rocketchat 7.0.2 Helm chart

Name: rocketchat Helm chart 7.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

335 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	GHSA-g6gw-c38x-mqfc	hono@4.12.25	4.13.5
Low	GO-2026-4603	stdlib@go1.25.2	1.25.8
Low	ALPINE-CVE-2026-3783	curl@8.14.1-r2	8.14.1-r4
Low	GO-2025-4175	stdlib@go1.25.2	1.24.11
Low	ALPINE-CVE-2026-6429	curl@8.14.1-r2	8.14.1-r4
Low	GHSA-fcjp-h8cc-6879	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.31.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.31.0	0.52.0
Low	GO-2026-4864	stdlib@go1.25.2	1.25.9
Low	BIT-mongodb-2025-10059	mongodb@6.0.10-1	6.0.24
Low	BIT-mongodb-2025-10059	MongoDB (R)@6.0.10	6.0.24
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1
Low	GO-2026-4982	stdlib@go1.25.2	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.44.0	0.55.0
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4
Low	GHSA-54fx-42gc-7vw4	hono@4.12.25	4.12.34
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.11	7.5.17
Low	GHSA-h3mg-xc3c-68pw	ip-address@10.1.0	10.7.1
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.31.0	0.52.0
Low	GHSA-w62v-xxxg-mg59	hono@4.12.25	4.12.27
Low	ALPINE-CVE-2026-34181	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4873	curl@8.14.1-r2	8.14.1-r4
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	DLA-4195-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u7
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.11.3	1.17.7
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.33.5	0.35.4
Low	GHSA-wq5f-xc86-pv6w	sharp@0.33.5	0.35.5
Low	GO-2026-6091	stdlib@go1.25.2	1.25.13
Low	ALPINE-CVE-2026-7168	curl@8.14.1-r2	8.14.1-r4
Low	GO-2025-4008	stdlib@go1.20.7	1.24.8
Low	GO-2025-4010	stdlib@go1.20.7	1.24.8
Low	BIT-mongodb-2024-3374	mongodb@6.0.10-1	5.0.26
Low	BIT-mongodb-2024-3374	MongoDB (R)@6.0.10	5.0.26
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.3.11	3.3.16
Low	GO-2024-2888	stdlib@go1.20.7	1.21.11
Low	GO-2026-4865	stdlib@go1.25.2	1.25.9
Low	BIT-mongodb-2024-6384	MongoDB (R)@6.0.10	6.0.16
Low	BIT-mongodb-2024-6384	mongodb@6.0.10-1	6.0.16
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	GHSA-55h8-8g96-x4hj	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	GHSA-pwx7-fx9r-hr4h	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	GHSA-4mjr-xmp4-gh2g	qs@6.15.2	6.16.0
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	GO-2026-4976	stdlib@go1.25.2	1.25.10
Low	GO-2026-5039	stdlib@go1.25.2	1.25.11
Low	DLA-4490-1	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u5
Low	GHSA-8988-4f7v-96qf	@opentelemetry/core@2.7.1	2.8.0
Low	GHSA-f38q-mgvj-vph7	protobufjs@7.6.1	7.6.3
Low	BIT-mongodb-2024-6375	MongoDB (R)@6.0.10	5.0.22

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.