StackRadar

retail-store-sample-orders-chart 2.0.0 Helm chart

stacksimplifyVerified publisher

Scored 14 Sept 2026

Orders Microservice - Modified Helm chart for AWS EKS course (based on aws-containers/retail-store-sample-app)

Version 2.0.0 9 months agoapp version 1.3.0 0Artifact Hub

retail-store-sample-orders-chart 2.0.0 deploys 1 container image: public.ecr.aws/aws-containers/retail-store-sample-orders. Across them, 102 findings0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.44, fixed in 10.1.45.

Radar Score

1,223021782

102 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
public.ecr.aws/aws-containers/retail-store-sample-orders1.3.00217821,223

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

102 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@10.1.4410.1.45
HighGHSA-vfww-5hm6-hx2jtomcat-embed-core@10.1.4410.1.45
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@10.1.4410.1.55
MediumGHSA-98qh-xjc8-98pqpostgresql@42.7.742.7.11
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@10.1.4410.1.55
MediumGHSA-5m62-pw8w-7w9ftomcat-embed-core@10.1.4410.1.55
MediumGHSA-w9fj-cfpg-grvvnetty-codec-http2@4.1.124.Final4.1.132.Final
MediumGHSA-9xv2-5v5q-p794tomcat-embed-core@10.1.4410.1.58
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.17.03.18.0
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.124.Final4.1.135.Final
MediumGHSA-h3x4-894j-xpx5tomcat-embed-core@10.1.4410.1.58
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.19.22.21.4
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.19.22.21.4
MediumGHSA-gcx9-497g-6cp6tomcat-embed-core@10.1.4410.1.58
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.124.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http2@4.1.124.Final4.1.133.Final
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.124.Final4.1.136.Final
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.124.Final4.1.135.Final
MediumGHSA-gx5v-xp9w-j4cgtomcat-embed-core@10.1.4410.1.55
LowGHSA-g3pr-3p32-fp23micrometer-core@1.15.31.15.12
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.24.32.25.4
LowGHSA-445c-vh5m-36rjlog4j-core@2.24.32.25.4
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.1.124.Final4.1.133.Final
LowGHSA-68mj-5wr7-6fggamqp-client@5.25.05.33.1
LowGHSA-pwqr-wmgm-9rr8netty-codec-http@4.1.124.Final4.1.132.Final
LowGHSA-w737-wx49-qj23micrometer-core@1.15.31.15.12
LowGHSA-93j5-89vc-pph4amqp-client@5.25.05.33.1
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.124.Final4.1.137.Final
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.4410.1.55
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.4410.1.52
LowGHSA-mgp5-rv84-w37qtomcat-embed-core@10.1.4410.1.52
LowGHSA-qv9r-c865-cp47log4j-api@2.24.32.25.5
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.124.Final4.1.125.Final
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@10.1.4410.1.55
LowGHSA-jmp9-x22r-554xspring-core@6.2.106.2.11
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.124.Final4.1.133.Final
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@10.1.4410.1.54
LowGHSA-c653-97m9-rcg9netty-handler@4.1.124.Final4.1.135.Final
LowGHSA-vc5p-v9hr-52mjlog4j-core@2.24.32.25.3
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.4410.1.54
LowGHSA-93wv-jw9v-4972netty-codec-http2@4.1.124.Final4.1.136.Final
LowGHSA-6jqx-86gh-f27wnetty-codec-http@4.1.124.Final4.1.136.Final
LowGHSA-mvh2-crg5-v77cnetty-codec-http@4.1.124.Final4.1.136.Final
LowGHSA-fpj8-gq4v-p354tomcat-embed-core@10.1.4410.1.50
LowGHSA-hgrr-935x-pq79tomcat-embed-core@10.1.4410.1.47
LowGHSA-558v-64gr-wgg4netty-codec@4.1.124.Final4.1.136.Final
LowGHSA-x23c-287f-qqv5spring-webmvc@6.2.106.2.19
LowGHSA-88fw-v6x4-3f58spring-data-commons@3.5.33.5.12
LowGHSA-9fw2-h3hf-293rspring-data-commons@3.5.33.5.12
LowGHSA-r5w3-xv2f-j59qspring-expression@6.2.106.2.19

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.0.0latest9 months ago1.3.00217821,223

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/stacksimplify/retail-store-sample-orders-chart.svg)](https://charts.stackradar.io/charts/stacksimplify/retail-store-sample-orders-chart)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.