rocketmq-cluster 12.6.0 Helm chart
rocketmqScored 14 Sept 2026
RocketMQ Helm chart
Version 12.6.0 7 months agoapp version 5.4.0 2Artifact Hub
rocketmq-cluster 12.6.0 deploys 2 container images: apacherocketmq/rocketmq-dashboard and apache/rocketmq. Across them, 544 findings — 3 critical, 5 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| apacherocketmq/ | 2.1.0 | 3443189 | 3,155 |
| apache/ | 5.4.0 | 0145259 | 3,173 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
457 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2026:64812 | expat | 0:2.5.0-6.el9_8.3 |
| Low | GHSA-3chg-m5w7-qfv5 | spring-webmvc | 6.2.19 |
| Low | RHSA-2026:13677 | systemd | 0:252-55.el9_7.9 |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | RHSA-2026:42736 | acl | 0:2.4.0-1.el9_8 |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | 1.10.3-2ubuntu0.1 |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | 6.2.19 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.5.2-1ubuntu0.1 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | UBUNTU-CVE-2026-0964 | libssh | 0.10.6-2ubuntu0.3 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | 6.2.18 |
| Low | UBUNTU-CVE-2026-59848 | libssh | 0.10.6-2ubuntu0.5 |
| Low | UBUNTU-CVE-2026-16599 | wget | no fix listed |
| Low | RHSA-2026:61581 | tar | 2:1.34-13.el9_8 |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.35+dfsg-3ubuntu0.4 |
| Low | UBUNTU-CVE-2026-4438 | glibc | 2.39-0ubuntu8.8 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | UBUNTU-CVE-2026-72522 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56403 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | RHSA-2026:62143 | wget | 0:1.21.1-11.el9_8 |
| Low | UBUNTU-CVE-2026-58471 | wget | 1.21.4-1ubuntu4.3 |
| Low | UBUNTU-CVE-2026-58472 | wget | 1.21.4-1ubuntu4.3 |
| Low | GHSA-wc96-39fc-566f | netty-handler-ssl-ocsp | 4.1.136.Final |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | RHSA-2026:1913 | util-linux | 0:2.37.4-21.el9_7 |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | UBUNTU-CVE-2026-42014 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | UBUNTU-CVE-2026-45446 | openssl | 3.0.13-0ubuntu3.11 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.3.16 |
| Low | RHSA-2026:54662 | nghttp2 | 0:1.43.0-6.el9_8.2 |
| Low | UBUNTU-CVE-2026-58055 | nghttp2 | 1.59.0-1ubuntu0.4 |
| Low | RHSA-2025:23343 | binutils | 0:2.35.2-67.el9_7.1 |
| Low | UBUNTU-CVE-2026-40225 | systemd | 255.4-1ubuntu8.14 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/rocketmq/rocketmq-cluster)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.