shopware 2.0.0 Helm chart

Name: shopware Helm chart 2.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

robjuz

Scored 14 Sept 2026

Web publishing platform for building blogs and websites.

Version 2.0.0 4 years agodeploys tag 2021.12.10-debian-10-r0 0Artifact Hub

shopware 2.0.0 deploys 6 container images: bitnami/minio, bitnami/bitnami-shell, bitnami/elasticsearch, bitnami/mariadb and 2 more. Across the 1 measured, 239 findings — 5 critical, 1 high — 3 on CISA KEV. The highest contribution is GHSA-x752-qjv4-c4hc in dompdf/dompdf v1.0.2, fixed in 1.2.1.

Radar Score

2,9725143190

239 findings over 1 of 6 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/minio	2021.12.10-debian-10-r0	—	unmeasured
bitnami/bitnami-shell×3	10-debian-10-r273	—	unmeasured
bitnami/elasticsearch×3	7.16.0-debian-10-r0	—	unmeasured
bitnami/mariadb	10.5.13-debian-10-r0	—	unmeasured
bitnami/redis	6.2.6-debian-10-r53	—	unmeasured
shyim/shopware×3	6.4.6.0	5143190	2,972

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

239 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2025-4013	stdlib@go1.20.7	1.24.8
Low	GO-2025-3849	stdlib@go1.20.7	1.23.12
Low	GO-2026-4946	stdlib@go1.20.7	1.25.9
Low	GO-2026-4603	stdlib@go1.20.7	1.25.8
Low	GO-2026-4982	stdlib@go1.20.7	1.25.10
Low	GO-2026-6091	stdlib@go1.20.7	1.25.13
Low	GO-2025-3750	stdlib@go1.20.7	1.23.10
Low	GO-2026-4864	stdlib@go1.20.7	1.25.9
Low	GO-2025-3447	stdlib@go1.20.7	1.22.12
Low	GO-2026-4865	stdlib@go1.20.7	1.25.9
Low	GO-2026-4869	stdlib@go1.20.7	1.25.9
Low	GO-2026-4340	stdlib@go1.20.7	1.24.12
Low	GO-2025-4175	stdlib@go1.20.7	1.24.11
Low	GHSA-g446-98w2-8p5w	guzzlehttp/guzzle@7.4.0	7.12.3
Low	GHSA-mrqx-rp3w-jpjp	symfony/http-foundation@v5.3.10	5.4.46
Low	GO-2026-4403	stdlib@go1.20.7	1.23.9
Low	GHSA-g6xq-892h-64w3	composer/composer@2.1.11	2.2.29
Low	GHSA-m895-2hj3-8cg9	shopware/core@6.4.6.0	6.6.10.7
Low	GHSA-wjfc-pgfp-pv9c	nyholm/psr7@1.4.0	1.6.1
Low	GO-2026-4970	stdlib@go1.20.7	1.25.12
Low	GHSA-7cp7-jfp6-jh4f	shopware/core@6.4.6.0	6.4.18.1
Low	GHSA-g3rh-rrhp-jhh9	symfony/validator@v5.3.10	5.4.43
Low	GO-2026-4602	stdlib@go1.20.7	1.25.8
Low	GHSA-2w46-vq8h-98vh	shopware/core@6.4.6.0	6.6.10.9
Low	GHSA-27c9-vp3w-6ww8	shopware/core@6.4.6.0	6.6.10.7
Low	GHSA-7w52-7jvm-m9vw	shopware/core@6.4.6.0	6.6.10.18
Low	GHSA-w267-m9c4-8555	shopware/core@6.4.6.0	6.4.8.1
Low	GHSA-r2vg-hvjm-fg38	shopware/core@6.4.6.0	6.6.10.7
Low	GO-2026-5024	golang.org/x/sys@v0.11.0	0.44.0
Low	GHSA-68wv-g3fw-pq7q	shopware/core@6.4.6.0	6.5.8.17
Low	GHSA-6377-hfv9-hqf6	twig/twig@v3.3.3	3.11.2
Low	GHSA-jjxq-ff2g-95vh	twig/twig@v3.3.3	3.11.2
Low	GHSA-7x2p-4jvh-6384	dompdf/dompdf@v1.0.2	3.1.6
Low	GHSA-wvh6-f5jh-8gw4	dompdf/dompdf@v1.0.2	3.1.6
Low	GHSA-p42q-9prx-q5wq	twig/twig@v3.3.3	3.27.0
Low	GHSA-vcc8-phrv-43wj	twig/twig@v3.3.3	3.26.0
Low	GHSA-2g2g-8p8h-fgwm	twig/twig@v3.3.3	3.26.0
Low	GHSA-3cpp-fv95-mpr5	shopware/core@6.4.6.0	6.6.10.7
Low	GHSA-6wh5-mw9h-5c3w	shopware/core@6.4.6.0	6.6.10.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.0latest	4 years ago	2021.12.10-debian-10-r0	5143190	2,972

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/robjuz/shopware.svg)](https://charts.stackradar.io/charts/robjuz/shopware)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.