shopware Helm chart

Name: shopware Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

shopware-store

Scored 14 Sept 2026

A Helm chart for deploying a Shopware shop on Kubernetes. Requires the Shopware Operator chart to be installed.

Latest 2.1.1 5 days agodeploys tag 1.14.0 0Artifact Hub

shopware 2.1.1 deploys 5 container images: percona/percona-xtradb-cluster-operator, library/busybox, rustfs/rustfs, valkey/valkey and 1 more. Across them, 437 findings — 3 critical, 8 high — 1 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-83.el9_3.7, fixed in 0:2.34-100.el9_4.2.

Radar Score

4,8763860366

437 findings over 5 of 5 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
percona/percona-xtradb-cluster-operator	1.14.0	3728160	2,514
library/busybox	latest	0000	0
rustfs/rustfs	1.0.0-alpha.73	011736	729
valkey/valkey×3	8	00879	807
minio/mc	latest	00791	826

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

350 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2024:3339	glibc@2.34-83.el9_3.7	0:2.34-100.el9_4.2
Critical	RHSA-2026:1473	openssl@1:3.0.7-25.el9_3	1:3.5.1-7.el9_7
Critical	RHSA-2025:11992	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6
High	ALPINE-CVE-2025-15467	openssl@3.5.4-r0	3.5.5-r0
High	RHSA-2025:1346KEV	gcc@11.4.1-2.1.el9	0:11.5.0-5.el9_5
High	RHSA-2024:5529	curl@7.76.1-26.el9_3.2	0:7.76.1-29.el9_4.1
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.19.0	0.23.0
High	RHSA-2024:6783	openssl@1:3.0.7-25.el9_3	1:3.0.7-28.el9_4
High	RHSA-2024:3501	nghttp2@1.43.0-5.el9_3.1	0:1.43.0-5.el9_4.3
High	RHSA-2024:9333	openssl@1:3.0.7-25.el9_3	1:3.2.2-6.el9_5
High	RHSA-2024:9474	krb5@1.21.1-1.el9	0:1.21.1-4.el9_5
Medium	GO-2024-2687	stdlib@go1.21.7	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.17.0	0.52.0
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u3	no fix listed
Medium	RHSA-2026:25239	openssl@1:3.0.7-25.el9_3	1:3.5.5-4.el9_8
Medium	ALPINE-CVE-2026-45447	openssl@3.5.4-r0	3.5.7-r0
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u3	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.17.0	0.31.0
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u3	no fix listed
Medium	RHSA-2024:2447	openssl@1:3.0.7-25.el9_3	1:3.0.7-27.el9
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.71.0	1.79.3
Medium	RHSA-2025:10699	libxml2@2.9.13-5.el9_3	0:2.9.13-10.el9_6
Medium	ALPINE-CVE-2025-11187	openssl@3.5.4-r0	3.5.5-r0
Medium	RHSA-2025:1330	openssl@1:3.0.7-25.el9_3	1:3.2.2-6.el9_5.1
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u3	no fix listed
Medium	ALPINE-CVE-2026-63073	openssl@3.5.4-r0	3.5.8-r0
Medium	RHSA-2024:6166	krb5@1.21.1-1.el9	0:1.21.1-2.el9_4
Medium	RHSA-2026:20612	gnutls@3.7.6-23.el9_3.3	0:3.8.10-4.el9_8
Medium	RHSA-2025:0925	bzip2@1.0.8-8.el9	0:1.0.8-10.el9_5
Medium	RHSA-2025:2679	libxml2@2.9.13-5.el9_3	0:2.9.13-6.el9_5.2
Medium	ALPINE-CVE-2026-18798	openssl@3.5.4-r0	3.5.8-r0
Medium	RHSA-2024:2679	libxml2@2.9.13-5.el9_3	0:2.9.13-6.el9_4
Medium	ALPINE-CVE-2026-63076	openssl@3.5.4-r0	3.5.8-r0
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.32.0	1.33.0
Medium	RHSA-2026:8510	libarchive@3.5.3-4.el9	0:3.5.3-9.el9_7
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.17.0	0.52.0
Medium	ALPINE-CVE-2026-42764	openssl@3.5.4-r0	3.5.7-r0
Medium	RHSA-2024:9331	krb5@1.21.1-1.el9	0:1.21.1-3.el9
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u3	no fix listed
Medium	DEBIAN-CVE-2026-5450	glibc@2.41-12+deb13u3	2.41-12+deb13u4
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.17.0	0.52.0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.4-r0	3.5.7-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.17.0	0.52.0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.4-r0	3.5.7-r0
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	RHSA-2025:11140	glib2@2.68.4-11.el9	0:2.68.4-16.el9_6.2
Medium	RHBA-2024:5691	ca-certificates@2023.2.60_v7.0.306-90.1.el9_2	0:2024.2.69_v8.0.303-91.4.el9_4
Medium	ALPINE-CVE-2026-7383	openssl@3.5.4-r0	3.5.7-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.1.1latest	5 days ago	1.14.0	3860366	4,876
2.1.0	9 days ago	1.14.0	3860366	4,876

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/shopware-store/shopware.svg)](https://charts.stackradar.io/charts/shopware-store/shopware)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.