spring-petclinic-cloud Helm chart

Name: spring-petclinic-cloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

platform9-community

Scored 14 Sept 2026

Spring pet clinic for Kubernetes on Platform9

Latest 0.2.0 5 years agodeploys tag latest 5Artifact Hub

spring-petclinic-cloud 0.2.0 deploys 6 container images: platform9community/admin-server, platform9community/api-gateway, platform9community/customers-service, platform9community/vets-service and 2 more. Across the 5 measured, 2,682 findings — 49 critical, 104 high — 26 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webflux 5.2.7.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >= 1.18.10 <= 1.20.5; rendered for Kubernetes 1.18.10.

Radar Score

41,872491047151,814

2,682 findings over 5 of 6 images measured

KEV ×26 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
platform9community/admin-server	latest	815133371	7,771
platform9community/api-gateway	latest	817141378	8,115
platform9community/customers-service	latest	1124147355	8,662
platform9community/vets-service	latest	1124147355	8,662
platform9community/visits-service	latest	1124147355	8,662
bitnami/mysql×3	8.0.25	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

403 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.2.7.RELEASE	5.2.18
Low	UBUNTU-CVE-2026-42015	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm4
Low	GO-2023-1568	stdlib@go1.15.11	1.19.6
Low	GO-2022-1037	stdlib@go1.15.11	1.18.7
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.1.5.Final	6.2.0.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.50.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-40909	perl@5.26.1-6ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-48961	perl@5.26.1-6ubuntu0.5	no fix listed
Low	GO-2023-1987	stdlib@go1.15.11	1.19.12
Low	UBUNTU-CVE-2018-16868	gnutls28@3.5.18-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2019-7309	glibc@2.27-3ubuntu1.4	no fix listed
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.50.Final	4.1.133.Final
Low	GO-2023-1752	stdlib@go1.15.11	1.19.9
Low	UBUNTU-CVE-2025-14831	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3
Low	UBUNTU-CVE-2026-6238	glibc@2.27-3ubuntu1.4	no fix listed
Low	GO-2023-1705	stdlib@go1.15.11	1.19.8
Low	GHSA-5843-p793-ghmm	spring-webflux@5.2.7.RELEASE	no fix listed
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GO-2023-1878	stdlib@go1.15.11	1.19.11
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	UBUNTU-CVE-2026-5435	glibc@2.27-3ubuntu1.4	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.2.7.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.2.7.RELEASE	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.50.Final	4.1.135.Final
Low	GO-2022-1039	stdlib@go1.15.11	1.18.7
Low	GO-2024-2963	stdlib@go1.15.11	1.21.12
Low	GO-2023-1702	stdlib@go1.15.11	1.19.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.26.1-6ubuntu0.5	no fix listed
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.50.Final	4.1.129.Final
Low	GO-2022-0525	stdlib@go1.15.11	1.17.12
Low	GO-2022-0520	stdlib@go1.15.11	1.17.12
Low	UBUNTU-CVE-2025-0395	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm4
Low	UBUNTU-CVE-2020-13844	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
Low	UBUNTU-CVE-2023-4039	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
Low	UBUNTU-CVE-2026-76642	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2024-28085	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2019-17594	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1
Low	GO-2023-2375	stdlib@go1.15.11	1.20.0
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0
Low	GO-2023-1569	stdlib@go1.15.11	1.19.6
Low	GO-2023-2382	stdlib@go1.15.11	1.20.12
Low	GO-2022-1143	stdlib@go1.15.11	1.18.9
Low	UBUNTU-CVE-2024-22365	pam@1.1.8-3.6ubuntu2.18.04.3	1.1.8-3.6ubuntu2.18.04.6+esm1
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.50.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	GHSA-72pg-x5f8-j25j	spring-webflux@5.2.7.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.2.7.RELEASE	no fix listed
Low	GO-2024-2599	stdlib@go1.15.11	1.21.8
Low	GO-2022-1038	stdlib@go1.15.11	1.18.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	5 years ago	latest	491047151,814	41,872

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/platform9-community/spring-petclinic-cloud.svg)](https://charts.stackradar.io/charts/platform9-community/spring-petclinic-cloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.