online-boutique Helm chart

Name: online-boutique Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere-test

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.0 5 years agodeploys tag v0.2.3 0Artifact Hub

online-boutique 0.1.0 deploys 11 container images: gcr.io/google-samples/microservices-demo/adservice, gcr.io/google-samples/microservices-demo/cartservice, gcr.io/google-samples/microservices-demo/checkoutservice, gcr.io/google-samples/microservices-demo/currencyservice and 7 more. Across the 10 measured, 1,912 findings — 15 critical, 60 high — 9 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1j-r0, fixed in 1.1.1l-r0.

Radar Score

26,01815603801,457

1,912 findings over 10 of 11 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
gcr.io/google-samples/microservices-demo/adservice	v0.2.3	—	unmeasured
gcr.io/google-samples/microservices-demo/cartservice	v0.2.3	1629150	2,383
gcr.io/google-samples/microservices-demo/checkoutservice	v0.2.3	3835151	2,740
gcr.io/google-samples/microservices-demo/currencyservice	v0.2.3	1952209	3,665
gcr.io/google-samples/microservices-demo/frontend	v0.2.3	3952150	3,204
gcr.io/google-samples/microservices-demo/loadgenerator	v0.2.3	013971	1,674
gcr.io/google-samples/microservices-demo/paymentservice	v0.2.3	1951208	3,627
gcr.io/google-samples/microservices-demo/productcatalogservice	v0.2.3	3835151	2,740
gcr.io/google-samples/microservices-demo/recommendationservice	v0.2.3	0248208	3,078
library/redis	alpine	0048	167
gcr.io/google-samples/microservices-demo/shippingservice	v0.2.3	3835151	2,740

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

298 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-h5c8-rqwp-cp95	jinja2@2.11.3	3.1.3
Low	DLA-3263-1	libtasn1-6@4.13-3	4.13-3+deb10u1
Low	GHSA-9ppj-qmqm-q256	tar@6.1.0	7.5.11
Low	GHSA-29vq-49wr-vm6x	werkzeug@1.0.1	3.1.6
Low	GHSA-mpwj-fcr6-x34c	yarn@1.22.5	1.22.13
Low	GHSA-2r2c-g63r-vccr	node-forge@0.10.0	1.3.0
Low	GO-2026-4341	stdlib@go1.15.10	1.24.12
Low	GO-2022-0533	stdlib@go1.15.10	1.17.11
Low	GHSA-hgf8-39gv-g3f2	werkzeug@1.0.1	3.1.4
Low	DLA-3398-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u6
Low	GO-2022-0523	stdlib@go1.15.10	1.17.12
Low	GO-2024-2887	stdlib@go1.15.10	1.21.11
Low	GO-2022-0522	stdlib@go1.15.10	1.17.12
Low	GO-2022-0527	stdlib@go1.15.10	1.17.12
Low	GO-2022-0524	stdlib@go1.15.10	1.17.12
Low	GO-2023-1704	stdlib@go1.15.10	1.19.8
Low	DLA-3070-1	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u9
Low	GO-2022-0289	stdlib@go1.15.10	1.16.12
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	DLA-3783-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u7
Low	DLA-3341-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u5
Low	GO-2022-0526	stdlib@go1.15.10	1.17.12
Low	ALPINE-CVE-2026-76642	util-linux@2.41.4-r0	2.41.6-r0
Low	GO-2023-1568	stdlib@go1.15.10	1.19.6
Low	GO-2022-1037	stdlib@go1.15.10	1.18.7
Low	DLA-3740-1	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u12
Low	GHSA-83g3-92jg-28cx	tar@6.1.0	7.5.8
Low	GO-2023-1987	stdlib@go1.15.10	1.19.12
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2023-1752	stdlib@go1.15.10	1.19.9
Low	GHSA-34jh-p97f-mpxf	urllib3@1.25.10	1.26.19
Low	GHSA-4xh5-x5gv-qwph	pip@21.0.1	25.3
Low	GHSA-w8wr-v893-vjvp	tar@6.1.0	7.5.18
Low	GO-2023-1705	stdlib@go1.15.10	1.19.8
Low	GO-2023-1878	stdlib@go1.15.10	1.19.11
Low	ALPINE-CVE-2021-42374	busybox@1.32.1-r3	1.32.1-r7
Low	GHSA-h35f-9h28-mq5c	setuptools@54.1.1	83.0.0
Low	GO-2022-1039	stdlib@go1.15.10	1.18.7
Low	GHSA-869p-cjfg-cm3x	jws@4.0.0	4.0.1
Low	DLA-3321-1	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10
Low	GO-2024-2963	stdlib@go1.15.10	1.21.12
Low	GO-2023-1702	stdlib@go1.15.10	1.19.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7	0.55.0
Low	GO-2022-0525	stdlib@go1.15.10	1.17.12
Low	GO-2022-0520	stdlib@go1.15.10	1.17.12
Low	DLA-3167-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	MAL-2022-4933	npm-cli-docs@0.1.0	no fix listed
Low	MAL-2025-5721	protobufjs-websocket-example@1.1.0	no fix listed
Low	DLA-3850-1	glibc@2.28-10	2.28-10+deb10u4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	5 years ago	v0.2.3	15603801,457	26,018

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere-test/online-boutique.svg)](https://charts.stackradar.io/charts/kubesphere-test/online-boutique)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.