StackRadar

rocketchat 7.1.0 Helm chart

rocketchat-server

Not scored yet

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.1.0 todayapp version 8.6.1 25Artifact Hub

rocketchat 7.1.0 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

Not yet scored

The daily scoring run has not folded the 12 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images
ImageTagVulnerabilitiesRadar Score
natsio/nats-box0.19.210461462,346
registry.rocket.chat/rocketchat/rocket.chat8.6.1—unmeasured
rocketchat/account-service8.6.10010921,130
rocketchat/authorization-service8.6.10010921,130
rocketchat/ddp-streamer-service8.6.10010961,166
rocketchat/presence-service8.6.10010921,130
bitnamilegacy/os-shell11-debian-11-r7231826710
bitnamilegacy/mongodb6.0.10-debian-11-r873451813,440
bitnamilegacy/mongodb-exporter0.39.0-debian-11-r10642361302,459
library/nats2.12-alpine00827453
natsio/nats-server-config-reloader0.21.11025731,274
natsio/prometheus-nats-exporter0.18.010361061,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

423 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalDSA-5514-1KEVglibc@2.31-13+deb11u62.31-13+deb11u7
CriticalBIT-mongodb-2025-14847KEVmongodb@6.0.10-14.4.30
CriticalBIT-mongodb-2025-14847KEVMongoDB (R)@6.0.104.4.30
CriticalDSA-5570-1KEVnghttp2@1.43.0-11.43.0-1+deb11u1
CriticalGO-2024-2687stdlib@go1.20.71.21.9
CriticalGO-2024-2687golang.org/x/net@v0.7.00.23.0
CriticalALPINE-CVE-2025-15467openssl@3.5.4-r03.5.5-r0
CriticalDSA-5673-1glibc@2.31-13+deb11u62.31-13+deb11u9
HighGHSA-45x7-px36-x8w8golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d0.0.0-20231218163308-9d2ee975ef9f
HighGHSA-qppj-fm5r-hxr3KEVgolang.org/x/net@v0.7.00.17.0
HighDLA-3898-1nghttp2@1.43.0-11.43.0-1+deb11u2
MediumDLA-3859-1systemd@247.3-7+deb11u4247.3-7+deb11u6
MediumDSA-5523-1curl@7.74.0-1.3+deb11u77.74.0-1.3+deb11u10
MediumDLA-3942-1openssl@1.1.1n-0+deb11u51.1.1n-0+deb11u6
MediumDLA-3942-2openssl@1.1.1n-0+deb11u51.1.1w-0+deb11u2
MediumALPINE-CVE-2026-45447openssl@3.5.4-r03.5.7-r0
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d0.31.0
MediumGO-2024-2887stdlib@go1.20.71.21.11
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.7.00.17.0
MediumGO-2023-2102stdlib@go1.20.71.20.10
MediumALPINE-CVE-2025-11187openssl@3.5.4-r03.5.5-r0
MediumGO-2023-2185stdlib@go1.20.71.20.11
MediumALPINE-CVE-2026-63073openssl@3.5.4-r03.5.8-r0
MediumGO-2026-4341stdlib@go1.25.21.24.12
MediumALPINE-CVE-2026-34182openssl@3.5.4-r03.5.7-r0
MediumDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
MediumGO-2026-4337stdlib@go1.25.21.24.13
MediumALPINE-CVE-2026-63076openssl@3.5.4-r03.5.8-r0
MediumDLA-4321-1openssl@1.1.1n-0+deb11u51.1.1w-0+deb11u4
MediumALPINE-CVE-2026-18798openssl@3.5.4-r03.5.8-r0
MediumGO-2025-3563stdlib@go1.20.71.23.8
MediumGO-2026-5026golang.org/x/net@v0.44.00.55.0
MediumGO-2026-5026stdlib@go1.25.21.25.13
MediumGO-2024-2963stdlib@go1.20.71.21.12
MediumDLA-4432-1curl@7.74.0-1.3+deb11u77.74.0-1.3+deb11u16
MediumGO-2024-3333golang.org/x/net@v0.7.00.33.0
MediumGO-2023-2044stdlib@go1.21.01.21.1
MediumGO-2023-2045stdlib@go1.21.01.21.1
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.31.00.52.0
MediumGHSA-8r3f-844c-mc37google.golang.org/protobuf@v1.28.01.33.0
MediumGHSA-fhg8-qxh5-7q3wgithub.com/nats-io/nats-server/v2@v2.10.232.10.27
MediumGO-2023-2375stdlib@go1.19.121.20.0
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.31.00.52.0
MediumALPINE-CVE-2026-8924curl@8.14.1-r28.14.1-r4
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.31.00.52.0
MediumGO-2026-6612golang.org/x/net@v0.44.00.60.0
MediumGO-2026-6612stdlib@go1.25.21.26.9
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.31.00.52.0
MediumGO-2024-3106stdlib@go1.20.71.22.7
MediumBIT-mongodb-2024-1351MongoDB (R)@6.0.105.0.26

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
7.1.0latesttoday8.6.1——
7.0.27 days ago8.6.11762441,06117,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 22 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.