rocketmq-cluster 12.6.0 Helm chart
rocketmqScored 14 Sept 2026
RocketMQ Helm chart
Version 12.6.0 7 months agoapp version 5.4.0 2Artifact Hub
rocketmq-cluster 12.6.0 deploys 2 container images: apacherocketmq/rocketmq-dashboard and apache/rocketmq. Across them, 544 findings — 3 critical, 5 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| apacherocketmq/ | 2.1.0 | 3443189 | 3,155 |
| apache/ | 5.4.0 | 0145259 | 3,173 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
457 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-jdk15on | no fix listed |
| Low | GHSA-88fw-v6x4-3f58 | spring-data-commons | no fix listed |
| Low | GHSA-9fw2-h3hf-293r | spring-data-commons | no fix listed |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | 6.2.19 |
| Low | UBUNTU-CVE-2026-6791 | glibc | 2.39-0ubuntu8.9 |
| Low | RHSA-2026:0210 | libpng | 2:1.6.37-12.el9_6.1 |
| Low | RHSA-2026:0238 | libpng | 2:1.6.37-12.el9_7.1 |
| Low | UBUNTU-CVE-2026-8458 | curl | 8.5.0-2ubuntu10.10 |
| Low | UBUNTU-CVE-2026-76641 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-58469 | wget | 1.21.4-1ubuntu4.3 |
| Low | UBUNTU-CVE-2026-6253 | curl | 8.5.0-2ubuntu10.9 |
| Low | RHSA-2026:0936 | glib2 | 0:2.68.4-18.el9_7.1 |
| Low | UBUNTU-CVE-2026-4437 | glibc | 2.39-0ubuntu8.8 |
| Low | UBUNTU-CVE-2026-9547 | curl | 8.5.0-2ubuntu10.10 |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | RHSA-2026:19357 | krb5 | 0:1.21.1-10.el9_8 |
| Low | UBUNTU-CVE-2026-40355 | krb5 | 1.20.1-6ubuntu2.7 |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-6276 | curl | 8.5.0-2ubuntu10.9 |
| Low | RHSA-2026:24683 | krb5 | 0:1.21.1-8.el9_6.2 |
| Low | UBUNTU-CVE-2026-40356 | krb5 | 1.20.1-6ubuntu2.7 |
| Low | GHSA-xxqh-mfjm-7mv9 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-9m3c-qcxr-9x87 | tomcat-embed-core | 10.1.53 |
| Low | UBUNTU-CVE-2016-2781 | coreutils | no fix listed |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | GHSA-4cx2-fc23-5wg6 | bcpkix-jdk15on | 1.79 |
| Low | GHSA-hr8g-6v94-x4m9 | bcprov-jdk15on | no fix listed |
| Low | UBUNTU-CVE-2026-42767 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2026-5545 | curl | 8.5.0-2ubuntu10.9 |
| Low | UBUNTU-CVE-2026-48962 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-3784 | curl | 8.5.0-2ubuntu10.8 |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | UBUNTU-CVE-2025-14819 | curl | 8.5.0-2ubuntu10.7 |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | RHSA-2026:39315 | libsolv | 0:0.7.24-6.el9_8 |
| Low | RHSA-2026:20597 | glibc | 0:2.34-270.el9_8 |
| Low | GHSA-6cqp-g7gg-8hr5 | netty-codec-http | 4.1.136.Final |
| Low | GHSA-72hv-8253-57qq | jackson-core | 2.18.6 |
| Low | RHSA-2026:42952 | glibc | 0:2.34-274.el9_8 |
| Low | UBUNTU-CVE-2026-63074 | openssl | 3.0.13-0ubuntu3.15 |
| Low | GHSA-m4cv-j2px-7723 | netty-codec-http | 4.1.133.Final |
| Low | UBUNTU-CVE-2025-14524 | curl | 8.5.0-2ubuntu10.7 |
| Low | RHSA-2026:4188 | gnutls | 0:3.8.3-10.el9_7 |
| Low | RHSA-2026:6630 | gnutls | 0:3.8.3-6.el9_6.3 |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.8.3-1.1ubuntu3.5 |
| Low | UBUNTU-CVE-2026-6238 | glibc | 2.39-0ubuntu8.8 |
| Low | GHSA-5gvw-p9qm-jgwh | jackson-databind | 2.18.9 |
| Low | UBUNTU-CVE-2026-3731 | libssh | 0.10.6-2ubuntu0.4 |
| Low | GHSA-pr98-23f8-jwxv | logback-core | 1.3.15 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/rocketmq/rocketmq-cluster)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.