rocketchat 7.1.0 Helm chart

Name: rocketchat Helm chart 7.1.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 22 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Version 7.1.0 todayapp version 8.6.1 25Artifact Hub

rocketchat 7.1.0 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0421762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,347
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,170
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,460
library/nats	2.12-alpine	00827	454
natsio/nats-server-config-reloader	0.21.1	102573	1,275
natsio/prometheus-nats-exporter	0.18.0	1036106	1,796

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

335 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	BIT-mongodb-2024-3372	MongoDB (R)@6.0.10	5.0.25
Low	BIT-mongodb-2024-3372	mongodb@6.0.10-1	5.0.25
Low	GO-2026-6218	stdlib@go1.25.2	1.25.13
Low	GO-2026-5942	golang.org/x/net@v0.44.0	0.56.0
Low	ALPINE-CVE-2026-31789	openssl@3.5.4-r0	3.5.6-r0
Low	GHSA-2883-xcg3-v3hh	js-yaml@3.14.1	3.15.2
Low	ALPINE-CVE-2026-39979	jq@1.8.0-r0	1.8.2-r0
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14
Low	GHSA-r292-9mhp-454m	tar@7.5.11	7.5.21
Low	GHSA-r28c-9q8g-f849	postcss@8.5.6	8.5.18
Low	GO-2024-2610	stdlib@go1.20.7	1.21.8
Low	GHSA-x6g4-f6q3-fqvv	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	ALPINE-CVE-2026-42766	openssl@3.5.4-r0	3.5.7-r0
Low	BIT-mongodb-2025-6709	mongodb@6.0.10-1	6.0.21
Low	BIT-mongodb-2025-6709	MongoDB (R)@6.0.10	6.0.21
Low	GO-2023-2041	stdlib@go1.20.7	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.31.0	0.56.0
Low	GO-2025-3751	stdlib@go1.20.7	1.23.10
Low	GO-2023-2043	stdlib@go1.20.7	1.20.8
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GO-2026-4342	stdlib@go1.25.2	1.24.12
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.2	3.1.3
Low	GO-2026-5970	golang.org/x/text@v0.29.0	0.39.0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	BIT-mongodb-2026-9753	MongoDB (R)@6.0.10	7.0.35
Low	BIT-mongodb-2026-9753	mongodb@6.0.10-1	7.0.35
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.7.0	0.13.0
Low	GO-2025-4155	stdlib@go1.25.2	1.24.11
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u7
Low	BIT-mongodb-2025-6713	mongodb@6.0.10-1	6.0.22
Low	BIT-mongodb-2025-6713	MongoDB (R)@6.0.10	6.0.22
Low	BIT-mongodb-2025-3083	MongoDB (R)@6.0.10	5.0.31
Low	BIT-mongodb-2025-3083	mongodb@6.0.10-1	5.0.31
Low	GO-2025-4014	stdlib@go1.20.7	1.24.8
Low	GO-2026-6303	golang.org/x/crypto@v0.31.0	0.55.0
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.11	7.5.18
Low	GO-2026-6354	golang.org/x/crypto@v0.31.0	0.56.0
Low	DLA-4065-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6
Low	GO-2023-2382	stdlib@go1.20.7	1.20.12
Low	GHSA-2g4f-4pwh-qvx6	ajv@8.17.1	8.18.0
Low	GHSA-cfpf-hrx2-8rv6	github.com/expr-lang/expr@v1.17.6	1.17.7
Low	GO-2026-6617	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-6617	stdlib@go1.25.2	1.26.9
Low	BIT-mongodb-2025-6706	MongoDB (R)@6.0.10	6.0.21
Low	BIT-mongodb-2025-6706	mongodb@6.0.10-1	6.0.21
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	GO-2024-3105	stdlib@go1.20.7	1.22.7
Low	GO-2025-4007	stdlib@go1.25.2	1.24.9
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.1.0latest	today	8.6.1	1762441,061	17,042
7.0.2	7 days ago	8.6.1	1762441,061	17,042

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.