spring-petclinic-cloud Helm chart

Name: spring-petclinic-cloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

platform9-community

Scored 14 Sept 2026

Spring pet clinic for Kubernetes on Platform9

Latest 0.2.0 5 years agodeploys tag latest 5Artifact Hub

spring-petclinic-cloud 0.2.0 deploys 6 container images: platform9community/admin-server, platform9community/api-gateway, platform9community/customers-service, platform9community/vets-service and 2 more. Across the 5 measured, 2,682 findings — 49 critical, 104 high — 26 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webflux 5.2.7.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >= 1.18.10 <= 1.20.5; rendered for Kubernetes 1.18.10.

Radar Score

41,872491047151,814

2,682 findings over 5 of 6 images measured

KEV ×26 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
platform9community/admin-server	latest	815133371	7,771
platform9community/api-gateway	latest	817141378	8,115
platform9community/customers-service	latest	1124147355	8,662
platform9community/vets-service	latest	1124147355	8,662
platform9community/visits-service	latest	1124147355	8,662
bitnami/mysql×3	8.0.25	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

614 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2023-1704	stdlib@go1.15.11	1.19.8
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.36	9.0.116
Low	GO-2022-0289	stdlib@go1.15.11	1.16.12
Low	UBUNTU-CVE-2016-2781	coreutils@8.28-1ubuntu1	no fix listed
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.50.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.64	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.64	no fix listed
Low	UBUNTU-CVE-2026-48962	perl@5.26.1-6ubuntu0.5	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@5.2.7.RELEASE	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.50.Final	4.1.136.Final
Low	GO-2022-0526	stdlib@go1.15.11	1.17.12
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.2.7.RELEASE	5.2.18
Low	UBUNTU-CVE-2026-42015	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm4
Low	GO-2023-1568	stdlib@go1.15.11	1.19.6
Low	GO-2022-1037	stdlib@go1.15.11	1.18.7
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.1.5.Final	6.2.0.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.50.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-40909	perl@5.26.1-6ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-48961	perl@5.26.1-6ubuntu0.5	no fix listed
Low	GO-2023-1987	stdlib@go1.15.11	1.19.12
Low	UBUNTU-CVE-2018-16868	gnutls28@3.5.18-1ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2019-7309	glibc@2.27-3ubuntu1.4	no fix listed
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.50.Final	4.1.133.Final
Low	GO-2023-1752	stdlib@go1.15.11	1.19.9
Low	UBUNTU-CVE-2025-14831	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3
Low	UBUNTU-CVE-2026-6238	glibc@2.27-3ubuntu1.4	no fix listed
Low	GO-2023-1705	stdlib@go1.15.11	1.19.8
Low	GHSA-5843-p793-ghmm	spring-webflux@5.2.7.RELEASE	no fix listed
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GO-2023-1878	stdlib@go1.15.11	1.19.11
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	UBUNTU-CVE-2026-5435	glibc@2.27-3ubuntu1.4	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.2.7.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.2.7.RELEASE	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.50.Final	4.1.135.Final
Low	GO-2022-1039	stdlib@go1.15.11	1.18.7
Low	GO-2024-2963	stdlib@go1.15.11	1.21.12
Low	GO-2023-1702	stdlib@go1.15.11	1.19.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.26.1-6ubuntu0.5	no fix listed
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.50.Final	4.1.129.Final
Low	GO-2022-0525	stdlib@go1.15.11	1.17.12
Low	GO-2022-0520	stdlib@go1.15.11	1.17.12
Low	UBUNTU-CVE-2025-0395	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm4
Low	UBUNTU-CVE-2020-13844	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
Low	UBUNTU-CVE-2023-4039	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
Low	UBUNTU-CVE-2026-76642	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2024-28085	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2019-17594	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1
Low	GO-2023-2375	stdlib@go1.15.11	1.20.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	5 years ago	latest	491047151,814	41,872

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/platform9-community/spring-petclinic-cloud.svg)](https://charts.stackradar.io/charts/platform9-community/spring-petclinic-cloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.