4xkeycloak-services@20.0.524.0.1
LowGHSA-3677-xxcr-wjqvjose4j@0.7.110.9.6
LowGHSA-9vm7-v8wj-3fqwkeycloak-core@20.0.523.0.4
LowRHSA-2024:1784gnutls@3.6.16-5.el8_60:3.6.16-8.el8_9.3
LowRHSA-2024:1879gnutls@3.7.6-12.el9_00:3.7.6-23.el9_3.4
LowRHSA-2024:2570gnutls@3.7.6-12.el9_00:3.8.3-4.el9_4
LowRHSA-2026:39315libsolv@0.7.22-1.el90:0.7.24-6.el9_8
LowGHSA-mv64-86g8-cqq7resteasy-reactive@2.13.7.Final3.2.11.Final
LowRHSA-2023:7836avahi@0.7-20.el80:0.7-21.el8_9.1
LowRHSA-2026:20597glibc@2.34-40.el90:2.34-270.el9_8
LowGHSA-6cqp-g7gg-8hr5netty-codec-http@4.1.86.Final4.1.136.Final
LowRHSA-2023:0340bash@5.1.8-5.el90:5.1.8-6.el9_1
LowGHSA-53jx-vvf9-4x38vertx-web@4.3.44.3.8
LowRHSA-2026:42733glibc@2.28-211.el80:2.28-251.el8_10.40
LowRHSA-2026:42952glibc@2.34-40.el90:2.34-274.el9_8
LowGHSA-rr5q-3xwr-f323keycloak-services@20.0.526.6.3
LowGHSA-rr5q-3xwr-f323keycloak-server-spi-private@20.0.526.6.3
LowGHSA-4x37-hw65-52w8keycloak-services@20.0.526.6.2
LowGHSA-m4cv-j2px-7723netty-codec-http@4.1.86.Final4.1.133.Final
LowRHSA-2026:0596cups@1:2.2.6-50.el81:2.2.6-66.el8_10
LowGHSA-f8h5-v2vg-46rrquarkus-core@2.13.7.Final3.2.12.Final
LowRHSA-2026:4188gnutls@3.7.6-12.el9_00:3.8.3-10.el9_7
LowRHSA-2026:5585gnutls@3.6.16-5.el8_60:3.6.16-8.el8_10.5
LowALPINE-CVE-2022-35252curl@7.80.0-r17.80.0-r3
LowGHSA-4xh5-x5gv-qwphpip@9.0.325.3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.7.11latest3 years ago0.11.01411938501,63955,666

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-core.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-core)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.