drogue-cloud-examples Helm chart

Name: drogue-cloud-examples Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drogue-iot

Scored 14 Sept 2026

Installation of examples on top of Drogue IoT Cloud

Latest 0.7.11 3 years agodeploys tag 9.2.4 0Artifact Hub

drogue-cloud-examples 0.7.11 deploys 6 container images: ghcr.io/ctron/kubectl, grafana/grafana, ghcr.io/drogue-iot/postgresql-pusher, ghcr.io/drogue-iot/drogue-event-source and 2 more. Across the 5 measured, 2,299 findings — 21 critical, 56 high — 12 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 3.0.2-0ubuntu1.2, fixed in 3.0.2-0ubuntu1.5. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

30,69921564671,755

2,299 findings over 5 of 6 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/ctron/kubectl	1.25	2632163	2,528
grafana/grafana	9.2.4	0637198	2,839
ghcr.io/drogue-iot/postgresql-pusher	0.2.1	4114566	2,637
ghcr.io/drogue-iot/drogue-event-source	0.2.1	4114566	2,637
timescale/timescaledb-ha×2	pg14-ts2.6-latest	11223081,262	20,058
bitnami/postgresql	14	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,432 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-76641	expat@2.4.7-1	no fix listed
Low	UBUNTU-CVE-2025-50083	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.43-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-6597	python3.10@3.10.4-3	3.10.12-1~22.04.4
Low	UBUNTU-CVE-2026-6253	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2025-50082	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.43-0ubuntu0.22.04.1
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.4.8	0.6.4
Low	UBUNTU-CVE-2026-33164	libde265@1.0.8-1	1.0.8-1ubuntu0.3+esm2
Low	UBUNTU-CVE-2026-59884	pyasn1@0.4.8-1	0.4.8-1ubuntu0.3
Low	RHSA-2026:0991	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10
Low	UBUNTU-CVE-2025-13601	glib2.0@2.72.1-1	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2022-21594	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-21599	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-21604	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-21632	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-21633	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	GO-2023-1703	stdlib@go1.19.3	1.19.8
Low	GHSA-9hjg-9r4m-mvj7	requests@2.25.1	2.32.4
Low	UBUNTU-CVE-2024-47081	requests@2.25.1+dfsg-2	2.25.1+dfsg-2ubuntu0.3
Low	GO-2021-0241	stdlib@go1.15.6	1.15.13
Low	UBUNTU-CVE-2025-5222	icu@70.1-2	no fix listed
Low	UBUNTU-CVE-2022-21547	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.30-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-21553	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.30-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2023-0996	libheif@1.12.0-2build1	1.12.0-2ubuntu0.1~esm1
Low	RHSA-2023:3839	libssh@0.9.4-3.el8	0:0.9.6-10.el8_8
Low	UBUNTU-CVE-2024-20994	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.37-0ubuntu0.22.04.3
Low	GO-2022-0521	stdlib@go1.15.6	1.17.12
Low	UBUNTU-CVE-2025-14087	glib2.0@2.72.1-1	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2023-22058	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.34-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-21637	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-21640	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	UBUNTU-CVE-2022-39400	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.31-0ubuntu0.22.04.1
Low	RHSA-2023:0837	systemd@239-51.el8_5.3	0:239-68.el8_7.4
Low	UBUNTU-CVE-2022-4415	systemd@249.11-0ubuntu3.1	249.11-0ubuntu3.7
Low	UBUNTU-CVE-2023-23931	python-cryptography@3.4.8-1ubuntu2	3.4.8-1ubuntu2.1
Low	UBUNTU-CVE-2021-36410	libde265@1.0.8-1	1.0.8-1ubuntu0.1
Low	UBUNTU-CVE-2026-63387	libevent@2.1.12-stable-1build3	no fix listed
Low	RHSA-2024:0647	rpm@4.14.3-19.el8_5.2	0:4.14.3-28.el8_9
Low	UBUNTU-CVE-2023-1999	libwebp@1.2.2-2	1.2.2-2ubuntu0.22.04.1
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.4.8	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.4.8	0.6.4
Low	UBUNTU-CVE-2026-59885	pyasn1@0.4.8-1	0.4.8-1ubuntu0.3
Low	UBUNTU-CVE-2026-59886	pyasn1@0.4.8-1	0.4.8-1ubuntu0.3
Low	RHSA-2025:2722	krb5@1.18.2-26.el8_9	0:1.18.2-31.el8_10
Low	UBUNTU-CVE-2026-60316	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.46-0ubuntu0.22.04.4
Low	UBUNTU-CVE-2026-26007	python-cryptography@3.4.8-1ubuntu2	3.4.8-1ubuntu2.3
Low	UBUNTU-CVE-2026-45382	libde265@1.0.8-1	1.0.8-1ubuntu0.3+esm2
Low	GO-2022-0477	stdlib@go1.15.6	1.17.11
Low	UBUNTU-CVE-2022-49043	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.5
Low	UBUNTU-CVE-2026-45383	libde265@1.0.8-1	1.0.8-1ubuntu0.3+esm2
Low	UBUNTU-CVE-2024-20969	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.36-0ubuntu0.22.04.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.11latest	3 years ago	9.2.4	21564671,755	30,699

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-examples.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-examples)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.