StackRadar

monitoring Helm chart

rocketchat-server

Scored 14 Sept 2026

Wrap recommended monitoring stack with sane defaults for deploying along with rocketchat

Latest 0.0.17 1 month agodeploys tag v1.9.1 0Artifact Hub

monitoring 0.0.17 deploys 9 container images: quay.io/prometheus/node-exporter, otel/opentelemetry-collector-contrib, ghcr.io/grafana/grafana-operator, nginxinc/nginx-unprivileged and 5 more. Across them, 757 findings0 critical, 1 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.1-r0, fixed in 3.5.5-r0.

Radar Score

6,8590181675

757 findings over 9 of 9 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
quay.io/prometheus/node-exporterv1.9.100581694
otel/opentelemetry-collector-contrib×20.143.00011100986
ghcr.io/grafana/grafana-operatorv5.18.000580684
nginxinc/nginx-unprivileged1.29-alpine0021681,085
registry.k8s.io/kube-state-metrics/kube-state-metricsv2.16.000686753
quay.io/prometheus-operator/prometheus-operatorv0.83.000169495
grafana/loki3.6.300780765
kiwigrid/k8s-sidecar1.30.9012552999
registry.k8s.io/ingress-nginx/kube-webhook-certgen×2v1.6.000059398

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

237 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGO-2026-6091stdlib@go1.24.111.25.13
LowGO-2026-6180golang.org/x/mod@v0.31.00.40.0
LowGO-2025-3750stdlib@go1.24.21.23.10
LowGO-2026-4864stdlib@go1.24.111.25.9
LowGO-2026-4865stdlib@go1.24.111.25.9
LowGO-2026-4869stdlib@go1.24.111.25.9
LowGO-2026-4340stdlib@go1.24.111.24.12
LowGO-2025-4175stdlib@go1.24.21.24.11
LowALPINE-CVE-2025-68160openssl@3.5.1-r03.5.5-r0
LowGO-2026-4403stdlib@go1.24.21.23.9
LowGO-2026-5025golang.org/x/net@v0.47.00.55.0
LowGHSA-4jvg-4jfx-fmhcgithub.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter@v0.143.00.154.0
LowGHSA-fv92-fjc5-jj9hgithub.com/go-viper/mapstructure/v2@v2.2.12.3.0
LowGO-2026-4970stdlib@go1.24.111.25.12
LowGO-2022-0635github.com/aws/aws-sdk-go@v1.55.7no fix listed
LowGO-2026-5027golang.org/x/net@v0.47.00.55.0
LowGO-2026-5029golang.org/x/net@v0.47.00.55.0
LowGO-2026-5030golang.org/x/net@v0.47.00.55.0
LowGHSA-58qw-9mgm-455vpip@25.226.1
LowGO-2026-4602stdlib@go1.24.111.25.8
LowALPINE-CVE-2026-27456util-linux@2.41-r92.41.6-r0
LowALPINE-CVE-2026-41080expat@2.7.5-r02.8.1-r0
LowALPINE-CVE-2025-69418openssl@3.5.1-r03.5.5-r0
LowGO-2026-5024golang.org/x/sys@v0.38.00.44.0
LowGO-2026-6179golang.org/x/mod@v0.31.00.40.0
LowGHSA-xhgw-qwwf-pg32github.com/cilium/ebpf@v0.20.00.22.0
LowGO-2025-3787github.com/go-viper/mapstructure/v2@v2.2.12.3.0
LowGO-2026-5048github.com/hamba/avro/v2@v2.29.0no fix listed
LowGO-2026-5841github.com/klauspost/compress@v1.18.01.18.7
LowGO-2026-5932golang.org/x/crypto@v0.45.0no fix listed
LowGO-2026-6061google.golang.org/grpc@v1.75.11.82.1
LowGO-2026-6094github.com/google/cel-go@v0.22.00.30.0
LowALPINE-CVE-2025-46394busybox@1.37.0-r181.37.0-r20
LowGHSA-j88v-2chj-qfwxgithub.com/jackc/pgx/v5@v5.8.05.9.2
LowGHSA-6vgw-5pg2-w6jppip@25.226.0
LowALPINE-CVE-2024-58251busybox@1.37.0-r181.37.0-r20
LowGHSA-995v-fvrw-c78mgo.opentelemetry.io/otel/schema@v0.0.140.0.17

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.17latest1 month agov1.9.101816756,859

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/monitoring.svg)](https://charts.stackradar.io/charts/rocketchat-server/monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.