rocketchat 7.0.2 Helm chart

Name: rocketchat Helm chart 7.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

335 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	BIT-mongodb-2024-3372	MongoDB (R)@6.0.10	5.0.25
Low	BIT-mongodb-2024-3372	mongodb@6.0.10-1	5.0.25
Low	GO-2026-6218	stdlib@go1.25.2	1.25.13
Low	GO-2026-5942	golang.org/x/net@v0.44.0	0.56.0
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.14.1	3.15.2
Low	ALPINE-CVE-2026-39979	jq@1.8.0-r0	1.8.2-r0
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14
Low	GHSA-r292-9mhp-454m	tar@7.5.11	7.5.21
Low	GHSA-r28c-9q8g-f849	postcss@8.5.6	8.5.18
Low	GO-2024-2610	stdlib@go1.20.7	1.21.8
Low	GHSA-x6g4-f6q3-fqvv	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	ALPINE-CVE-2026-42766	openssl@3.5.4-r0	3.5.7-r0
Low	BIT-mongodb-2025-6709	mongodb@6.0.10-1	6.0.21
Low	BIT-mongodb-2025-6709	MongoDB (R)@6.0.10	6.0.21
Low	GO-2023-2041	stdlib@go1.20.7	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.31.0	0.56.0
Low	GO-2025-3751	stdlib@go1.20.7	1.23.10
Low	GO-2023-2043	stdlib@go1.20.7	1.20.8
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GO-2026-4342	stdlib@go1.25.2	1.24.12
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.2	3.1.3
Low	GO-2026-5970	golang.org/x/text@v0.29.0	0.39.0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	BIT-mongodb-2026-9753	MongoDB (R)@6.0.10	7.0.35
Low	BIT-mongodb-2026-9753	mongodb@6.0.10-1	7.0.35
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.7.0	0.13.0
Low	GO-2025-4155	stdlib@go1.25.2	1.24.11
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u7
Low	BIT-mongodb-2025-6713	mongodb@6.0.10-1	6.0.22
Low	BIT-mongodb-2025-6713	MongoDB (R)@6.0.10	6.0.22
Low	BIT-mongodb-2025-3083	MongoDB (R)@6.0.10	5.0.31
Low	BIT-mongodb-2025-3083	mongodb@6.0.10-1	5.0.31
Low	GO-2025-4014	stdlib@go1.20.7	1.24.8
Low	GO-2026-6303	golang.org/x/crypto@v0.31.0	0.55.0
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.11	7.5.18
Low	GO-2026-6354	golang.org/x/crypto@v0.31.0	0.56.0
Low	DLA-4065-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6
Low	GO-2023-2382	stdlib@go1.20.7	1.20.12
Low	GHSA-2g4f-4pwh-qvx6	ajv@8.17.1	8.18.0
Low	GHSA-cfpf-hrx2-8rv6	github.com/expr-lang/expr@v1.17.6	1.17.7
Low	GO-2026-6617	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-6617	stdlib@go1.25.2	1.26.9
Low	BIT-mongodb-2025-6706	MongoDB (R)@6.0.10	6.0.21
Low	BIT-mongodb-2025-6706	mongodb@6.0.10-1	6.0.21
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	GO-2024-3105	stdlib@go1.20.7	1.22.7
Low	GO-2025-4007	stdlib@go1.25.2	1.24.9
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.