geoserver Helm chart

Name: geoserver Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 13 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-webflux 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

87,8851762711,4862,669

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1151317	3,878
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434202342	10,739
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946248405	14,366
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046243397	14,260
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348250408	14,925
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548246398	14,856
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448246402	14,861
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-webflux@2.3.3.RELEASE	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.2.8.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webflux@5.2.8.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.2.8.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.3.3.RELEASE	2.5.12
Critical	GHSA-6jj6-gm7p-fcvvKEV	gs-wfs@2.21-CLOUD	2.22.6
Critical	GHSA-6jj6-gm7p-fcvvKEV	gs-wms@2.21-CLOUD	2.22.6
Critical	GHSA-6v73-fgf6-w5j7KEV	spring-cloud-function-context@3.0.10.RELEASE	3.1.7
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.37	9.0.99
Critical	GHSA-v92f-jx6p-73rxKEV	jt-jiffle-language@1.1.21	1.1.22
Critical	GHSA-599f-7c49-w659	commons-text@1.6	1.10.0
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.15
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.fips.7.2
Critical	GHSA-7g5f-wrx8-5ccf	gs-jdbcconfig@2.21-CLOUD	2.21.4
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.13
Critical	GHSA-w3pj-wh35-fq8w	gt-xsd-core@27-SNAPSHOT	28.6
Critical	GHSA-w3pj-wh35-fq8w	gt-complex@27-SNAPSHOT	28.6
Critical	GHSA-fjq5-5j5f-mvxh	commons-collections@3.2.1	3.2.2
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	GHSA-j9h8-phrw-h4fhKEV	xstream@1.4.11.1	1.4.18
Critical	GHSA-45hx-wfhj-473x	h2@1.4.200	2.1.210
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.9
Critical	GHSA-h376-j262-vhq6	h2@1.4.200	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.26	2.0
Critical	GHSA-fjf5-xgmq-5525KEV	gs-wms@2.21-CLOUD	2.25.6
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.4
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	GHSA-vv7r-c36w-3prj	commons-fileupload@1.4	1.6.0
Critical	GHSA-mw36-7c6c-q4q2	xstream@1.4.11.1	1.4.14-java7
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	GHSA-5pr3-m5hm-9956	gs-wps-core@2.21-CLOUD	2.22.5
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.37	9.0.98
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
Critical	UBUNTU-CVE-2024-2961	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.15
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	GHSA-9339-86wc-4qgf	xalan@2.7.2	2.7.3
High	UBUNTU-CVE-2022-25236	expat@2.2.9-1build1	2.2.9-1ubuntu0.2
High	DEBIAN-CVE-2025-15467	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
High	GHSA-2p3x-qw9c-25hh	xstream@1.4.11.1	1.4.16
High	GHSA-7chv-rrw6-w6fc	xstream@1.4.11.1	1.4.17
High	UBUNTU-CVE-2022-0778	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.12
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.2.8.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.37	9.0.109
High	GHSA-jfvx-7wrx-43fh	xstream@1.4.11.1	1.4.15
High	GHSA-jj54-8f66-c5pc	gs-wfs@2.21-CLOUD	2.25.7
High	UBUNTU-CVE-2023-0286	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.17
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.37	9.0.106
High	GHSA-g5vr-rgqm-vf78	spring-webflux@5.2.8.RELEASE	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,4862,669	87,885

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.