rocketchat 7.0.2 Helm chart

Name: rocketchat Helm chart 7.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

77 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	BIT-mongodb-2026-8053	mongodb@6.0.10-1	5.0.33
Medium	ALPINE-CVE-2026-14457	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-3805	curl@8.14.1-r2	8.14.1-r4
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.9.0	1.9.1
Medium	GHSA-52jh-2xxh-pwh6	github.com/nats-io/nats-server/v2@v2.10.23	2.11.14
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	GHSA-v722-jcv5-w7mc	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.31.0	0.35.0
Medium	ALPINE-CVE-2026-27135	nghttp2@1.65.0-r0	1.68.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2025-69420	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-8927	curl@8.14.1-r2	8.14.1-r4
Medium	ALPINE-CVE-2026-28388	openssl@3.5.4-r0	3.5.6-r0
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.31.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.31.0	0.52.0
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.5-r0	1.34.8-r0
Medium	GHSA-pq2q-rcw4-3hr6	github.com/nats-io/nats-server/v2@v2.10.23	2.11.14
Medium	GHSA-vprv-35vv-q339	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Medium	GO-2026-4601	stdlib@go1.25.2	1.25.8
Medium	BIT-mongodb-2024-8654	mongodb@6.0.10-1	6.0.15
Medium	BIT-mongodb-2024-8654	MongoDB (R)@6.0.10	6.0.15
Medium	GO-2026-4981	stdlib@go1.25.2	1.25.10
Medium	ALPINE-CVE-2026-28389	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.5.4-r0	3.5.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.