rocketmq Helm chart

Name: rocketmq Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

gin

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 1.1.0 3 years agodeploys tag 1.0.0 2Artifact Hub

rocketmq 1.1.0 deploys 2 container images: apacherocketmq/rocketmq-dashboard and apache/rocketmq. Across them, 430 findings — 19 critical, 26 high — 11 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.2.2.RELEASE, fixed in 2.5.12.

Radar Score

9,1541926176209

430 findings over 2 of 2 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
apacherocketmq/rocketmq-dashboard	1.0.0	1217136179	6,869
apache/rocketmq×5	4.9.3	794030	2,285

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

359 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.2.2.RELEASE	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.2.1.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.2.2.RELEASE	5.2.20.RELEASE
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@8.5.46	8.5.51
Critical	GHSA-x3cq-8f32-5f63KEV	rocketmq-namesrv@4.9.3	4.9.6
Critical	GHSA-gpq8-963w-8qc9	rocketmq-namesrv@4.9.3	4.9.7
Critical	GHSA-6vvc-c2m3-cjf3	mercurial@3.1.2	3.2.3
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.30	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@8.5.46	no fix listed
Critical	GHSA-8wx2-9q48-vm9r	spring-webmvc@5.2.2.RELEASE	5.2.3.RELEASE
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@9.0.29	9.0.37
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.2.2.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@8.5.46	no fix listed
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@8.5.46	no fix listed
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.2.2.RELEASE	no fix listed
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.29	9.0.71
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@8.5.46	8.5.55
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@8.5.46	8.5.94
High	GHSA-ghjx-3jg5-h6r2	mercurial@3.1.2	4.1.3
High	GHSA-crf3-v9rr-v7hj	fastjson@1.2.76	no fix listed
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.19	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@8.5.46	8.5.55
High	GHSA-pv7h-hx5h-mgfj	fastjson@1.2.76	1.2.83
High	GHSA-558x-2xjg-6232	spring-expression@5.2.2.RELEASE	5.2.20.RELEASE
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@8.5.46	8.5.99
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@8.5.46	8.5.63
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.1	2.10.5.1
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.29	9.0.98
Medium	DLA-1474-1	openssh@1:6.7p1-5+deb8u3	1:6.7p1-5+deb8u5
Medium	DLA-1533-1	git@1:2.1.4-2.1+deb8u2	1:2.1.4-2.1+deb8u7
Medium	GHSA-6v56-cpg6-3rpx	mercurial@3.1.2	4.4.1
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.6	2.8.9
Medium	GHSA-3qmg-c9vc-r47j	mercurial@3.1.2	4.3
Medium	DSA-4008-1	wget@1.16-1+deb8u1	1.16-1+deb8u4
Medium	DSA-3934-1	git@1:2.1.4-2.1+deb8u2	1:2.1.4-2.1+deb8u4
Medium	DLA-2176-1	inetutils@2:1.9.2.39.3a460-3	2:1.9.2.39.3a460-3+deb8u1
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@8.5.46	8.5.60
Medium	GHSA-9xcj-c8cr-8c3c	tomcat-embed-core@8.5.46	8.5.50
Medium	GHSA-jjxg-hpm7-g95f	bzr@2.7.0dev1	no fix listed
Medium	GHSA-3pmw-h7j4-rf54	mercurial@3.1.2	3.2.4
Medium	DLA-1500-1	openssh@1:6.7p1-5+deb8u3	1:6.7p1-5+deb8u6
Medium	DLA-1728-1	openssh@1:6.7p1-5+deb8u3	1:6.7p1-5+deb8u8
Medium	DSA-3773-1	openssl@1.0.1t-1+deb8u5	1.0.1t-1+deb8u6
Medium	GHSA-j7c2-rqm3-c97m	mercurial@3.1.2	3.7.3
Medium	GHSA-p979-4mfw-53vg	netty-all@4.0.42.Final	4.1.42.Final
Medium	GHSA-8fm8-7365-5rh2	mercurial@3.1.2	3.7.3
Medium	GHSA-9vjf-jjcq-3gh7	mercurial@3.1.2	3.7.3
Medium	GHSA-jgwr-3qm3-26f3	tomcat-embed-core@8.5.46	8.5.61

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.0latest	3 years ago	1.0.0	1926176209	9,154

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/gin/rocketmq.svg)](https://charts.stackradar.io/charts/gin/rocketmq)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.