spring-petclinic-cloud Helm chart

Name: spring-petclinic-cloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

platform9-community

Scored 14 Sept 2026

Spring pet clinic for Kubernetes on Platform9

Latest 0.2.0 5 years agodeploys tag latest 5Artifact Hub

spring-petclinic-cloud 0.2.0 deploys 6 container images: platform9community/admin-server, platform9community/api-gateway, platform9community/customers-service, platform9community/vets-service and 2 more. Across the 5 measured, 2,682 findings — 49 critical, 104 high — 26 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webflux 5.2.7.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >= 1.18.10 <= 1.20.5; rendered for Kubernetes 1.18.10.

Radar Score

41,872491047151,814

2,682 findings over 5 of 6 images measured

KEV ×26 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
platform9community/admin-server	latest	815133371	7,771
platform9community/api-gateway	latest	817141378	8,115
platform9community/customers-service	latest	1124147355	8,662
platform9community/vets-service	latest	1124147355	8,662
platform9community/visits-service	latest	1124147355	8,662
bitnami/mysql×3	8.0.25	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Critical findings

13 distinct across the version’s images

Critical: findings whose contribution to the Radar Score is 70–100. Show every band

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.2.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.2.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webflux@5.2.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-webflux@2.3.1.RELEASE	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.3.1.RELEASE	2.5.12
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.36	9.0.99
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.19
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.13
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.17
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.26	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.36	9.0.98
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@9.0.36	9.0.37
Critical	UBUNTU-CVE-2024-2961	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	5 years ago	latest	491047151,814	41,872

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/platform9-community/spring-petclinic-cloud.svg)](https://charts.stackradar.io/charts/platform9-community/spring-petclinic-cloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.