scorpio-broker Helm chart
fiwareScored 14 Sept 2026
A Helm chart for Kubernetes in which every microservices has its own container and hence have reserved resources for it and virtually isolated from others and best for production.
Latest 0.3.3 4 months agodeploys tag AtContextServer_2.1.0 0Artifact Hub
scorpio-broker 0.3.3 deploys 10 container images: scorpiobroker/scorpio. Across them, 2,930 findings — 72 critical, 174 high — 68 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.2, fixed in 2.12.2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| scorpiobroker/ | AtContextServer_2.1.0 | 615107164 | 5,286 |
| scorpiobroker/ | config-server_1.1.0 | 1841137128 | 8,604 |
| scorpiobroker/ | EntityManager_2.1.0 | 615107164 | 5,286 |
| scorpiobroker/ | eureka-server_2.1.0 | 61497163 | 4,984 |
| scorpiobroker/ | gateway_2.1.0 | 61497165 | 5,010 |
| scorpiobroker/ | HistoryManager_2.1.0 | 615107164 | 5,286 |
| scorpiobroker/ | QueryManager_2.1.0 | 615107164 | 5,286 |
| scorpiobroker/ | RegistryManager_2.1.0 | 615107164 | 5,286 |
| scorpiobroker/ | RegistrySubscriptionManager_2.1.0 | 615107164 | 5,286 |
| scorpiobroker/ | SubscriptionManager_2.1.0 | 615107164 | 5,286 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-rpr3-cw39-3pxh | jackson-databind | 2.9.10.4 |
| Medium | GHSA-qmqc-x3r4-6v39 | jackson-databind | 2.9.10 |
| Medium | GHSA-6wf9-jmg9-vxcc | xstream | 1.4.18 |
| Medium | GHSA-3p86-9955-h393 | org.eclipse.jgit | 5.13.3.202401111512-r |
| Medium | GHSA-gqp3-2cvr-x8m3 | tomcat-embed-core | 9.0.108 |
| Medium | GHSA-r29c-68gh-xp6x | tomcat-embed-core | 9.0.118 |
| Medium | GHSA-98qh-xjc8-98pq | postgresql | 42.7.11 |
| Medium | GHSA-q3mw-pvr8-9ggc | tomcat-embed-core | 9.0.80 |
| Medium | GHSA-hgjh-9rj2-g67j | spring-web | 5.3.33 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | GHSA-c4q5-6c82-3qpw | spring-security-web | 5.7.13 |
| Medium | GHSA-3j6g-hxx5-3q26 | kafka-clients | 2.6.3 |
| Medium | GHSA-668q-qrv7-99fm | logback-core | 1.2.9 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.13.4.2 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.13.4 |
| Medium | GHSA-h6fc-48rj-7qqh | tomcat-embed-core | 9.0.118 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | DSA-5218-1 | zlib | 1:1.2.11.dfsg-2+deb11u2 |
| Medium | GHSA-fccv-jmmp-qg76 | tomcat-embed-core | 9.0.83 |
| Medium | GHSA-7jqf-v358-p8g7 | tomcat-embed-core | 9.0.90 |
| Medium | GHSA-rq2w-37h9-vg94 | tomcat-embed-core | 9.0.69 |
| Medium | GHSA-g5h3-w546-pj7f | spring-boot-actuator-autoconfigure | 2.6.15 |
| Medium | GHSA-mvr2-9pj6-7w5j | guava | 24.1.1-android |
| Medium | GHSA-qxf4-chvg-4r8r | tomcat-embed-core | 9.0.31 |
| Medium | GHSA-v7wg-cpwc-24m4 | postgresql | 42.3.2 |
| Medium | GHSA-f8cc-g7j8-xxpm | xstream | 1.4.20 |
| Medium | GHSA-wc4r-xq3c-5cf3 | tomcat-embed-core | 9.0.106 |
| Medium | GHSA-rqph-vqwm-22vc | spring-messaging | 5.3.20 |
| Medium | GHSA-r6j3-px5g-cq3x | tomcat-embed-core | 9.0.81 |
| Medium | GHSA-wr62-c79q-cv37 | tomcat-embed-core | 9.0.107 |
| Medium | GHSA-5m62-pw8w-7w9f | tomcat-embed-core | 9.0.118 |
| Medium | GHSA-hfq9-hggm-c56q | xstream | 1.4.21 |
| Medium | GHSA-25xr-qj8w-c4vf | tomcat-embed-core | 9.0.107 |
| Medium | GHSA-hh26-6xwr-ggv7 | spring-beans | 5.3.20 |
| Medium | GHSA-4j3c-42xv-3f84 | tomcat-embed-core | 9.0.107 |
| Medium | GHSA-3qwq-q9vm-5j42 | spring-cloud-config-server | no fix listed |
| Medium | GHSA-r38f-c4h4-hqq2 | postgresql | 42.3.7 |
| Medium | GHSA-qcwq-55hx-v3vh | snappy-java | 1.1.10.1 |
| Medium | GHSA-w9fj-cfpg-grvv | netty-codec-http2 | 4.1.132.Final |
| Medium | GHSA-wx5j-54mm-rqqq | netty-codec-http | 4.1.71.Final |
| Medium | GHSA-h2fw-rfh5-95r3 | tomcat-embed-core | 9.0.105 |
| Medium | GHSA-9xv2-5v5q-p794 | tomcat-embed-core | 9.0.121 |
| Medium | GHSA-9w3m-gqgf-c4p9 | snakeyaml | 1.32 |
| Medium | GHSA-x27m-9w8j-5vcw | jettison | 1.5.2 |
| Medium | GHSA-6mjq-h674-j845 | netty-handler | 4.1.94.Final |
| Medium | GHSA-p22x-g9px-3945 | tomcat-embed-core | 9.0.68 |
| Medium | GHSA-pvp8-3xj6-8c6x | commons-configuration | no fix listed |
| Medium | GHSA-2wrp-6fg6-hmc5 | spring-web | 5.3.34 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | GHSA-m8p2-495h-ccmh | hibernate-validator | 6.0.18.Final |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.3.3latest | 4 months ago | AtContextServer_2.1.0 | 721741,0801,604 | 55,600 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.