spring-petclinic-cloud Helm chart

Name: spring-petclinic-cloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

platform9-community

Scored 14 Sept 2026

Spring pet clinic for Kubernetes on Platform9

Latest 0.2.0 5 years agodeploys tag latest 5Artifact Hub

spring-petclinic-cloud 0.2.0 deploys 6 container images: platform9community/admin-server, platform9community/api-gateway, platform9community/customers-service, platform9community/vets-service and 2 more. Across the 5 measured, 2,682 findings — 49 critical, 104 high — 26 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webflux 5.2.7.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >= 1.18.10 <= 1.20.5; rendered for Kubernetes 1.18.10.

Radar Score

41,872491047151,814

2,682 findings over 5 of 6 images measured

KEV ×26 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
platform9community/admin-server	latest	815133371	7,771
platform9community/api-gateway	latest	817141378	8,115
platform9community/customers-service	latest	1124147355	8,662
platform9community/vets-service	latest	1124147355	8,662
platform9community/visits-service	latest	1124147355	8,662
bitnami/mysql×3	8.0.25	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

403 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4986	stdlib@go1.15.11	1.25.10
Low	UBUNTU-CVE-2026-5704	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.4+esm4
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.53.0
Low	GO-2026-4918	stdlib@go1.15.11	1.25.10
Low	GO-2026-4337	stdlib@go1.15.11	1.24.13
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.3.3.RELEASE	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.3.1.RELEASE	no fix listed
Low	GO-2026-4601	stdlib@go1.15.11	1.25.8
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.50.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.50.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-78410	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.2.7.RELEASE	5.3.39
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.50.Final	4.1.135.Final
Low	GO-2026-5026	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
Low	GO-2026-5026	stdlib@go1.15.11	1.25.13
Low	UBUNTU-CVE-2025-14104	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.50.Final	4.1.135.Final
Low	GO-2025-3420	stdlib@go1.15.11	1.22.11
Low	GO-2026-4342	stdlib@go1.15.11	1.24.12
Low	GO-2024-2598	stdlib@go1.15.11	1.21.8
Low	GO-2025-3751	stdlib@go1.15.11	1.23.10
Low	UBUNTU-CVE-2026-78409	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2024-13176	openssl@1.1.1-1ubuntu2.1~18.04.9	no fix listed
Low	GHSA-xpw8-rcwv-8f8p	netty-codec-http2@4.1.50.Final	4.1.100.Final
Low	GHSA-293q-567p-wmwq	spring-security-web@5.3.3.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.3.3.RELEASE	5.7.14
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GO-2026-4870	stdlib@go1.15.11	1.25.9
Low	GO-2022-0532	stdlib@go1.15.11	1.17.11
Low	GO-2025-4009	stdlib@go1.15.11	1.24.8
Low	GO-2026-4947	stdlib@go1.15.11	1.25.9
Low	UBUNTU-CVE-2021-20193	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.3
Low	GO-2025-4006	stdlib@go1.15.11	1.24.8
Low	GO-2026-5037	stdlib@go1.15.11	1.25.11
Low	GO-2026-4971	stdlib@go1.15.11	1.25.10
Low	GO-2026-5972	stdlib@go1.15.11	1.25.13
Low	GO-2026-6088	stdlib@go1.15.11	1.25.13
Low	GO-2026-6089	stdlib@go1.15.11	1.25.13
Low	GO-2026-6090	stdlib@go1.15.11	1.25.13
Low	GO-2026-5038	stdlib@go1.15.11	1.25.11
Low	UBUNTU-CVE-2017-18018	coreutils@8.28-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-13757	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1
Low	GO-2026-5942	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.56.0
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.50.Final	4.1.135.Final
Low	GHSA-qxp5-gwg8-xv66	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.36.0
Low	GO-2025-4012	stdlib@go1.15.11	1.24.8
Low	GO-2025-3956	stdlib@go1.15.11	1.23.12
Low	UBUNTU-CVE-2025-8058	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm6
Low	GO-2026-4440	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0
Low	GO-2025-4011	stdlib@go1.15.11	1.24.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	5 years ago	latest	491047151,814	41,872

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/platform9-community/spring-petclinic-cloud.svg)](https://charts.stackradar.io/charts/platform9-community/spring-petclinic-cloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.