spring-petclinic-cloud Helm chart

Name: spring-petclinic-cloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

platform9-community

Scored 14 Sept 2026

Spring pet clinic for Kubernetes on Platform9

Latest 0.2.0 5 years agodeploys tag latest 5Artifact Hub

spring-petclinic-cloud 0.2.0 deploys 6 container images: platform9community/admin-server, platform9community/api-gateway, platform9community/customers-service, platform9community/vets-service and 2 more. Across the 5 measured, 2,682 findings — 49 critical, 104 high — 26 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webflux 5.2.7.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >= 1.18.10 <= 1.20.5; rendered for Kubernetes 1.18.10.

Radar Score

41,872491047151,814

2,682 findings over 5 of 6 images measured

KEV ×26 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
platform9community/admin-server	latest	815133371	7,771
platform9community/api-gateway	latest	817141378	8,115
platform9community/customers-service	latest	1124147355	8,662
platform9community/vets-service	latest	1124147355	8,662
platform9community/visits-service	latest	1124147355	8,662
bitnami/mysql×3	8.0.25	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

173 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2024-33601	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm3
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.50.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.50.Final	4.1.133.Final
Medium	UBUNTU-CVE-2026-8376	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.7+esm2
Medium	GHSA-7gj7-224w-vpr3	spring-boot-admin-server@2.2.2	2.7.16
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.50.Final	4.1.136.Final
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3
Medium	UBUNTU-CVE-2023-4813	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm1
Medium	GHSA-xf96-w227-r7c4	spring-boot-autoconfigure@2.3.1.RELEASE	2.5.15
Medium	UBUNTU-CVE-2020-16156	perl@5.26.1-6ubuntu0.5	5.26.1-6ubuntu0.6
Medium	UBUNTU-CVE-2026-28388	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8
Medium	GHSA-3cqm-mf7h-prrj	okhttp@3.14.9	4.9.2
Medium	UBUNTU-CVE-2025-69421	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Medium	GHSA-mf92-479x-3373	spring-security-web@5.3.3.RELEASE	no fix listed
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.50.Final	4.1.135.Final
Medium	GO-2022-1144	stdlib@go1.15.11	1.18.9
Medium	UBUNTU-CVE-2026-28387	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm2
Medium	UBUNTU-CVE-2021-3999	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.5
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@9.0.36	9.0.118
Medium	GHSA-wx54-3278-m5g4	spring-security-core@5.3.3.RELEASE	5.5.7
Medium	UBUNTU-CVE-2026-28389	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8
Medium	UBUNTU-CVE-2026-28390	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	5 years ago	latest	491047151,814	41,872

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/platform9-community/spring-petclinic-cloud.svg)](https://charts.stackradar.io/charts/platform9-community/spring-petclinic-cloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.