rocketchat Helm chart

Name: rocketchat Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Latest 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

335 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	BIT-mongodb-2024-6375	mongodb@6.0.10-1	5.0.22
Low	GHSA-qx2v-qp2m-jg93	postcss@8.5.6	8.5.10
Low	GHSA-hp3w-g68c-fv3c	sprintf-js@1.0.3	no fix listed
Low	ALPINE-CVE-2026-49839	jq@1.8.0-r0	1.8.2-r0
Low	GO-2026-5856	stdlib@go1.25.2	1.25.12
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.1.0	2.1.2
Low	GO-2025-3750	stdlib@go1.20.7	1.23.10
Low	BIT-mongodb-2024-8207	mongodb@6.0.10-1	5.0.26
Low	BIT-mongodb-2024-8207	MongoDB (R)@6.0.10	5.0.26
Low	ALPINE-CVE-2026-33948	jq@1.8.0-r0	1.8.2-r0
Low	GHSA-vmf3-w455-68vh	tar@7.5.11	7.5.16
Low	GO-2026-5027	golang.org/x/net@v0.44.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.44.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.44.0	0.55.0
Low	ALPINE-CVE-2025-13034	curl@8.14.1-r2	8.14.1-r4
Low	GO-2026-4340	stdlib@go1.25.2	1.24.12
Low	GHSA-5r4p-p66f-jhc7	hono@4.12.25	4.13.11
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u6
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@7.1.1	7.1.3
Low	GO-2026-6599	stdlib@go1.25.2	1.26.9
Low	GO-2026-6600	stdlib@go1.25.2	1.26.9
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@2.1.0	2.1.7
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u9
Low	DLA-4176-1	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@3.14.1	3.15.1
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@2.0.0	3.2.1
Low	ALPINE-CVE-2026-42768	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-9983-vrx2-fg9c	github.com/nats-io/nats-server/v2@v2.10.23	2.11.15
Low	DLA-3930-1	libsepol@3.1-1	3.1-1+deb11u1
Low	GHSA-qxp5-gwg8-xv66	golang.org/x/net@v0.7.0	0.36.0
Low	GO-2025-3503	stdlib@go1.20.7	1.23.7
Low	ALPINE-CVE-2026-42769	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-f88m-g3jw-g9cj	sharp@0.33.5	0.35.0
Low	ALPINE-CVE-2025-15469	openssl@3.5.4-r0	3.5.5-r0
Low	BIT-mongodb-2025-3082	mongodb@6.0.10-1	5.0.31
Low	BIT-mongodb-2025-3082	MongoDB (R)@6.0.10	5.0.31
Low	GO-2026-4869	stdlib@go1.25.2	1.25.9
Low	GHSA-f23p-vx2j-j53r	hono@4.12.25	4.12.34
Low	DLA-4306-1	pam@1.4.0-9+deb11u1	1.4.0-9+deb11u2
Low	ALPINE-CVE-2026-33947	jq@1.8.0-r0	1.8.2-r0
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	GHSA-hrr3-gc8f-f4qj	fast-uri@3.1.2	3.1.8
Low	GHSA-x5fp-wj9c-mxmx	qs@6.15.2	6.16.0
Low	DLA-4130-1	shadow@1:4.8.1-1	1:4.8.1-1+deb11u1
Low	ALPINE-CVE-2026-41256	jq@1.8.0-r0	1.8.2-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-40612	jq@1.8.0-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.0-r0	1.8.2-r0
Low	ALPINE-CVE-2026-47770	jq@1.8.0-r0	1.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.