shopware Helm chart
robjuzScored 14 Sept 2026
Web publishing platform for building blogs and websites.
Latest 2.0.0 4 years agodeploys tag 2021.12.10-debian-10-r0 0Artifact Hub
shopware 2.0.0 deploys 6 container images: bitnami/minio, bitnami/bitnami-shell, bitnami/elasticsearch, bitnami/mariadb and 2 more. Across the 1 measured, 239 findings — 5 critical, 1 high — 3 on CISA KEV. The highest contribution is GHSA-x752-qjv4-c4hc in dompdf/dompdf v1.0.2, fixed in 1.2.1.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnami/ | 2021.12.10-debian-10-r0 | — | unmeasured |
| bitnami/ | 10-debian-10-r273 | — | unmeasured |
| bitnami/ | 7.16.0-debian-10-r0 | — | unmeasured |
| bitnami/ | 10.5.13-debian-10-r0 | — | unmeasured |
| bitnami/ | 6.2.6-debian-10-r53 | — | unmeasured |
| shyim/ | 6.4.6.0 | 5143190 | 2,972 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-xx3c-qf5g-hc39 | symfony/ | 5.4.52 |
| Low | ALPINE-CVE-2023-38546 | curl | 8.4.0-r0 |
| Low | GHSA-f3qr-qr4x-j273 | phenx/ | 0.5.2 |
| Low | GHSA-6wrh-279j-6hvw | shopware/ | 6.4.8.2 |
| Low | GHSA-6wrh-279j-6hvw | shopware/ | 6.4.8.2 |
| Low | GHSA-w95c-7994-ghpr | tecnickcom/ | 6.8.0 |
| Low | GHSA-qq5c-677p-737q | symfony/ | 5.4.46 |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | GHSA-83vp-6jqg-6cmr | shopware/ | 6.4.8.2 |
| Low | GHSA-529h-vh3j-85hq | twig/ | 3.27.0 |
| Low | GHSA-p6w9-r443-r752 | shopware/ | 6.5.8.13 |
| Low | GHSA-4qpc-3hr4-r2p4 | symfony/ | 5.4.52 |
| Low | GHSA-9frc-8383-795m | symfony/ | 5.4.52 |
| Low | GHSA-3qx2-6f78-w2j2 | dompdf/ | 2.0.4 |
| Low | GHSA-qpmx-3rfj-7rhv | symfony/ | 5.4.52 |
| Low | GHSA-c2p3-7m5p-cv8x | symfony/ | 5.4.52 |
| Low | ALPINE-CVE-2023-43787 | libx11 | 1.8.7-r0 |
| Low | GHSA-557v-xcg6-rm5m | aws/ | 3.288.1 |
| Low | GHSA-rmv2-8jjc-23xw | tecnickcom/ | 6.7.6 |
| Low | GHSA-7c6p-848j-wh5h | composer/ | 2.2.23 |
| Low | GHSA-952p-fqcp-g8pc | shopware/ | 6.4.8.1 |
| Low | GHSA-952p-fqcp-g8pc | shopware/ | 6.4.8.1 |
| Low | GHSA-c4p7-rwrg-pf6p | shopware/ | 6.6.10.15 |
| Low | GHSA-f5gf-2cj8-52g2 | dompdf/ | 3.1.6 |
| Low | GHSA-rvx4-ffvw-m9q3 | composer/ | 2.2.30 |
| Low | GHSA-5qj8-6xxj-hp9h | dompdf/ | 2.0.0 |
| Low | GHSA-wxmh-65f7-jcvw | guzzlehttp/ | 1.9.1 |
| Low | GHSA-35wc-cvqg-78fp | twig/ | 3.26.0 |
| Low | GHSA-2xf4-cg6j-vhgq | symfony/ | 1.38.1 |
| Low | GO-2023-2185 | stdlib | 1.20.11 |
| Low | GHSA-mx3p-fhpw-x6rv | tecnickcom/ | 6.7.5 |
| Low | GHSA-cgfj-hj93-rmh2 | shopware/ | 6.5.8.17 |
| Low | GHSA-pr2w-4gpj-cpq4 | twig/ | 3.26.0 |
| Low | ALPINE-CVE-2023-46219 | curl | 8.5.0-r0 |
| Low | GHSA-7vvp-j573-5584 | shopware/ | 6.6.10.15 |
| Low | GHSA-vvj3-c3rp-c85p | phpunit/ | 9.6.33 |
| Low | GHSA-8r6h-m72v-38fg | shopware/ | 6.4.18.1 |
| Low | GHSA-6qh9-h6wf-jgqc | symfony/ | 5.4.52 |
| Low | GHSA-q847-2q57-wmr3 | symfony/ | 5.4.31 |
| Low | GHSA-pf6p-25r2-fx45 | dompdf/ | 2.0.0 |
| Low | GHSA-8v9p-g828-v98f | shopware/ | 6.6.10.18 |
| Low | GHSA-vqc8-7275-q272 | symfony/ | 5.4.52 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-g9wg-98c2-qv3v | tecnickcom/ | 6.7.4 |
| Low | GHSA-ff5x-7qg5-vwf2 | phenx/ | 0.5.1 |
| Low | GHSA-gv8p-48fr-4fxg | shopware/ | 6.6.10.18 |
| Low | GHSA-v39m-97p8-gqg7 | shopware/ | 6.6.10.18 |
| Low | GHSA-8hg6-c449-896m | dompdf/ | 3.1.6 |
| Low | GO-2024-2887 | stdlib | 1.21.11 |
| Low | ALPINE-CVE-2025-26519 | musl | 1.2.3-r4 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.0latest | 4 years ago | 2021.12.10-debian-10-r0 | 5143190 | 2,972 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.