scorpio-broker Helm chart

Name: scorpio-broker Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Sept 2026

A Helm chart for Kubernetes in which every microservices has its own container and hence have reserved resources for it and virtually isolated from others and best for production.

Latest 0.3.3 4 months agodeploys tag AtContextServer_2.1.0 0Artifact Hub

scorpio-broker 0.3.3 deploys 10 container images: scorpiobroker/scorpio. Across them, 2,930 findings — 72 critical, 174 high — 68 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.2, fixed in 2.12.2.

Radar Score

55,600721741,0801,604

2,930 findings over 10 of 10 images measured

KEV ×68 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
scorpiobroker/scorpio	AtContextServer_2.1.0	615107164	5,286
scorpiobroker/scorpio	config-server_1.1.0	1841137128	8,604
scorpiobroker/scorpio	EntityManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	eureka-server_2.1.0	61497163	4,984
scorpiobroker/scorpio	gateway_2.1.0	61497165	5,010
scorpiobroker/scorpio	HistoryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	QueryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	RegistryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	RegistrySubscriptionManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	SubscriptionManager_2.1.0	615107164	5,286

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

198 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.8.0	no fix listed
Low	DSA-5122-1	gzip@1.10-4	1.10-4+deb11u1
Low	DSA-5123-1	xz-utils@5.2.5-2	5.2.5-2.1~deb11u1
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.7	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.7	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@9.0.55	9.0.81
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.11.2	2.25.4
Low	DSA-5073-1	expat@2.2.10-2	2.2.10-2+deb11u1
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.70.Final	4.1.133.Final
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.8.1	1.1.10.1
Low	GHSA-7v6m-28jr-rg84	hibernate-validator@6.0.17.Final	6.2.0.CR1
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.0.0	3.9.2
Low	GHSA-cm59-pr5q-cw85	spring-boot@2.1.9.RELEASE	2.2.11.RELEASE
Low	DSA-5330-1	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u5
Low	GHSA-xq69-5h5v-x9x4	spring-kafka@2.8.0	no fix listed
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.70.Final	4.1.132.Final
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.3.13	5.3.26
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.70.Final	4.1.133.Final
Low	DSA-5087-1	cyrus-sasl2@2.1.27+dfsg-2.1	2.1.27+dfsg-2.1+deb11u1
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.0	2.14.0
Low	DLA-3907-1	sqlite3@3.34.1-3	3.34.1-3+deb11u1
Low	GHSA-vrpq-qp53-qv56	org.eclipse.jgit@5.1.3.201810200350-r	5.13.4.202507202350-r
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.70.Final	4.1.137.Final
Low	GHSA-mg83-c7gq-rv5c	spring-security-crypto@5.6.0	5.7.16
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@9.0.55	9.0.118
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@9.0.55	9.0.106
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@9.0.55	9.0.116
Low	GHSA-6j2q-c73v-97c5	spring-cloud-gateway-server@3.1.0	3.1.10
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.70.Final	4.1.135.Final
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.29	1.31
Low	DSA-5147-1	dpkg@1.20.9	1.20.10
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.70.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.14.1	2.25.5
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.60	1.66
Low	GHSA-mgvc-8q2h-5pgc	spring-boot-starter-actuator@2.1.9.RELEASE	no fix listed
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.70.Final	4.1.125.Final
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@9.0.55	9.0.118
Low	GHSA-jmp9-x22r-554x	spring-core@5.3.13	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.70.Final	4.1.133.Final
Low	GHSA-rv64-5gf8-9qq8	tomcat-embed-core@9.0.55	9.0.116
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.70.Final	4.1.135.Final
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.11.2	2.25.3
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.55	9.0.117
Low	GHSA-fwxx-wv44-7qfg	spring-cloud-gateway-server@3.1.0	no fix listed
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.70.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.70.Final	4.1.136.Final
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.68	1.78
Low	GHSA-jjfh-589g-3hjx	spring-boot-actuator@2.6.1	2.7.18
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.70.Final	4.1.136.Final
Low	DSA-5200-1	libtirpc@1.3.1-1	1.3.1-1+deb11u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.3latest	4 months ago	AtContextServer_2.1.0	721741,0801,604	55,600

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/scorpio-broker.svg)](https://charts.stackradar.io/charts/fiware/scorpio-broker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.