rocketmq-cluster 12.6.0 Helm chart

Name: rocketmq-cluster Helm chart 12.6.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketmq

Scored 14 Sept 2026

RocketMQ Helm chart

Version 12.6.0 7 months agoapp version 5.4.0 2Artifact Hub

rocketmq-cluster 12.6.0 deploys 2 container images: apacherocketmq/rocketmq-dashboard and apache/rocketmq. Across them, 544 findings — 3 critical, 5 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.

Radar Score

6,3283588448

544 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
apacherocketmq/rocketmq-dashboard	2.1.0	3443189	3,155
apache/rocketmq×4	5.4.0	0145259	3,173

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

376 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:19457	glib2@2.68.4-16.el9_6.2	0:2.68.4-16.el9_6.5
Low	UBUNTU-CVE-2026-54874	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
Low	GHSA-fx2c-96vj-985v	netty-codec-haproxy@4.1.79.Final	4.1.86.Final
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@10.1.40	10.1.52
Low	UBUNTU-CVE-2026-42766	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2025-32990	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.4+Fips1
Low	GHSA-4qhr-g3c6-fcfx	netty-codec-xml@4.1.114.Final	4.1.136.Final
Low	RHSA-2026:2042	brotli@1.0.9-7.el9_5	0:1.0.9-9.el9_7
Low	RHSA-2026:19218	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-2.el9_8
Low	RHSA-2026:27744	openssl-fips-provider@3.0.7-6.el9_5	0:3.0.7-11.el9_8
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.20.1	3.20.3
Low	GHSA-mgp5-rv84-w37q	tomcat-embed-core@10.1.40	10.1.52
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.114.Final	4.1.135.Final
Low	RHSA-2025:15099	pam@1.5.1-25.el9_6	0:1.5.1-26.el9_6
Low	RHSA-2025:23043	curl@7.76.1-31.el9_6.1	0:7.76.1-31.el9_6.2
Low	RHSA-2026:52674	libarchive@3.5.3-6.el9_6	0:3.5.3-11.el9_8
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.24.3	2.25.5
Low	GHSA-gmg8-593g-7mv3	poi-ooxml@3.17	5.4.0
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.114.Final	4.1.125.Final
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@10.1.40	10.1.55
Low	RHSA-2025:21773	expat@2.5.0-5.el9_6	0:2.5.0-5.el9_6.1
Low	GHSA-3244-j874-rhc2	netty-codec-redis@4.1.114.Final	4.1.135.Final
Low	GHSA-5w86-c3rq-vjj7	netty-codec-redis@4.1.114.Final	4.1.135.Final
Low	GHSA-6ghj-frrj-jjj3	netty-codec-redis@4.1.114.Final	4.1.135.Final
Low	GHSA-jmp9-x22r-554x	spring-core@6.2.6	6.2.11
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.114.Final	4.1.133.Final
Low	GHSA-rv64-5gf8-9qq8	tomcat-embed-core@10.1.40	10.1.54
Low	RHSA-2026:23230	expat@2.5.0-5.el9_6	0:2.5.0-6.el9_8.1
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.114.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-12243	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.4+Fips1
Low	GHSA-v74w-7mr3-4qg3	netty-codec-xml@4.1.114.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-32989	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.4+Fips1
Low	UBUNTU-CVE-2026-9538	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@10.1.40	10.1.54
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.114.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-6395	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.4+Fips1
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.114.Final	4.1.136.Final
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.68	1.78
Low	GHSA-8v5q-rhf3-jphm	spring-security-core@6.4.5	6.4.10
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.114.Final	4.1.136.Final
Low	GHSA-vhch-2wf3-m8rp	netty-codec-stomp@4.1.114.Final	4.1.136.Final
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@10.1.40	10.1.50
Low	UBUNTU-CVE-2026-2219	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6
Low	UBUNTU-CVE-2026-42497	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Low	UBUNTU-CVE-2026-41992	gzip@1.12-1ubuntu3.1	1.12-1ubuntu3.2
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@10.1.40	10.1.47
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.114.Final	4.1.136.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.6.0latest	7 months ago	5.4.0	3588448	6,328

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketmq/rocketmq-cluster.svg)](https://charts.stackradar.io/charts/rocketmq/rocketmq-cluster)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.