scorpio-broker 0.3.3 Helm chart

Name: scorpio-broker Helm chart 0.3.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Sept 2026

A Helm chart for Kubernetes in which every microservices has its own container and hence have reserved resources for it and virtually isolated from others and best for production.

Version 0.3.3 4 months agodeploys tag AtContextServer_2.1.0 0Artifact Hub

scorpio-broker 0.3.3 deploys 10 container images: scorpiobroker/scorpio. Across them, 2,930 findings — 72 critical, 174 high — 68 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.2, fixed in 2.12.2.

Radar Score

55,600721741,0801,604

2,930 findings over 10 of 10 images measured

KEV ×68 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
scorpiobroker/scorpio	AtContextServer_2.1.0	615107164	5,286
scorpiobroker/scorpio	config-server_1.1.0	1841137128	8,604
scorpiobroker/scorpio	EntityManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	eureka-server_2.1.0	61497163	4,984
scorpiobroker/scorpio	gateway_2.1.0	61497165	5,010
scorpiobroker/scorpio	HistoryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	QueryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	RegistryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	RegistrySubscriptionManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	SubscriptionManager_2.1.0	615107164	5,286

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Critical findings

19 distinct across the version’s images

Critical: findings whose contribution to the Radar Score is 70–100. Show every band

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.11.2	2.12.2
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.3.13	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.3.13	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.1.9.RELEASE	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webflux@5.3.13	5.3.18
Critical	GHSA-6v73-fgf6-w5j7KEV	spring-cloud-function-context@2.0.0.RELEASE	3.1.7
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.55	9.0.99
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@9.0.26	9.0.31
Critical	GHSA-hf23-9pf7-388p	xstream@1.4.10	1.4.11
Critical	GHSA-f554-x222-wgf7	xstream@1.4.10	1.4.11
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.11.2	2.12.2
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.11.2	2.12.3
Critical	GHSA-j9h8-phrw-h4fhKEV	xstream@1.4.10	1.4.18
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.29	2.0
Critical	GHSA-mw36-7c6c-q4q2	xstream@1.4.10	1.4.14-java7
Critical	GHSA-32xf-jwmv-9hf3KEV	spring-cloud-config-server@2.1.0.RELEASE	2.1.9
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.55	9.0.98
Critical	GHSA-8wx2-9q48-vm9r	spring-webmvc@5.1.10.RELEASE	5.1.13.RELEASE
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@9.0.26	9.0.37

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.3latest	4 months ago	AtContextServer_2.1.0	721741,0801,604	55,600

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/scorpio-broker.svg)](https://charts.stackradar.io/charts/fiware/scorpio-broker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.