shopware Helm chart
shopware-storeVerified publisherScored 14 Sept 2026
A Helm chart for deploying a Shopware shop on Kubernetes. Requires the Shopware Operator chart to be installed.
Latest 2.1.1 6 days agodeploys tag 1.14.0 0Artifact Hub
shopware 2.1.1 deploys 5 container images: percona/percona-xtradb-cluster-operator, library/busybox, rustfs/rustfs, valkey/valkey and 1 more. Across them, 437 findings — 3 critical, 8 high — 1 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-83.el9_3.7, fixed in 0:2.34-100.el9_4.2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| percona/ | 1.14.0 | 3728160 | 2,514 |
| library/ | latest | 0000 | 0 |
| rustfs/ | 1.0.0-alpha.73 | 011736 | 729 |
| valkey/ | 8 | 00879 | 807 |
| minio/ | latest | 00791 | 826 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-5970 | golang.org/ | 0.39.0 |
| Low | DEBIAN-CVE-2026-56391 | coreutils | no fix listed |
| Low | ALPINE-CVE-2026-42768 | openssl | 3.5.7-r0 |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | GO-2024-2888 | stdlib | 1.21.11 |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | ALPINE-CVE-2026-6042 | musl | 1.2.5-r11 |
| Low | GO-2025-3503 | stdlib | 1.23.7 |
| Low | GO-2026-6107 | go.etcd.io/ | 3.5.33 |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2025-5278 | coreutils | no fix listed |
| Low | RHSA-2026:28911 | coreutils | 0:8.32-41.el9_8 |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | ALPINE-CVE-2026-22795 | openssl | 3.5.5-r0 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | ALPINE-CVE-2026-42770 | openssl | 3.5.7-r0 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | RHSA-2025:9431 | libarchive | 0:3.5.3-5.el9_6 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | GO-2025-3849 | stdlib | 1.23.12 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | DEBIAN-CVE-2025-15649 | perl | 5.40.1-6+deb13u1 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | DEBIAN-CVE-2010-4756 | glibc | no fix listed |
| Low | GO-2026-6303 | golang.org/ | 0.55.0 |
| Low | DEBIAN-CVE-2025-6141 | ncurses | no fix listed |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | GO-2026-4982 | stdlib | 1.25.10 |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2026-15059 | systemd | no fix listed |
| Low | DEBIAN-CVE-2024-56433 | shadow | no fix listed |
| Low | DEBIAN-CVE-2026-41991 | gzip | 1.13-1+deb13u1 |
| Low | DEBIAN-CVE-2026-89157 | pcre2 | 10.46-1~deb13u2 |
| Low | GO-2025-3750 | stdlib | 1.23.10 |
| Low | GO-2026-4864 | stdlib | 1.25.9 |
| Low | GO-2025-3447 | stdlib | 1.22.12 |
| Low | GO-2026-4865 | stdlib | 1.25.9 |
| Low | GO-2026-4869 | stdlib | 1.25.9 |
| Low | GO-2026-4340 | stdlib | 1.24.12 |
| Low | GO-2025-4175 | stdlib | 1.24.11 |
| Low | DEBIAN-CVE-2026-89092 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-18374 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-16742 | systemd | no fix listed |
| Low | ALPINE-CVE-2025-68160 | openssl | 3.5.5-r0 |
| Low | GO-2026-4403 | stdlib | 1.23.9 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.1.1latest | 6 days ago | 1.14.0 | 3860366 | 4,876 |
| 2.1.0 | 10 days ago | 1.14.0 | 3860366 | 4,876 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.