rocketmq-cluster Helm chart

Name: rocketmq-cluster Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rocketmq

Scored 14 Sept 2026

RocketMQ Helm chart

Latest 12.6.0 7 months agoapp version 5.4.0 2Artifact Hub

rocketmq-cluster 12.6.0 deploys 2 container images: apacherocketmq/rocketmq-dashboard and apache/rocketmq. Across them, 544 findings — 3 critical, 5 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.

Radar Score

6,3283588448

544 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
apacherocketmq/rocketmq-dashboard	2.1.0	3443189	3,155
apache/rocketmq×4	5.4.0	0145259	3,173

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

376 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.114.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-14819	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6
Low	RHSA-2026:39315	libsolv@0.7.24-3.el9	0:0.7.24-6.el9_8
Low	RHSA-2026:20597	glibc@2.34-168.el9_6.23	0:2.34-270.el9_8
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.114.Final	4.1.136.Final
Low	GHSA-72hv-8253-57qq	jackson-core@2.18.3	2.18.6
Low	RHSA-2026:42952	glibc@2.34-168.el9_6.23	0:2.34-274.el9_8
Low	UBUNTU-CVE-2026-63074	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.114.Final	4.1.133.Final
Low	UBUNTU-CVE-2025-14524	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7
Low	RHSA-2026:4188	gnutls@3.8.3-6.el9	0:3.8.3-10.el9_7
Low	RHSA-2026:6630	gnutls@3.8.3-6.el9	0:3.8.3-6.el9_6.3
Low	UBUNTU-CVE-2025-14831	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.5
Low	UBUNTU-CVE-2026-6238	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.18.3	2.18.9
Low	UBUNTU-CVE-2026-3731	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4
Low	GHSA-pr98-23f8-jwxv	logback-core@1.3.5	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.3.5	1.5.34
Low	UBUNTU-CVE-2026-5435	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.114.Final	4.1.135.Final
Low	RHSA-2026:61623	gzip@1.12-1.el9	0:1.12-2.el9_8
Low	GHSA-272m-gcwp-mpwg	netty-handler-ssl-ocsp@4.1.114.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.114.Final	4.1.129.Final
Low	RHSA-2026:64800	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.10
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.18.3	2.18.8
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.4	no fix listed
Low	RHSA-2026:58936	sqlite@3.34.1-8.el9_6	0:3.34.1-11.el9_8
Low	RHSA-2026:59956	sqlite@3.34.1-8.el9_6	0:3.34.1-8.el9_6.1
Low	UBUNTU-CVE-2026-11822	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6
Low	UBUNTU-CVE-2026-11824	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.6
Low	RHSA-2025:22660	systemd@252-51.el9_6.1	0:252-55.el9_7.7
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.114.Final	4.1.135.Final
Low	UBUNTU-CVE-2025-15079	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@6.2.6	6.2.17
Low	RHSA-2026:0067	tar@2:1.34-7.el9	2:1.34-9.el9_7
Low	GHSA-p9jm-q85p-7mcp	netty-codec-redis@4.1.114.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-6429	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	RHSA-2026:50147	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8
Low	GHSA-jfg9-48mv-9qgx	netty-codec-mqtt@4.1.114.Final	4.1.133.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.114.Final	4.1.136.Final
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@6.2.6	6.2.19
Low	UBUNTU-CVE-2025-10148	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7
Low	RHSA-2026:61247	libxml2@2.9.13-12.el9_6	0:2.9.13-14.el9_8.4
Low	UBUNTU-CVE-2026-1965	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8
Low	RHSA-2026:0719	gnupg2@2.3.3-4.el9	0:2.3.3-5.el9_7
Low	UBUNTU-CVE-2026-7168	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@6.2.6	6.2.19
Low	UBUNTU-CVE-2026-59847	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.6.0latest	7 months ago	5.4.0	3588448	6,328

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rocketmq/rocketmq-cluster.svg)](https://charts.stackradar.io/charts/rocketmq/rocketmq-cluster)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.