scorpio-broker Helm chart

Name: scorpio-broker Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Sept 2026

A Helm chart for Kubernetes in which every microservices has its own container and hence have reserved resources for it and virtually isolated from others and best for production.

Latest 0.3.3 4 months agodeploys tag AtContextServer_2.1.0 0Artifact Hub

scorpio-broker 0.3.3 deploys 10 container images: scorpiobroker/scorpio. Across them, 2,930 findings — 72 critical, 174 high — 68 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.2, fixed in 2.12.2.

Radar Score

55,600721741,0801,604

2,930 findings over 10 of 10 images measured

KEV ×68 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
scorpiobroker/scorpio	AtContextServer_2.1.0	615107164	5,286
scorpiobroker/scorpio	config-server_1.1.0	1841137128	8,604
scorpiobroker/scorpio	EntityManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	eureka-server_2.1.0	61497163	4,984
scorpiobroker/scorpio	gateway_2.1.0	61497165	5,010
scorpiobroker/scorpio	HistoryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	QueryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	RegistryManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	RegistrySubscriptionManager_2.1.0	615107164	5,286
scorpiobroker/scorpio	SubscriptionManager_2.1.0	615107164	5,286

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

198 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-4432-1	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u16
Low	DLA-3910-1	e2fsprogs@1.46.2-2	1.46.2-2+deb11u1
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.70.Final	4.1.129.Final
Low	DSA-5678-1	glibc@2.31-13+deb11u2	2.31-13+deb11u10
Low	DLA-4267-1	gnutls28@3.7.1-5	3.7.1-5+deb11u8
Low	DLA-4063-1	gnutls28@3.7.1-5	3.7.1-5+deb11u7
Low	GHSA-xvfq-4q6q-gxx7	spring-kafka@2.8.0	no fix listed
Low	GHSA-4q2v-9p7v-3v22	reactor-netty-http@1.0.13	1.2.8
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.70.Final	4.1.135.Final
Low	GHSA-4773-3jfm-qmx3	spring-webflux@5.3.13	no fix listed
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.13	no fix listed
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.70.Final	4.1.136.Final
Low	GHSA-72pg-x5f8-j25j	spring-webflux@5.3.13	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.13	no fix listed
Low	DLA-4061-1	libtasn1-6@4.16.0-2	4.16.0-2+deb11u2
Low	GHSA-mq64-j8f9-9gcj	spring-webflux@5.3.13	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.3.13	no fix listed
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.70.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.32.Final	4.1.115.Final
Low	GHSA-6gf2-pvqw-37ph	spring-core@5.3.13	5.3.14
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.70.Final	4.1.137.Final
Low	DLA-4145-1	expat@2.2.10-2	2.2.10-2+deb11u7
Low	GHSA-53w6-v7cv-fc9h	spring-kafka@2.8.0	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.0	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.32.Final	4.1.118.Final
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.70.Final	4.1.136.Final
Low	DLA-4481-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u2
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.13	no fix listed
Low	GHSA-2827-2mxx-j8pv	spring-retry@1.3.1	no fix listed
Low	DLA-4490-1	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u5
Low	GHSA-83f7-v6px-pp3h	spring-webflux@5.3.13	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.0	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.13	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.0	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.3.1	42.3.8
Low	GHSA-7w4x-4h67-pgmv	reactor-netty-http@1.0.13	1.0.24
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.13	no fix listed
Low	GHSA-6p4f-wcwh-5vvm	spring-webflux@5.3.13	no fix listed
Low	DLA-4259-1	systemd@247.3-6	247.3-7+deb11u7
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.70.Final	4.1.136.Final
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.6.0	no fix listed
Low	DLA-3951-1	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u14
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.6.1	no fix listed
Low	DLA-3875-1	gnutls28@3.7.1-5	3.7.1-5+deb11u6
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.70.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.70.Final	4.1.133.Final
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.13	5.3.39
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.70.Final	4.1.135.Final
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.70.Final	4.1.135.Final
Low	DLA-4133-1	wget@1.21-1+b1	1.21-1+deb11u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.3latest	4 months ago	AtContextServer_2.1.0	721741,0801,604	55,600

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/scorpio-broker.svg)](https://charts.stackradar.io/charts/fiware/scorpio-broker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.