drogue-cloud-examples Helm chart

Name: drogue-cloud-examples Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drogue-iot

Scored 14 Sept 2026

Installation of examples on top of Drogue IoT Cloud

Latest 0.7.11 3 years agodeploys tag 9.2.4 0Artifact Hub

drogue-cloud-examples 0.7.11 deploys 6 container images: ghcr.io/ctron/kubectl, grafana/grafana, ghcr.io/drogue-iot/postgresql-pusher, ghcr.io/drogue-iot/drogue-event-source and 2 more. Across the 5 measured, 2,299 findings — 21 critical, 56 high — 12 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 3.0.2-0ubuntu1.2, fixed in 3.0.2-0ubuntu1.5. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

30,69921564671,755

2,299 findings over 5 of 6 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/ctron/kubectl	1.25	1732163	2,527
grafana/grafana	9.2.4	0637198	2,839
ghcr.io/drogue-iot/postgresql-pusher	0.2.1	3124566	2,637
ghcr.io/drogue-iot/drogue-event-source	0.2.1	3124566	2,637
timescale/timescaledb-ha×2	pg14-ts2.6-latest	10233081,271	20,119
bitnami/postgresql	14	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,441 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-11822	sqlite3@3.37.2-2	3.37.2-2ubuntu0.6
Low	UBUNTU-CVE-2026-11824	sqlite3@3.37.2-2	3.37.2-2ubuntu0.6
Low	UBUNTU-CVE-2023-1916	tiff@4.3.0-6	4.3.0-6ubuntu0.6
Low	UBUNTU-CVE-2025-4598	systemd@249.11-0ubuntu3.1	249.11-0ubuntu3.16
Low	UBUNTU-CVE-2026-26199	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2024-28085	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.4
Low	UBUNTU-CVE-2025-52886	poppler@22.02.0-2	22.02.0-2ubuntu0.9
Low	UBUNTU-CVE-2024-21212	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.40-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2024-21179	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.39-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2024-0450	python3.10@3.10.4-3	3.10.12-1~22.04.4
Low	GO-2023-2375	stdlib@go1.19.3	1.20.0
Low	UBUNTU-CVE-2025-15079	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.22
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.17.0	0.38.0
Low	GO-2023-1569	stdlib@go1.19.3	1.19.6
Low	UBUNTU-CVE-2025-12781	python3.10@3.10.4-3	no fix listed
Low	UBUNTU-CVE-2025-21540	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.41-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-15366	python3.10@3.10.4-3	3.10.12-1~22.04.15
Low	UBUNTU-CVE-2026-87910	python3.10@3.10.4-3	no fix listed
Low	UBUNTU-CVE-2025-21497	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.41-0ubuntu0.22.04.1
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.45.0	1.83.1
Low	GO-2023-2382	stdlib@go1.20.10	1.20.12
Low	UBUNTU-CVE-2026-6429	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.24
Low	RHSA-2023:3840	sqlite@3.26.0-15.el8	0:3.26.0-18.el8_8
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	GO-2022-1143	stdlib@go1.19.3	1.18.9
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2024-22365	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.4
Low	UBUNTU-CVE-2026-22796	openssl@3.0.2-0ubuntu1.2	3.0.2-0ubuntu1.21
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.14.0	0.45.0
Low	UBUNTU-CVE-2024-21008	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.37-0ubuntu0.22.04.3
Low	UBUNTU-CVE-2024-21013	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.37-0ubuntu0.22.04.3
Low	GHSA-r6j8-c6r2-37rr	k8s.io/kubernetes@v1.25.16	1.32.10
Low	UBUNTU-CVE-2026-6666	pgbouncer@1.17.0-3.pgdg22.04+1	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2026-21968	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.45-0ubuntu0.22.04.1
Low	GO-2024-2599	stdlib@go1.20.10	1.21.8
Low	UBUNTU-CVE-2025-53053	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.44-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-53054	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.44-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2025-21519	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.41-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-48281	tiff@4.3.0-6	4.3.0-6ubuntu0.5
Low	UBUNTU-CVE-2025-30722	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.42-0ubuntu0.22.04.1
Low	GO-2022-1038	stdlib@go1.15.6	1.18.7
Low	UBUNTU-CVE-2022-4285	gdb@12.0.90-0ubuntu1	12.1-0ubuntu1~22.04.2
Low	UBUNTU-CVE-2024-20968	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.35-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2026-47064	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.46-0ubuntu0.22.04.4
Low	GO-2024-3106	stdlib@go1.20.10	1.22.7
Low	UBUNTU-CVE-2025-50952	openjpeg2@2.4.0-6	2.4.0-6ubuntu0.4
Low	UBUNTU-CVE-2023-0800	tiff@4.3.0-6	4.3.0-6ubuntu0.4
Low	UBUNTU-CVE-2023-0801	tiff@4.3.0-6	4.3.0-6ubuntu0.4
Low	UBUNTU-CVE-2023-0802	tiff@4.3.0-6	4.3.0-6ubuntu0.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.11latest	3 years ago	9.2.4	21564671,755	30,699

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-examples.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-examples)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.