spring-petclinic-cloud Helm chart

Name: spring-petclinic-cloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

platform9-community

Scored 14 Sept 2026

Spring pet clinic for Kubernetes on Platform9

Latest 0.2.0 5 years agodeploys tag latest 5Artifact Hub

spring-petclinic-cloud 0.2.0 deploys 6 container images: platform9community/admin-server, platform9community/api-gateway, platform9community/customers-service, platform9community/vets-service and 2 more. Across the 5 measured, 2,682 findings — 49 critical, 104 high — 26 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webflux 5.2.7.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >= 1.18.10 <= 1.20.5; rendered for Kubernetes 1.18.10.

Radar Score

41,872491047151,814

2,682 findings over 5 of 6 images measured

KEV ×26 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
platform9community/admin-server	latest	815133371	7,771
platform9community/api-gateway	latest	817141378	8,115
platform9community/customers-service	latest	1124147355	8,662
platform9community/vets-service	latest	1124147355	8,662
platform9community/visits-service	latest	1124147355	8,662
bitnami/mysql×3	8.0.25	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

614 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-40226	systemd@237-3ubuntu10.48	no fix listed
Low	GO-2025-3750	stdlib@go1.15.11	1.23.10
Low	GO-2026-4864	stdlib@go1.15.11	1.25.9
Low	GO-2025-3447	stdlib@go1.15.11	1.22.12
Low	GO-2026-4865	stdlib@go1.15.11	1.25.9
Low	GO-2026-4869	stdlib@go1.15.11	1.25.9
Low	GHSA-vqgp-pf68-6947	spring-webflux@5.2.7.RELEASE	no fix listed
Low	GO-2026-4340	stdlib@go1.15.11	1.24.12
Low	GO-2025-4175	stdlib@go1.15.11	1.24.11
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@9.0.36	9.0.118
Low	UBUNTU-CVE-2026-18374	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2021-36084	libsepol@2.7-1	2.7-1ubuntu0.1
Low	UBUNTU-CVE-2026-19542	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-53613	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-53615	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-77117	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-80489	glibc@2.27-3ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2021-36085	libsepol@2.7-1	2.7-1ubuntu0.1
Low	UBUNTU-CVE-2021-36087	libsepol@2.7-1	2.7-1ubuntu0.1
Low	UBUNTU-CVE-2025-68160	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	GHSA-659m-px2c-25wj	spring-core@5.2.7.RELEASE	no fix listed
Low	GHSA-4hfh-6x8g-gwpp	spring-webflux@5.2.7.RELEASE	no fix listed
Low	GO-2026-4403	stdlib@go1.15.11	1.23.9
Low	UBUNTU-CVE-2023-29383	shadow@1:4.5-1ubuntu2	no fix listed
Low	GO-2026-5025	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
Low	GO-2026-4970	stdlib@go1.15.11	1.25.12
Low	GO-2026-5027	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.6-8.1ubuntu0.2	1.0.6-8.1ubuntu0.2+esm1
Low	UBUNTU-CVE-2025-9820	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3
Low	GO-2026-4602	stdlib@go1.15.11	1.25.8
Low	UBUNTU-CVE-2026-27456	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@5.2.7.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-18508	tar@1.29b-2ubuntu0.2	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@5.2.7.RELEASE	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webflux@5.2.7.RELEASE	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.4-1ubuntu1.4	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.2.7.RELEASE	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.50.Final	4.1.135.Final
Low	UBUNTU-CVE-2025-69418	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm7
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20210603125802-9665404d3644	0.44.0
Low	GHSA-wg35-8jpf-2xv3	spring-webflux@5.2.7.RELEASE	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@5.2.7.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.29b-2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-6141	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4
Low	USN-5089-1	ca-certificates@20210119~18.04.1	20210119~18.04.2
Low	USN-5473-1	ca-certificates@20210119~18.04.1	20211016~18.04.1
Low	USN-6105-1	ca-certificates@20210119~18.04.1	20230311ubuntu0.18.04.1
Low	USN-6663-1	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	5 years ago	latest	491047151,814	41,872

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/platform9-community/spring-petclinic-cloud.svg)](https://charts.stackradar.io/charts/platform9-community/spring-petclinic-cloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.