rocketchat Helm chart
rocketchat-serverScored 21 Oct 2026
Prepare to take off with the ultimate chat platform, experience the next level of team communications
Latest 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub
rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| natsio/ | 0.19.2 | 1046146 | 2,346 |
| registry.rocket.chat/ | 8.6.1 | — | unmeasured |
| rocketchat/ | 8.6.1 | 001092 | 1,130 |
| rocketchat/ | 8.6.1 | 001092 | 1,130 |
| rocketchat/ | 8.6.1 | 001096 | 1,166 |
| rocketchat/ | 8.6.1 | 001092 | 1,130 |
| bitnamilegacy/ | 11-debian-11-r72 | 31826 | 710 |
| bitnamilegacy/ | 6.0.10-debian-11-r8 | 7345181 | 3,440 |
| bitnamilegacy/ | 0.39.0-debian-11-r106 | 4236130 | 2,459 |
| library/ | 2.12-alpine | 00827 | 453 |
| natsio/ | 0.21.1 | 102573 | 1,274 |
| natsio/ | 0.18.0 | 1036106 | 1,795 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-42770 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-43894 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2026-43896 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2026-54679 | jq | 1.8.2-r0 |
| Low | BIT-mongodb-2025-6711 | MongoDB (R) | 6.0.21 |
| Low | BIT-mongodb-2025-6711 | mongodb | 6.0.21 |
| Low | GHSA-hxh3-vqpv-xpqv | hono | 4.13.7 |
| Low | ALPINE-CVE-2026-41257 | jq | 1.8.2-r0 |
| Low | GHSA-8m2x-3m6q-6w8j | github.com/ | 2.12.6 |
| Low | GHSA-v422-hmwv-36x6 | body-parser | 1.20.6 |
| Low | GHSA-xgm2-5f3f-mvvc | hono | 4.12.27 |
| Low | GO-2025-3447 | stdlib | 1.22.12 |
| Low | ALPINE-CVE-2025-68160 | openssl | 3.5.5-r0 |
| Low | GHSA-79qm-7rj5-m7r9 | hono | 4.12.34 |
| Low | ALPINE-CVE-2026-6042 | musl | 1.2.5-r11 |
| Low | GHSA-v6h2-p8h4-qcjw | brace-expansion | 1.1.12 |
| Low | GO-2026-4403 | stdlib | 1.23.9 |
| Low | ALPINE-CVE-2026-43895 | jq | 1.8.2-r0 |
| Low | BIT-mongodb-2025-6707 | MongoDB (R) | 5.0.31 |
| Low | BIT-mongodb-2025-6707 | mongodb | 5.0.31 |
| Low | GHSA-f596-whhp-79r4 | @grpc/ | 1.14.5 |
| Low | GHSA-3f24-pcvm-5jqc | github.com/ | 2.11.15 |
| Low | ALPINE-CVE-2025-69418 | openssl | 3.5.5-r0 |
| Low | ALPINE-CVE-2025-46394 | busybox | 1.37.0-r20 |
| Low | DLA-3972-1 | tzdata | 2024b-0+deb11u1 |
| Low | DLA-4085-1 | tzdata | 2025a-0+deb11u1 |
| Low | DLA-4105-1 | tzdata | 2025b-0+deb11u1 |
| Low | DLA-4213-1 | curl | 7.74.0-1.3+deb11u15 |
| Low | DLA-4403-1 | tzdata | 2025b-0+deb11u2 |
| Low | DLA-4485-1 | ca-certificates | 20230311+deb12u1~deb11u1 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6809 | stdlib | 1.26.10 |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | ALPINE-CVE-2024-58251 | busybox | 1.37.0-r20 |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.