drogue-cloud-examples 0.7.11 Helm chart

Name: drogue-cloud-examples Helm chart 0.7.11: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drogue-iot

Scored 15 Sept 2026

Installation of examples on top of Drogue IoT Cloud

Version 0.7.11 3 years agodeploys tag 9.2.4 0Artifact Hub

drogue-cloud-examples 0.7.11 deploys 6 container images: ghcr.io/ctron/kubectl, grafana/grafana, ghcr.io/drogue-iot/postgresql-pusher, ghcr.io/drogue-iot/drogue-event-source and 2 more. Across the 5 measured, 2,308 findings — 17 critical, 60 high — 12 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 3.0.2-0ubuntu1.2, fixed in 3.0.2-0ubuntu1.5. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

30,75917604671,764

2,308 findings over 5 of 6 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/ctron/kubectl	1.25	1732163	2,527
grafana/grafana	9.2.4	0637198	2,839
ghcr.io/drogue-iot/postgresql-pusher	0.2.1	3124566	2,637
ghcr.io/drogue-iot/drogue-event-source	0.2.1	3124566	2,637
timescale/timescaledb-ha×2	pg14-ts2.6-latest	10233081,271	20,119
bitnami/postgresql	14	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,441 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42014	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2023-39129	gdb@12.0.90-0ubuntu1	12.1-0ubuntu1~22.04.2
Low	GO-2025-3420	stdlib@go1.20.10	1.22.11
Low	GO-2026-4342	stdlib@go1.20.10	1.24.12
Low	GO-2024-2598	stdlib@go1.20.10	1.21.8
Low	GO-2025-3751	stdlib@go1.20.10	1.23.10
Low	UBUNTU-CVE-2026-78409	util-linux@2.37.2-4ubuntu3	no fix listed
Low	UBUNTU-CVE-2024-13176	openssl@3.0.2-0ubuntu1.2	3.0.2-0ubuntu1.19
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.45.0	1.82.2
Low	GHSA-537c-gmf6-5ccf	cryptography@3.4.8	48.0.1
Low	GHSA-m425-mq94-257g	google.golang.org/grpc@v1.45.0	1.56.3
Low	UBUNTU-CVE-2023-2004	freetype@2.11.1+dfsg-1build1	2.11.1+dfsg-1ubuntu0.2
Low	UBUNTU-CVE-2025-52099	sqlite3@3.37.2-2	3.37.2-2ubuntu0.4
Low	UBUNTU-CVE-2026-9375	python-urllib3@1.26.5-1~exp1	no fix listed
Low	UBUNTU-CVE-2026-21936	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.45-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-21937	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.45-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-21941	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.45-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-21948	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.45-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-21964	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.45-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2024-32606	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2024-33875	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2024-33876	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2023-39327	openjpeg2@2.4.0-6	2.4.0-6ubuntu0.1
Low	GO-2024-2854	github.com/grafana/grafana@v9.2.4	no fix listed
Low	UBUNTU-CVE-2026-45446	openssl@3.0.2-0ubuntu1.2	3.0.2-0ubuntu1.25
Low	GO-2024-2697	github.com/grafana/grafana@v9.2.4	no fix listed
Low	UBUNTU-CVE-2026-49014	gdal@3.4.1+dfsg-1build4	no fix listed
Low	UBUNTU-CVE-2026-4360	python3.10@3.10.4-3	3.10.12-1~22.04.18
Low	UBUNTU-CVE-2026-22801	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.3
Low	UBUNTU-CVE-2026-19027	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.0.0-20220525230936-793ad666bf5e
Low	UBUNTU-CVE-2023-39130	gdb@12.0.90-0ubuntu1	12.1-0ubuntu1~22.04.2
Low	UBUNTU-CVE-2026-3446	python3.10@3.10.4-3	no fix listed
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.26.5	1.26.18
Low	UBUNTU-CVE-2023-45803	python-urllib3@1.26.5-1~exp1	1.26.5-1~exp1ubuntu0.1
Low	UBUNTU-CVE-2023-39328	openjpeg2@2.4.0-6	no fix listed
Low	UBUNTU-CVE-2026-13732	gdb@12.0.90-0ubuntu1	no fix listed
Low	GO-2025-4116	golang.org/x/crypto@v0.14.0	0.43.0
Low	RHSA-2026:55804	nghttp2@1.33.0-5.el8_9	0:1.33.0-6.el8_10.3
Low	UBUNTU-CVE-2026-58055	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.4
Low	GO-2026-4870	stdlib@go1.20.10	1.25.9
Low	GO-2022-0532	stdlib@go1.15.6	1.17.11
Low	UBUNTU-CVE-2026-39956	jq@1.6-2.1ubuntu3	1.6-2.1ubuntu3.2
Low	GO-2025-4009	stdlib@go1.20.10	1.24.8
Low	UBUNTU-CVE-2024-29166	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-86138	libxml2@2.9.13+dfsg-1ubuntu0.1	no fix listed
Low	GO-2026-4947	stdlib@go1.20.10	1.25.9
Low	UBUNTU-CVE-2026-19026	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-19028	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-2297	python3.10@3.10.4-3	3.10.12-1~22.04.16

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.11latest	3 years ago	9.2.4	17604671,764	30,759

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-examples.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-examples)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.