rocketchat 7.0.2 Helm chart

Name: rocketchat Helm chart 7.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

335 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4977	stdlib@go1.25.2	1.25.10
Low	ALPINE-CVE-2026-32316	jq@1.8.0-r0	1.8.2-r0
Low	GHSA-45rx-2jwx-cxfr	@opentelemetry/propagator-jaeger@2.7.1	2.9.0
Low	GO-2026-4986	stdlib@go1.25.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.44.0	0.53.0
Low	GO-2026-4918	stdlib@go1.25.2	1.25.10
Low	ALPINE-CVE-2026-42764	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.4-r0	3.5.8-r0
Low	GO-2024-2599	stdlib@go1.20.7	1.21.8
Low	GHSA-vfj7-8cjw-p6xm	braces@3.0.3	no fix listed
Low	ALPINE-CVE-2026-14456	openssl@3.5.4-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9076	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.4-r0	3.5.7-r0
Low	BIT-mongodb-2024-10921	MongoDB (R)@6.0.10	5.0.30
Low	BIT-mongodb-2024-10921	mongodb@6.0.10-1	5.0.30
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.1.0	10.3.1
Low	GO-2025-4116	golang.org/x/crypto@v0.31.0	0.43.0
Low	DLA-4181-1	glibc@2.31-13+deb11u6	2.31-13+deb11u13
Low	GO-2025-4009	stdlib@go1.20.7	1.24.8
Low	ALPINE-CVE-2026-5773	curl@8.14.1-r2	8.14.1-r4
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.1.0	2.1.4
Low	GO-2025-4006	stdlib@go1.20.7	1.24.8
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.1.0	2.1.3
Low	BIT-mongodb-2025-3085	MongoDB (R)@6.0.10	5.0.31
Low	BIT-mongodb-2025-3085	mongodb@6.0.10-1	5.0.31
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.31.0	0.52.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.4-r0	3.5.8-r0
Low	GO-2026-4870	stdlib@go1.25.2	1.25.9
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.31.0	0.52.0
Low	GO-2026-4971	stdlib@go1.25.2	1.25.10
Low	GO-2026-4947	stdlib@go1.25.2	1.25.9
Low	GHSA-6g55-p6wh-862q	postcss@8.5.6	8.5.12
Low	BIT-mongodb-2026-11933	mongodb@6.0.10-1	4.4.31
Low	BIT-mongodb-2026-11933	MongoDB (R)@6.0.10	4.4.31
Low	GHSA-jqcg-44mw-7w3h	proxy-addr@2.0.7	2.0.8
Low	ALPINE-CVE-2026-40164	jq@1.8.0-r0	1.8.2-r0
Low	ALPINE-CVE-2025-69419	openssl@3.5.4-r0	3.5.5-r0
Low	GO-2026-5037	stdlib@go1.25.2	1.25.11
Low	GHSA-52cp-r559-cp3m	js-yaml@3.14.1	3.15.0
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.11	7.5.19
Low	GO-2026-6603	stdlib@go1.25.2	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.44.0	0.60.0
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.1.1	no fix listed
Low	GO-2026-5972	stdlib@go1.25.2	1.25.13
Low	GO-2026-6088	stdlib@go1.25.2	1.25.13
Low	GO-2026-6089	stdlib@go1.25.2	1.25.13
Low	GO-2026-6090	stdlib@go1.25.2	1.25.13
Low	GO-2026-6611	stdlib@go1.25.2	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-5038	stdlib@go1.25.2	1.25.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.