rocketchat 7.0.2 Helm chart

Name: rocketchat Helm chart 7.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

335 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-xwg4-73v4-xw9w	nanoid@3.3.11	3.3.12
Low	DSA-5726-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u5
Low	GO-2025-3373	stdlib@go1.20.7	1.22.11
Low	ALPINE-CVE-2026-42767	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.14.1-r2	8.14.1-r3
Low	GHSA-fxqj-rqcc-2cmp	postcss@8.5.6	8.5.23
Low	ALPINE-CVE-2025-14819	curl@8.14.1-r2	8.14.1-r4
Low	BIT-mongodb-2025-3084	MongoDB (R)@6.0.10	5.0.31
Low	BIT-mongodb-2025-3084	mongodb@6.0.10-1	5.0.31
Low	GO-2026-4970	stdlib@go1.25.2	1.25.12
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.1.2	3.1.4
Low	ALPINE-CVE-2025-14524	curl@8.14.1-r2	8.14.1-r4
Low	BIT-mongodb-2024-7553	MongoDB (R)@6.0.10	5.0.27
Low	BIT-mongodb-2024-7553	mongodb@6.0.10-1	5.0.27
Low	GHSA-qw65-cvwx-89v3	fast-uri@3.1.2	3.1.7
Low	GHSA-j3f2-48v5-ccww	protobufjs@7.6.1	7.6.5
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.2	3.1.6
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.1.0	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@7.5.11	7.5.18
Low	DLA-4267-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u8
Low	GO-2025-4012	stdlib@go1.20.7	1.24.8
Low	GHSA-7p8r-x3mc-p8w7	fast-uri@3.1.2	3.1.5
Low	ALPINE-CVE-2025-66199	openssl@3.5.4-r0	3.5.5-r0
Low	GHSA-f65p-4m7j-42xc	fast-uri@3.1.2	3.1.6
Low	GHSA-fph4-wmhf-6fwf	fast-uri@3.1.2	3.1.6
Low	GHSA-j6r3-76f7-8jcv	ip-address@10.1.0	10.7.1
Low	GHSA-crvj-82cr-hjcx	hono@4.12.25	4.13.5
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	GHSA-8j4g-w8fx-2239	hono@4.12.25	4.12.34
Low	GO-2026-4980	stdlib@go1.25.2	1.25.10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.31.0	0.45.0
Low	ALPINE-CVE-2025-62408	c-ares@1.34.5-r0	1.34.6-r0
Low	BIT-mongodb-2025-10061	mongodb@6.0.10-1	6.0.25
Low	BIT-mongodb-2025-10061	MongoDB (R)@6.0.10	6.0.25
Low	GO-2024-2600	stdlib@go1.20.7	1.21.8
Low	ALPINE-CVE-2026-22796	openssl@3.5.4-r0	3.5.5-r0
Low	GO-2026-4440	golang.org/x/net@v0.44.0	0.45.0
Low	DLA-4143-1	glibc@2.31-13+deb11u6	2.31-13+deb11u12
Low	GHSA-m9gg-hp2v-232j	@grpc/grpc-js@1.14.4	1.14.5
Low	DSA-5678-1	glibc@2.31-13+deb11u6	2.31-13+deb11u10
Low	GO-2025-4011	stdlib@go1.20.7	1.24.8
Low	GO-2025-4015	stdlib@go1.20.7	1.24.8
Low	GHSA-hvrm-45r6-mjfj	hono@4.12.25	4.12.27
Low	GO-2026-4441	golang.org/x/net@v0.44.0	0.45.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.31.0	0.45.0
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.1	7.1.6
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	BIT-mongodb-2025-12657	mongodb@6.0.10-1	7.0.22
Low	BIT-mongodb-2025-12657	MongoDB (R)@6.0.10	7.0.22

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.