rocketchat Helm chart

Name: rocketchat Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketchat-server

Scored 21 Oct 2026

Prepare to take off with the ultimate chat platform, experience the next level of team communications

Latest 7.0.2 6 days agoapp version 8.6.1 25Artifact Hub

rocketchat 7.0.2 deploys 12 container images: natsio/nats-box, registry.rocket.chat/rocketchat/rocket.chat, rocketchat/account-service, rocketchat/authorization-service and 8 more. Across the 11 measured, 1,328 findings — 17 critical, 6 high — 9 on CISA KEV. The highest contribution is DSA-5514-1 in glibc 2.31-13+deb11u6, fixed in 2.31-13+deb11u7.

Radar Score

17,0331762441,061

1,328 findings over 11 of 12 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
natsio/nats-box	0.19.2	1046146	2,346
registry.rocket.chat/rocketchat/rocket.chat	8.6.1	—	unmeasured
rocketchat/account-service	8.6.1	001092	1,130
rocketchat/authorization-service	8.6.1	001092	1,130
rocketchat/ddp-streamer-service	8.6.1	001096	1,166
rocketchat/presence-service	8.6.1	001092	1,130
bitnamilegacy/os-shell	11-debian-11-r72	31826	710
bitnamilegacy/mongodb	6.0.10-debian-11-r8	7345181	3,440
bitnamilegacy/mongodb-exporter	0.39.0-debian-11-r106	4236130	2,459
library/nats	2.12-alpine	00827	453
natsio/nats-server-config-reloader	0.21.1	102573	1,274
natsio/prometheus-nats-exporter	0.18.0	1036106	1,795

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

423 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-42766	openssl@3.5.4-r0	3.5.7-r0
Low	BIT-mongodb-2025-6709	mongodb@6.0.10-1	6.0.21
Low	BIT-mongodb-2025-6709	MongoDB (R)@6.0.10	6.0.21
Low	GO-2023-2041	stdlib@go1.20.7	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.31.0	0.56.0
Low	GO-2025-3751	stdlib@go1.20.7	1.23.10
Low	GO-2023-2043	stdlib@go1.20.7	1.20.8
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GO-2026-4342	stdlib@go1.25.2	1.24.12
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.2	3.1.3
Low	GO-2026-5970	golang.org/x/text@v0.29.0	0.39.0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	BIT-mongodb-2026-9753	mongodb@6.0.10-1	7.0.35
Low	BIT-mongodb-2026-9753	MongoDB (R)@6.0.10	7.0.35
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.7.0	0.13.0
Low	GO-2025-4155	stdlib@go1.25.2	1.24.11
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u7
Low	BIT-mongodb-2025-6713	mongodb@6.0.10-1	6.0.22
Low	BIT-mongodb-2025-6713	MongoDB (R)@6.0.10	6.0.22
Low	BIT-mongodb-2025-3083	mongodb@6.0.10-1	5.0.31
Low	BIT-mongodb-2025-3083	MongoDB (R)@6.0.10	5.0.31
Low	GO-2025-4014	stdlib@go1.20.7	1.24.8
Low	GO-2026-6303	golang.org/x/crypto@v0.31.0	0.55.0
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.11	7.5.18
Low	GO-2026-6354	golang.org/x/crypto@v0.31.0	0.56.0
Low	DLA-4065-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6
Low	GO-2023-2382	stdlib@go1.20.7	1.20.12
Low	GHSA-2g4f-4pwh-qvx6	ajv@8.17.1	8.18.0
Low	GHSA-cfpf-hrx2-8rv6	github.com/expr-lang/expr@v1.17.6	1.17.7
Low	GO-2026-6617	golang.org/x/net@v0.44.0	0.60.0
Low	GO-2026-6617	stdlib@go1.25.2	1.26.9
Low	BIT-mongodb-2025-6706	mongodb@6.0.10-1	6.0.21
Low	BIT-mongodb-2025-6706	MongoDB (R)@6.0.10	6.0.21
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	GO-2024-3105	stdlib@go1.20.7	1.22.7
Low	GO-2025-4007	stdlib@go1.25.2	1.24.9
Low	ALPINE-CVE-2025-15468	openssl@3.5.4-r0	3.5.5-r0
Low	GO-2026-6608	stdlib@go1.25.2	1.26.9
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.2	2.0.3
Low	GO-2026-6607	stdlib@go1.25.2	1.26.9
Low	DLA-4061-1	libtasn1-6@4.16.0-2+deb11u1	4.16.0-2+deb11u2
Low	ALPINE-CVE-2026-8286	curl@8.14.1-r2	8.14.1-r4
Low	BIT-mongodb-2024-8305	MongoDB (R)@6.0.10	6.0.17
Low	BIT-mongodb-2024-8305	mongodb@6.0.10-1	6.0.17
Low	GO-2025-4013	stdlib@go1.20.7	1.24.8
Low	GO-2026-6609	stdlib@go1.25.2	1.26.9
Low	BIT-mongodb-2025-10060	mongodb@6.0.10-1	6.0.25
Low	BIT-mongodb-2025-10060	MongoDB (R)@6.0.10	6.0.25
Low	BIT-mongodb-2025-6710	mongodb@6.0.10-1	6.0.21

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
7.0.2latest	6 days ago	8.6.1	1762441,061	17,033

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketchat-server/rocketchat.svg)](https://charts.stackradar.io/charts/rocketchat-server/rocketchat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.