rocketmq-cluster 12.6.0 Helm chart

Name: rocketmq-cluster Helm chart 12.6.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketmq

Scored 14 Sept 2026

RocketMQ Helm chart

Version 12.6.0 7 months agoapp version 5.4.0 2Artifact Hub

rocketmq-cluster 12.6.0 deploys 2 container images: apacherocketmq/rocketmq-dashboard and apache/rocketmq. Across them, 544 findings — 3 critical, 5 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.

Radar Score

6,3283588448

544 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
apacherocketmq/rocketmq-dashboard	2.1.0	3443189	3,155
apache/rocketmq×4	5.4.0	0145259	3,173

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

457 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-5435	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.114.Final	4.1.135.Final
Low	RHSA-2026:61623	gzip@1.12-1.el9	0:1.12-2.el9_8
Low	GHSA-272m-gcwp-mpwg	netty-handler-ssl-ocsp@4.1.114.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.114.Final	4.1.129.Final
Low	RHSA-2026:64800	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.10
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.18.3	2.18.8
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.4	no fix listed
Low	RHSA-2026:58936	sqlite@3.34.1-8.el9_6	0:3.34.1-11.el9_8
Low	RHSA-2026:59956	sqlite@3.34.1-8.el9_6	0:3.34.1-8.el9_6.1
Low	UBUNTU-CVE-2026-11822	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6
Low	UBUNTU-CVE-2026-11824	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6
Low	RHSA-2025:22660	systemd@252-51.el9_6.1	0:252-55.el9_7.7
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.114.Final	4.1.135.Final
Low	UBUNTU-CVE-2025-15079	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@6.2.6	6.2.17
Low	RHSA-2026:0067	tar@2:1.34-7.el9	2:1.34-9.el9_7
Low	GHSA-p9jm-q85p-7mcp	netty-codec-redis@4.1.114.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-6429	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	RHSA-2026:50147	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8
Low	GHSA-jfg9-48mv-9qgx	netty-codec-mqtt@4.1.114.Final	4.1.133.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.114.Final	4.1.136.Final
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@6.2.6	6.2.19
Low	UBUNTU-CVE-2025-10148	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7
Low	RHSA-2026:61247	libxml2@2.9.13-12.el9_6	0:2.9.13-14.el9_8.4
Low	UBUNTU-CVE-2026-1965	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8
Low	RHSA-2026:0719	gnupg2@2.3.3-4.el9	0:2.3.3-5.el9_7
Low	UBUNTU-CVE-2026-7168	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@6.2.6	6.2.19
Low	UBUNTU-CVE-2026-59847	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.5
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.114.Final	4.1.133.Final
Low	GHSA-5m4m-73w9-8433	spring-data-commons@3.4.5	no fix listed
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.114.Final	4.1.115.Final
Low	UBUNTU-CVE-2026-3783	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8
Low	UBUNTU-CVE-2026-4873	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.114.Final	4.1.137.Final
Low	UBUNTU-CVE-2026-34743	xz-utils@5.6.1+really5.4.5-1ubuntu0.2	5.6.1+really5.4.5-1ubuntu0.3
Low	GHSA-g7hg-vrcf-mvmr	netty-handler-ssl-ocsp@4.1.114.Final	4.1.136.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.18.3	2.18.8
Low	UBUNTU-CVE-2026-54411	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.6
Low	GHSA-3g8r-4pfx-jmfh	netty-codec-stomp@4.1.114.Final	4.1.136.Final
Low	GHSA-389x-839f-4rhx	netty-common@4.1.114.Final	4.1.118.Final
Low	RHSA-2026:33226	glibc@2.34-168.el9_6.23	0:2.34-272.el9_8
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.114.Final	4.1.136.Final
Low	GHSA-rgrr-p7gp-5xj7	netty-codec-redis@4.1.114.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.2	no fix listed
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@3.4.5	no fix listed
Low	RHSA-2026:12441	libcap@2.48-9.el9_2	0:2.48-10.el9_7.1
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.66-5ubuntu2.2	1:2.66-5ubuntu2.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.6.0latest	7 months ago	5.4.0	3588448	6,328

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketmq/rocketmq-cluster.svg)](https://charts.stackradar.io/charts/rocketmq/rocketmq-cluster)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.