scorpio-broker-aaio Helm chart

Name: scorpio-broker-aaio Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Sept 2026

A Helm chart for Kubernetes in which all the microservices are deployed under a single container and thus less effective for production environment but serves well in testing and dev environment.

Latest 0.4.15 4 months agodeploys tag scorpio-aaio_2.1.0 0Artifact Hub

scorpio-broker-aaio 0.4.15 deploys 1 container image: scorpiobroker/scorpio. Across them, 292 findings — 6 critical, 15 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.3.13, fixed in 5.3.18.

Radar Score

5,286615107164

292 findings over 1 of 1 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
scorpiobroker/scorpio	scorpio-aaio_2.1.0	615107164	5,286

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

292 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.3.13	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.3.13	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webflux@5.3.13	5.3.18
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.55	9.0.99
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.29	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.55	9.0.98
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.13	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.55	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.55	9.0.106
High	GHSA-g5vr-rgqm-vf78	spring-webflux@5.3.13	no fix listed
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.13	no fix listed
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.55	9.0.71
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.55	9.0.81
High	GHSA-hh32-7344-cg2f	spring-security-core@5.6.0	5.6.4
High	GHSA-hh32-7344-cg2f	spring-security-web@5.6.0	5.6.4
High	GHSA-558x-2xjg-6232	spring-expression@5.3.13	5.3.17
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.55	9.0.86
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.55	9.0.109
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.55	9.0.98
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.32.Final	4.1.44
High	DSA-5514-1KEV	glibc@2.31-13+deb11u2	2.31-13+deb11u7
Medium	DLA-3859-1	systemd@247.3-6	247.3-7+deb11u6
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.13	no fix listed
Medium	GHSA-cx7f-g6mp-7hqm	spring-webflux@5.3.13	no fix listed
Medium	DSA-5169-1	openssl@1.1.1k-1+deb11u1	1.1.1n-0+deb11u3
Medium	DSA-5673-1	glibc@2.31-13+deb11u2	2.31-13+deb11u9
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@6.2.1	6.4.0
Medium	DSA-5139-1	openssl@1.1.1k-1+deb11u1	1.1.1n-0+deb11u2
Medium	GHSA-j563-grx4-pjpv	xstream@1.4.18	1.4.20
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.3.1	42.3.9
Medium	DSA-5417-1	openssl@1.1.1k-1+deb11u1	1.1.1n-0+deb11u5
Medium	DSA-5103-1	openssl@1.1.1k-1+deb11u1	1.1.1k-1+deb11u2
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.32.Final	4.1.46
Medium	DSA-5343-1	openssl@1.1.1k-1+deb11u1	1.1.1n-0+deb11u4
Medium	DLA-3942-1	openssl@1.1.1k-1+deb11u1	1.1.1n-0+deb11u6
Medium	DLA-3942-2	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u2
Medium	GHSA-mmmh-wcxm-2wr4	spring-security-core@5.6.0	5.6.9
Medium	GHSA-rmr5-cpv2-vgjf	xstream@1.4.18	1.4.19
Medium	DSA-5111-1	zlib@1:1.2.11.dfsg-2	1:1.2.11.dfsg-2+deb11u1
Medium	GHSA-3h6f-g5f3-gc4w	spring-security-config@5.6.0	5.6.12
Medium	GHSA-9vjp-v76f-g363	netty-codec@4.1.32.Final	4.1.68.Final
Medium	GHSA-7phw-cxx7-q9vq	spring-webmvc@5.3.13	5.3.26
Medium	GHSA-grg4-wf29-r9vv	netty-codec@4.1.32.Final	4.1.68.Final
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@5.3.13	5.3.19
Medium	GHSA-p2v9-g2qv-p635	netty-handler@4.1.32.Final	4.1.45
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.13	5.3.32
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.13.0	2.13.2.1
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.55	9.0.90
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.55	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.55	9.0.118

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.15latest	4 months ago	scorpio-aaio_2.1.0	615107164	5,286

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/scorpio-broker-aaio.svg)](https://charts.stackradar.io/charts/fiware/scorpio-broker-aaio)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.