drogue-cloud-twin Helm chart

Name: drogue-cloud-twin Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drogue-iot

Scored 14 Sept 2026

Drogue IoT Cloud digital twin installation

Latest 0.7.11 3 years agoapp version 0.11.0 0Artifact Hub

drogue-cloud-twin 0.7.11 deploys 8 container images: bitnami/postgresql, ghcr.io/drogue-iot/drogue-doppelgaenger-backend, ghcr.io/drogue-iot/drogue-doppelgaenger-debugger, ghcr.io/drogue-iot/drogue-doppelgaenger-processor and 4 more. Across the 2 measured, 456 findings — 8 critical, 14 high — 5 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.83.1-r3, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >= 1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

6,915814122312

456 findings over 2 of 8 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	14	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-backend	0.11.0	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-debugger	0.11.0	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-processor	0.11.0	—	unmeasured
swaggerapi/swagger-ui	v4.15.2	342812	1,185
ghcr.io/drogue-iot/drogue-doppelgaenger-waker	0.11.0	—	unmeasured
ghcr.io/drogue-iot/drogue-doppelgaenger-database-migration	0.11.0	—	unmeasured
quay.io/keycloak/keycloak	20.0	51094300	5,730

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

456 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-p3v8-fm5p-v84h	keycloak-services@20.0.5	no fix listed
Low	GHSA-45p5-v273-3qqr	vertx-web@4.3.4	4.5.22
Low	GHSA-g8vr-x4qh-25qg	keycloak-services@20.0.5	26.6.3
Low	GHSA-f5h4-wmp5-xhg6	keycloak-server-spi-private@20.0.5	21.1.2
Low	GHSA-f5h4-wmp5-xhg6	keycloak-services@20.0.5	21.1.2
Low	GHSA-933f-rg6j-f46p	keycloak-services@20.0.5	26.4.12
Low	GHSA-rg35-5v25-mqvp	keycloak-services@20.0.5	26.0.0
Low	GHSA-q6h7-xxp7-7429	keycloak-services@20.0.5	no fix listed
Low	GHSA-q35r-vvhv-vx5h	keycloak-services@20.0.5	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-model-jpa@20.0.5	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-server-spi-private@20.0.5	26.5.6
Low	GHSA-27gc-wj6x-9w55	keycloak-admin-ui@20.0.5	26.2.9
Low	GHSA-wcvj-vpvw-9rr5	keycloak-services@20.0.5	no fix listed
Low	GHSA-wh89-7897-x99h	netty-codec-haproxy@4.1.86.Final	4.1.136.Final
Low	GHSA-jp4c-xjxw-mgf9	pip@9.0.3	26.1
Low	GHSA-v897-pv23-r8cw	keycloak-quarkus-server@20.0.5	no fix listed
Low	GHSA-vjr8-56p3-fmqq	keycloak-quarkus-server@20.0.5	26.4.4
Low	GHSA-8g9r-9wjw-37j4	keycloak-services@20.0.5	no fix listed
Low	GHSA-5565-3c98-g6jc	wildfly-elytron-http-oidc@1.20.1.Final	2.2.9.Final
Low	GHSA-5565-3c98-g6jc	wildfly-elytron@1.20.1.Final	2.2.9.Final
Low	GHSA-gv3v-2cpp-3pmq	keycloak-quarkus-server@20.0.5	26.5.6
Low	GHSA-fjf4-6f34-w64q	keycloak-services@20.0.5	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-server-spi-private@20.0.5	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-services@20.0.5	no fix listed
Low	GHSA-jgvc-jfgh-rjvv	jose4j@0.7.11	0.9.3
Low	GHSA-q4xq-445g-g6ch	keycloak-core@20.0.5	no fix listed
Low	RHSA-2026:61248	libxml2@2.9.7-15.el8_7.1	0:2.9.7-21.el8_10.7
Low	GHSA-4pgc-gfrr-wcmg	keycloak-services@20.0.5	no fix listed
Low	GHSA-rhgq-f8x5-j2jc	keycloak-services@20.0.5	26.4.12
Low	GHSA-58qw-9mgm-455v	pip@9.0.3	26.1
Low	GHSA-5545-r4hg-rj4m	keycloak-quarkus-server@20.0.5	26.0.6
Low	GHSA-5v8v-xvjv-57x7	keycloak-services@20.0.5	26.4.13
Low	GHSA-c25h-c27q-5qpv	keycloak-ldap-federation@20.0.5	22.0.12
Low	RHBA-2026:47115	coreutils@8.30-13.el8	0:8.30-20.el8_10
Low	RHSA-2025:12980	glibc@2.28-211.el8	0:2.28-251.el8_10.25
Low	GHSA-7fpj-9hr8-28vh	keycloak-services@20.0.5	22.0.10
Low	GHSA-63v5-26vq-m4vm	keycloak-services@20.0.5	no fix listed
Low	GHSA-gg57-587f-h5v6	infinispan-client-hotrod@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-remote@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-core@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-commons@13.0.10.Final	14.0.25.Final
Low	GHSA-22rm-wp4x-v5cx	keycloak-services@20.0.5	26.4.13
Low	GHSA-m2w5-7xhv-w6fh	keycloak-services@20.0.5	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.86.Final	4.1.135.Final
Low	GHSA-g78x-7vwx-9f58	keycloak-services@20.0.5	26.4.9
Low	GHSA-j75r-vf64-6rrh	resteasy-reactive-common@2.13.7.Final	3.0.0.Alpha4
Low	GHSA-6q37-7866-h27j	keycloak-services@20.0.5	26.5.0
Low	GHSA-6g26-7cx5-mrrg	keycloak-services@20.0.5	26.7.0
Low	GHSA-594w-2fwp-jwrc	keycloak-services@20.0.5	no fix listed
Low	GHSA-xh32-c9wx-phrp	keycloak-services@20.0.5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.11latest	3 years ago	0.11.0	814122312	6,915

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drogue-iot/drogue-cloud-twin.svg)](https://charts.stackradar.io/charts/drogue-iot/drogue-cloud-twin)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.