rocketmq Helm chart

Name: rocketmq Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

gengxiankun-charts

Scored 14 Sept 2026

A cloud-native "messaging, eventing, streaming" real-time data processing platform, covering cloud-edge-device collaboration scenarios

Latest 0.3.0 2 years agodeploys tag 5.3.0 0Artifact Hub

rocketmq 0.3.0 deploys 1 container image: apache/rocketmq. Across them, 358 findings — 4 critical, 12 high — 3 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 8.5.46, with no fix listed.

Radar Score

4,92141278264

358 findings over 1 of 1 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
apache/rocketmq×2	5.3.0	41278264	4,921

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

358 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.46	8.5.51
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.46	no fix listed
High	UBUNTU-CVE-2025-15467	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.7
High	UBUNTU-CVE-2024-6119	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.4
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.46	no fix listed
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.46	no fix listed
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.46	8.5.55
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.46	8.5.94
High	GHSA-crf3-v9rr-v7hj	fastjson@1.2.83	no fix listed
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.46	8.5.55
High	UBUNTU-CVE-2024-2511	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.2
High	UBUNTU-CVE-2024-3596	krb5@1.20.1-6ubuntu2	1.20.1-6ubuntu2.3
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@8.5.46	8.5.99
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@8.5.46	8.5.63
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@8.5.46	8.5.60
Medium	GHSA-9xcj-c8cr-8c3c	tomcat-embed-core@8.5.46	8.5.50
Medium	UBUNTU-CVE-2024-7264	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.2
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.2
Medium	GHSA-jgwr-3qm3-26f3	tomcat-embed-core@8.5.46	8.5.61
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.11
Medium	GHSA-f4qf-m5gf-8jm8	tomcat-embed-core@8.5.46	8.5.64
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@8.5.46	no fix listed
Medium	UBUNTU-CVE-2024-45490	expat@2.6.1-2build1	2.6.1-2ubuntu0.1
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@8.5.46	9.0.118
Medium	UBUNTU-CVE-2024-37371	krb5@1.20.1-6ubuntu2	1.20.1-6ubuntu2.1
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@8.5.46	8.5.93
Medium	GHSA-ff77-26x5-69cr	tomcat-embed-core@8.5.46	no fix listed
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	UBUNTU-CVE-2024-4741	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.2
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.20.1	3.25.5
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@8.5.46	9.0.118
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@8.5.46	8.5.96
Medium	UBUNTU-CVE-2026-19931	curl@8.5.0-2ubuntu10.1	no fix listed
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@8.5.46	no fix listed
Medium	GHSA-qxf4-chvg-4r8r	tomcat-embed-core@8.5.46	8.5.51
Medium	UBUNTU-CVE-2016-20013	glibc@2.39-0ubuntu8.2	no fix listed
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@8.5.46	no fix listed
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@8.5.46	8.5.94
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@8.5.46	no fix listed
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@8.5.46	9.0.118
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@8.5.46	no fix listed
Medium	UBUNTU-CVE-2026-10536	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.11
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@8.5.46	no fix listed
Medium	UBUNTU-CVE-2025-5987	libssh@0.10.6-2build2	0.10.6-2ubuntu0.1
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@8.5.46	no fix listed
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@8.5.46	no fix listed
Medium	UBUNTU-CVE-2026-18924	curl@8.5.0-2ubuntu10.1	no fix listed
Medium	UBUNTU-CVE-2025-9230	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.0latest	2 years ago	5.3.0	41278264	4,921

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/gengxiankun-charts/rocketmq.svg)](https://charts.stackradar.io/charts/gengxiankun-charts/rocketmq)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.