retail-store-sample-cart-chart 1.0.0 Helm chart

Name: retail-store-sample-cart-chart Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

stacksimplify

Scored 14 Sept 2026

Carts Microservice - Modified Helm chart for AWS EKS course (based on aws-containers/retail-store-sample-app)

Version 1.0.0 9 months agoapp version 1.3.0 0Artifact Hub

retail-store-sample-cart-chart 1.0.0 deploys 1 container image: public.ecr.aws/aws-containers/retail-store-sample-cart. Across them, 86 findings — 0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.44, fixed in 10.1.45.

Radar Score

1,068021668

86 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
public.ecr.aws/aws-containers/retail-store-sample-cart	1.3.0	021668	1,068

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

86 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.24.3	2.25.4
Low	GHSA-72hv-8253-57qq	jackson-core@2.19.2	2.21.1
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.124.Final	4.1.133.Final
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.124.Final	4.1.135.Final
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.124.Final	4.1.129.Final
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.19.2	2.21.4
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@6.2.10	6.2.17
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.124.Final	4.1.136.Final
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@6.2.10	6.2.19
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@6.2.10	6.2.19
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.124.Final	4.1.133.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.124.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.19.2	2.21.4
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.124.Final	4.1.136.Final
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@6.2.10	6.2.19
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.19.2	2.21.4
Low	GHSA-wxpp-56q6-5pcg	spring-expression@6.2.10	6.2.19
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.19.2	2.21.5
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@6.2.10	6.2.18
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@3.5.5	3.5.14
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.124.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.124.Final	4.1.133.Final
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.124.Final	4.1.135.Final
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.124.Final	4.1.135.Final
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.124.Final	4.1.135.Final
Low	GHSA-957g-f97v-vppc	spring-webmvc@6.2.10	6.2.19
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@6.2.10	6.2.19
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@10.1.44	10.1.55
Low	GHSA-659m-px2c-25wj	spring-core@6.2.10	6.2.19
Low	GHSA-ggg2-9786-hwc8	spring-boot-autoconfigure@3.5.5	3.5.15
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@6.2.10	6.2.19
Low	GHSA-7m2p-62gw-p8qq	spring-web@6.2.10	6.2.19
Low	GHSA-9f52-rjqv-25qv	spring-expression@6.2.10	6.2.19
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@6.2.10	6.2.18
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.124.Final	4.1.125.Final
Low	GHSA-6hcq-hmm3-jj3c	spring-webmvc@6.2.10	6.2.17

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	9 months ago	1.3.0	021668	1,068

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/stacksimplify/retail-store-sample-cart-chart.svg)](https://charts.stackradar.io/charts/stacksimplify/retail-store-sample-cart-chart)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.