drogue-cloud-twin 0.7.11 Helm chart

Name: drogue-cloud-twin Helm chart 0.7.11: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drogue-iot

Scored 14 Sept 2026

Drogue IoT Cloud digital twin installation

Version 0.7.11 3 years agoapp version 0.11.0 0Artifact Hub

drogue-cloud-twin 0.7.11 deploys 8 container images: bitnami/postgresql, ghcr.io/drogue-iot/drogue-doppelgaenger-backend, ghcr.io/drogue-iot/drogue-doppelgaenger-debugger, ghcr.io/drogue-iot/drogue-doppelgaenger-processor and 4 more. Across the 2 measured, 456 findings — 8 critical, 14 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r3, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

6,915814122312

456 findings over 2 of 8 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	14	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-backend	0.11.0	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-debugger	0.11.0	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-processor	0.11.0	—	unmeasured
swaggerapi/swagger-ui	v4.15.2	342812	1,185
ghcr.io/drogue-iot/drogue-doppelgaenger-waker	0.11.0	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-database-migration	0.11.0	—	unmeasured
quay.io/keycloak/keycloak	20.0	51094300	5,730

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

312 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:1631	python3@3.6.8-48.el8_7	0:3.6.8-72.el8_10
Low	GHSA-xfrj-6vvc-3xm2	xmlsec@2.2.3	2.2.6
Low	RHSA-2023:4498	dbus@1:1.12.8-23.el8_7.1	1:1.12.8-24.el8_8.1
Low	ALPINE-CVE-2023-27535	curl@7.83.1-r3	8.0.1-r0
Low	RHSA-2023:3106	curl@7.61.1-25.el8_7.1	0:7.61.1-30.el8_8.2
Low	RHSA-2026:7667	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.2
Low	GHSA-9342-92gg-6v29	jakarta.mail@1.6.5	1.6.8
Low	GHSA-cxrx-q234-m22m	quarkus-http-core@4.1.9	5.3.4
Low	ALPINE-CVE-2023-27536	curl@7.83.1-r3	8.0.1-r0
Low	ALPINE-CVE-2023-38546	curl@7.83.1-r3	8.4.0-r0
Low	GHSA-p5mv-gj8j-xqgf	keycloak-saml-core@20.0.5	26.6.2
Low	GHSA-37gf-gmxv-74wv	keycloak-services@20.0.5	26.4.9
Low	RHSA-2026:11077	python3@3.6.8-48.el8_7	0:3.6.8-76.el8_10
Low	GHSA-5rxp-2rhr-qwqv	keycloak-services@20.0.5	22.0.12
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.86.Final	4.1.133.Final
Low	GHSA-v4mm-q8fv-r2w5	wildfly-elytron-realm-token@1.20.1.Final	no fix listed
Low	RHSA-2025:22063	cups@1:2.2.6-50.el8	1:2.2.6-64.el8_10
Low	RHSA-2026:56219	python3@3.6.8-48.el8_7	0:3.6.8-78.el8_10
Low	GHSA-qcxp-gm7m-4j5v	quarkus-vertx-http@2.13.7.Final	3.20.6.2
Low	RHSA-2023:4524	libcap@2.48-4.el8	0:2.48-5.el8_8
Low	RHSA-2026:0337	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_10
Low	GHSA-7g24-qg88-p43q	jose4j@0.7.11	0.9.3
Low	RHSA-2025:14560	python3@3.6.8-48.el8_7	0:3.6.8-71.el8_10
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.86.Final	4.1.132.Final
Low	RHSA-2026:39320	python3@3.6.8-48.el8_7	0:3.6.8-77.el8_10
Low	GHSA-rc95-pcm8-65v9	quarkus-vertx-http@2.13.7.Final	3.20.6.1
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.86.Final	4.1.133.Final
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.86.Final	4.1.135.Final
Low	GHSA-rp95-xpg9-c2cq	keycloak-services@20.0.5	26.6.2
Low	RHSA-2025:13203	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.3
Low	RHSA-2023:3837	systemd@239-68.el8_7.2	0:239-74.el8_8.2
Low	GHSA-w3g8-r9gw-qrh8	keycloak-quarkus-server@20.0.5	26.0.8
Low	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.86.Final	4.1.135.Final
Low	RHSA-2024:0155	gnutls@3.6.16-5.el8_6	0:3.6.16-8.el8_9
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.4.2	2.14.0
Low	GHSA-w33c-445m-f8w7	okio-jvm@3.0.0	3.4.0
Low	RHSA-2026:61766	glib2@2.56.4-159.el8	0:2.56.4-177.el8_10
Low	GHSA-hcvw-475w-8g7p	keycloak-services@20.0.5	26.2.13
Low	GHSA-488m-w9fp-5mm2	protostream@4.4.3.Final	4.6.2.Final
Low	RHSA-2025:18286	libssh@0.9.6-3.el8	0:0.9.6-15.el8_10
Low	GHSA-3fhx-3vvg-2j84	quarkus-core@2.13.7.Final	2.16.8.Final
Low	GHSA-hw58-3793-42gg	keycloak-services@20.0.5	26.2.2
Low	GHSA-6qvw-249j-h44c	jose4j@0.7.11	0.9.4
Low	GHSA-hf67-5vvq-fm3r	keycloak-services@20.0.5	26.6.2
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.86.Final	4.1.137.Final
Low	GHSA-jmj6-p2j9-68cp	wildfly-elytron@1.20.1.Final	1.20.3.Final
Low	ALPINE-CVE-2023-23915	curl@7.83.1-r3	7.83.1-r6
Low	RHSA-2026:36728	libtasn1@4.13-4.el8_7	0:4.13-6.el8_10
Low	ALPINE-CVE-2023-0465	openssl@1.1.1q-r0	1.1.1t-r2
Low	GHSA-69fp-7c8p-crjr	keycloak-services@20.0.5	24.0.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.11latest	3 years ago	0.11.0	814122312	6,915

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-twin.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-twin)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.