rocketmq-cluster Helm chart
rocketmqScored 14 Sept 2026
RocketMQ Helm chart
Latest 12.6.0 7 months agoapp version 5.4.0 2Artifact Hub
rocketmq-cluster 12.6.0 deploys 2 container images: apacherocketmq/rocketmq-dashboard and apache/rocketmq. Across them, 544 findings — 3 critical, 5 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| apacherocketmq/ | 2.1.0 | 3443189 | 3,155 |
| apache/ | 5.4.0 | 0145259 | 3,173 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
457 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | RHSA-2026:1473 | openssl | 1:3.5.1-7.el9_7 |
| Critical | RHSA-2026:1503 | openssl | 1:3.2.2-7.el9_6.2 |
| Critical | RHSA-2025:20936 | sqlite | 0:3.34.1-9.el9_7 |
| High | GHSA-wmwf-9ccg-fff5 | tomcat-embed-core | 10.1.45 |
| High | GHSA-h3gc-qfqq-6h8f | tomcat-embed-core | 10.1.42 |
| High | GHSA-crf3-v9rr-v7hj | fastjson | no fix listed |
| High | GHSA-vfww-5hm6-hx2j | tomcat-embed-core | 10.1.45 |
| Medium | GHSA-mw3r-pfmg-xp92 | xmlbeans | 3.0.0 |
| Medium | RHSA-2026:25239 | openssl | 1:3.5.5-4.el9_8 |
| Medium | UBUNTU-CVE-2026-45447 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | GHSA-gqp3-2cvr-x8m3 | tomcat-embed-core | 10.1.44 |
| Medium | GHSA-r29c-68gh-xp6x | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-wxr5-93ph-8wr9 | commons-beanutils | 1.11.0 |
| Medium | GHSA-735f-pc8j-v9w8 | protobuf-java | 3.25.5 |
| Medium | GHSA-h6fc-48rj-7qqh | tomcat-embed-core | 10.1.55 |
| Medium | UBUNTU-CVE-2026-19931 | curl | no fix listed |
| Medium | GHSA-jq43-27x9-3v86 | netty-codec-smtp | 4.1.128.Final |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | GHSA-4g8c-wm8x-jfhw | netty-handler | 4.1.118.Final |
| Medium | GHSA-wc4r-xq3c-5cf3 | tomcat-embed-core | 10.1.42 |
| Medium | GHSA-wr62-c79q-cv37 | tomcat-embed-core | 10.1.43 |
| Medium | GHSA-5m62-pw8w-7w9f | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-25xr-qj8w-c4vf | tomcat-embed-core | 10.1.43 |
| Medium | UBUNTU-CVE-2026-10536 | curl | 8.5.0-2ubuntu10.11 |
| Medium | GHSA-w9fj-cfpg-grvv | netty-codec-http2 | 4.1.132.Final |
| Medium | RHSA-2026:20612 | gnutls | 0:3.8.10-4.el9_8 |
| Medium | RHSA-2026:30004 | gnutls | 0:3.8.3-6.el9_6.4 |
| Medium | GHSA-h2fw-rfh5-95r3 | tomcat-embed-core | 10.1.41 |
| Medium | GHSA-9xv2-5v5q-p794 | tomcat-embed-core | 10.1.58 |
| Medium | UBUNTU-CVE-2026-18924 | curl | no fix listed |
| Medium | UBUNTU-CVE-2026-11856 | curl | 8.5.0-2ubuntu10.12 |
| Medium | GHSA-c459-2m73-67hj | hessian | 3.5.5 |
| Medium | UBUNTU-CVE-2026-8925 | curl | 8.5.0-2ubuntu10.10 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | UBUNTU-CVE-2026-42009 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | UBUNTU-CVE-2026-63076 | openssl | 3.0.13-0ubuntu3.15 |
| Medium | UBUNTU-CVE-2025-59375 | expat | no fix listed |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | UBUNTU-CVE-2026-33846 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Medium | RHSA-2026:8510 | libarchive | 0:3.5.3-9.el9_7 |
| Medium | RHSA-2026:8866 | libarchive | 0:3.5.3-7.el9_6.1 |
| Medium | GHSA-h3x4-894j-xpx5 | tomcat-embed-core | 10.1.58 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | UBUNTU-CVE-2026-5450 | glibc | 2.39-0ubuntu8.8 |
| Medium | GHSA-9pp5-9c7g-4r83 | spring-security-core | 6.4.6 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | RHSA-2026:28255 | libpng | 2:1.6.37-15.el9_8.2 |
| Medium | UBUNTU-CVE-2026-34182 | openssl | 3.0.13-0ubuntu3.11 |
| Medium | GHSA-gcx9-497g-6cp6 | tomcat-embed-core | 10.1.58 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/rocketmq/rocketmq-cluster)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.