retail-store-sample-cart-chart Helm chart

Name: retail-store-sample-cart-chart Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

stacksimplify

Scored 14 Sept 2026

Carts Microservice - Modified Helm chart for AWS EKS course (based on aws-containers/retail-store-sample-app)

Latest 1.0.0 9 months agoapp version 1.3.0 0Artifact Hub

retail-store-sample-cart-chart 1.0.0 deploys 1 container image: public.ecr.aws/aws-containers/retail-store-sample-cart. Across them, 86 findings — 0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.44, fixed in 10.1.45.

Radar Score

1,068021668

86 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
public.ecr.aws/aws-containers/retail-store-sample-cart	1.3.0	021668	1,068

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

86 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@10.1.44	10.1.45
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@10.1.44	10.1.45
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@10.1.44	10.1.55
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@10.1.44	10.1.55
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@10.1.44	10.1.55
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.124.Final	4.1.132.Final
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@10.1.44	10.1.58
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.17.0	3.18.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.124.Final	4.1.135.Final
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@10.1.44	10.1.58
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.19.2	2.21.4
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.19.2	2.21.4
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@10.1.44	10.1.58
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.124.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.124.Final	4.1.133.Final
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.124.Final	4.1.136.Final
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.124.Final	4.1.135.Final
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@10.1.44	10.1.55
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.15.3	1.15.12
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.24.3	2.25.4
Low	GHSA-445c-vh5m-36rj	log4j-core@2.24.3	2.25.4
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.124.Final	4.1.133.Final
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.124.Final	4.1.132.Final
Low	GHSA-w737-wx49-qj23	micrometer-core@1.15.3	1.15.12
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.124.Final	4.1.137.Final
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@10.1.44	10.1.55
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@10.1.44	10.1.52
Low	GHSA-mgp5-rv84-w37q	tomcat-embed-core@10.1.44	10.1.52
Low	GHSA-qv9r-c865-cp47	log4j-api@2.24.3	2.25.5
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.124.Final	4.1.125.Final
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@10.1.44	10.1.55
Low	GHSA-jmp9-x22r-554x	spring-core@6.2.10	6.2.11
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.124.Final	4.1.133.Final
Low	GHSA-rv64-5gf8-9qq8	tomcat-embed-core@10.1.44	10.1.54
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.124.Final	4.1.135.Final
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.24.3	2.25.3
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@10.1.44	10.1.54
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.124.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.124.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.124.Final	4.1.136.Final
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@10.1.44	10.1.50
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@10.1.44	10.1.47
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.124.Final	4.1.136.Final
Low	GHSA-x23c-287f-qqv5	spring-webmvc@6.2.10	6.2.19
Low	GHSA-r5w3-xv2f-j59q	spring-expression@6.2.10	6.2.19
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.124.Final	4.1.133.Final
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@10.1.44	10.1.53
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.124.Final	4.1.137.Final
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.124.Final	4.1.136.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.124.Final	4.1.136.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	9 months ago	1.3.0	021668	1,068

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/stacksimplify/retail-store-sample-cart-chart.svg)](https://charts.stackradar.io/charts/stacksimplify/retail-store-sample-cart-chart)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.