shopware Helm chart

Name: shopware Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

robjuz

Scored 14 Sept 2026

Web publishing platform for building blogs and websites.

Latest 2.0.0 4 years agodeploys tag 2021.12.10-debian-10-r0 0Artifact Hub

shopware 2.0.0 deploys 6 container images: bitnami/minio, bitnami/bitnami-shell, bitnami/elasticsearch, bitnami/mariadb and 2 more. Across the 1 measured, 239 findings — 5 critical, 1 high — 3 on CISA KEV. The highest contribution is GHSA-x752-qjv4-c4hc in dompdf/dompdf v1.0.2, fixed in 1.2.1.

Radar Score

2,9725143190

239 findings over 1 of 6 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/minio	2021.12.10-debian-10-r0	—	unmeasured
bitnami/bitnami-shell×3	10-debian-10-r273	—	unmeasured
bitnami/elasticsearch×3	7.16.0-debian-10-r0	—	unmeasured
bitnami/mariadb	10.5.13-debian-10-r0	—	unmeasured
bitnami/redis	6.2.6-debian-10-r53	—	unmeasured
shyim/shopware×3	6.4.6.0	5143190	2,972

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

239 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2023-38546	curl@8.2.1-r0	8.4.0-r0
Low	GHSA-f3qr-qr4x-j273	phenx/php-svg-lib@0.3.4	0.5.2
Low	GHSA-6wrh-279j-6hvw	shopware/storefront@6.4.6.0	6.4.8.2
Low	GHSA-6wrh-279j-6hvw	shopware/core@6.4.6.0	6.4.8.2
Low	GHSA-w95c-7994-ghpr	tecnickcom/tcpdf@6.4.2	6.8.0
Low	GHSA-qq5c-677p-737q	symfony/process@v5.3.7	5.4.46
Low	GO-2023-2102	stdlib@go1.20.7	1.20.10
Low	GHSA-83vp-6jqg-6cmr	shopware/core@6.4.6.0	6.4.8.2
Low	GHSA-529h-vh3j-85hq	twig/twig@v3.3.3	3.27.0
Low	GHSA-p6w9-r443-r752	shopware/core@6.4.6.0	6.5.8.13
Low	GHSA-4qpc-3hr4-r2p4	symfony/yaml@v5.3.6	5.4.52
Low	GHSA-9frc-8383-795m	symfony/yaml@v5.3.6	5.4.52
Low	GHSA-3qx2-6f78-w2j2	dompdf/dompdf@v1.0.2	2.0.4
Low	GHSA-qpmx-3rfj-7rhv	symfony/mime@v5.3.8	5.4.52
Low	GHSA-c2p3-7m5p-cv8x	symfony/yaml@v5.3.6	5.4.52
Low	ALPINE-CVE-2023-43787	libx11@1.8-r1	1.8.7-r0
Low	GHSA-557v-xcg6-rm5m	aws/aws-sdk-php@3.198.8	3.288.1
Low	GHSA-rmv2-8jjc-23xw	tecnickcom/tcpdf@6.4.2	6.7.6
Low	GHSA-7c6p-848j-wh5h	composer/composer@2.1.11	2.2.23
Low	GHSA-952p-fqcp-g8pc	shopware/core@6.4.6.0	6.4.8.1
Low	GHSA-952p-fqcp-g8pc	shopware/storefront@6.4.6.0	6.4.8.1
Low	GHSA-c4p7-rwrg-pf6p	shopware/core@6.4.6.0	6.6.10.15
Low	GHSA-f5gf-2cj8-52g2	dompdf/dompdf@v1.0.2	3.1.6
Low	GHSA-rvx4-ffvw-m9q3	composer/composer@2.1.11	2.2.30
Low	GHSA-5qj8-6xxj-hp9h	dompdf/dompdf@v1.0.2	2.0.0
Low	GHSA-wxmh-65f7-jcvw	guzzlehttp/psr7@1.8.3	1.9.1
Low	GHSA-35wc-cvqg-78fp	twig/intl-extra@v3.3.0	3.26.0
Low	GHSA-2xf4-cg6j-vhgq	symfony/polyfill-intl-idn@v1.23.0	1.38.1
Low	GO-2023-2185	stdlib@go1.20.7	1.20.11
Low	GHSA-mx3p-fhpw-x6rv	tecnickcom/tcpdf@6.4.2	6.7.5
Low	GHSA-cgfj-hj93-rmh2	shopware/core@6.4.6.0	6.5.8.17
Low	GHSA-pr2w-4gpj-cpq4	twig/twig@v3.3.3	3.26.0
Low	ALPINE-CVE-2023-46219	curl@8.2.1-r0	8.5.0-r0
Low	GHSA-7vvp-j573-5584	shopware/core@6.4.6.0	6.6.10.15
Low	GHSA-vvj3-c3rp-c85p	phpunit/phpunit@9.5.9	9.6.33
Low	GHSA-8r6h-m72v-38fg	shopware/core@6.4.6.0	6.4.18.1
Low	GHSA-6qh9-h6wf-jgqc	symfony/cache@v5.3.10	5.4.52
Low	GHSA-q847-2q57-wmr3	symfony/twig-bridge@v5.3.7	5.4.31
Low	GHSA-pf6p-25r2-fx45	dompdf/dompdf@v1.0.2	2.0.0
Low	GHSA-8v9p-g828-v98f	shopware/core@6.4.6.0	6.6.10.18
Low	GHSA-vqc8-7275-q272	symfony/mime@v5.3.8	5.4.52
Low	GO-2026-4341	stdlib@go1.20.7	1.24.12
Low	GHSA-g9wg-98c2-qv3v	tecnickcom/tcpdf@6.4.2	6.7.4
Low	GHSA-ff5x-7qg5-vwf2	phenx/php-svg-lib@0.3.4	0.5.1
Low	GHSA-gv8p-48fr-4fxg	shopware/core@6.4.6.0	6.6.10.18
Low	GHSA-v39m-97p8-gqg7	shopware/core@6.4.6.0	6.6.10.18
Low	GHSA-8hg6-c449-896m	dompdf/dompdf@v1.0.2	3.1.6
Low	GO-2024-2887	stdlib@go1.20.7	1.21.11
Low	ALPINE-CVE-2025-26519	musl@1.2.3-r3	1.2.3-r4
Low	GHSA-h5x3-xfc9-m39h	symfony/routing@v5.3.7	5.4.53

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.0latest	4 years ago	2021.12.10-debian-10-r0	5143190	2,972

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/robjuz/shopware.svg)](https://charts.stackradar.io/charts/robjuz/shopware)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.