geoserver 0.0.3 Helm chart

Name: geoserver Helm chart 0.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Version 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1152316	3,891
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434204340	10,801
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946251402	14,440
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046246394	14,334
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348253405	14,999
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548249395	14,936
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448249399	14,934
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-6g32-pxv4-2wfj	amqp-client@5.9.0	5.33.0
Low	GHSA-x4r9-gmw3-hxww	gs-main@2.21-CLOUD	2.26.4
Low	DEBIAN-CVE-2021-45346	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.5.2-6+deb12u1	no fix listed
Low	DSA-6015-1	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
Low	DEBIAN-CVE-2025-70873	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	GHSA-2rmj-mq67-h97g	spring-web@5.2.8.RELEASE	5.3.38
Low	UBUNTU-CVE-2025-66293	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm2
Low	UBUNTU-CVE-2026-42012	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	DEBIAN-CVE-2022-49043	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	GO-2022-0523	stdlib@go1.18.2	1.17.12
Low	UBUNTU-CVE-2026-57432	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GO-2024-2887	stdlib@go1.18.2	1.21.11
Low	GHSA-mm8h-8587-p46h	amqp-client@5.9.0	5.18.0
Low	GO-2022-0522	stdlib@go1.18.2	1.17.12
Low	GO-2022-0527	stdlib@go1.18.2	1.17.12
Low	GO-2022-0524	stdlib@go1.18.2	1.17.12
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.51.Final	4.1.133.Final
Low	UBUNTU-CVE-2024-26458	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GO-2023-1704	stdlib@go1.18.2	1.19.8
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.37	9.0.116
Low	UBUNTU-CVE-2016-2781	coreutils@8.30-3ubuntu2	no fix listed
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.51.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.64	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.64	no fix listed
Low	DEBIAN-CVE-2026-42767	openssl@3.0.15-1~deb12u1	no fix listed
Low	UBUNTU-CVE-2026-5545	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9ubuntu0.2	no fix listed
Low	DEBIAN-CVE-2025-7709	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-3784	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2023-28322	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.19
Low	GHSA-775g-4xr8-78h8	spring-expression@5.2.8.RELEASE	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.51.Final	4.1.136.Final
Low	GO-2022-0526	stdlib@go1.18.2	1.17.12
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.2.8.RELEASE	5.2.18
Low	UBUNTU-CVE-2026-42015	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u3	no fix listed
Low	UBUNTU-CVE-2024-28834	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.11
Low	DEBIAN-CVE-2026-11822	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-11824	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	GO-2023-1568	stdlib@go1.18.2	1.19.6
Low	GO-2022-1037	stdlib@go1.18.2	1.18.7
Low	GHSA-6pfc-w86r-54q6	gs-web-core@2.21-CLOUD	2.25.1
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.1.5.Final	6.2.0.Final
Low	UBUNTU-CVE-2021-3996	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	UBUNTU-CVE-2021-3995	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.51.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-40909	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GO-2023-1987	stdlib@go1.18.2	1.19.12

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,5042,651	88,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.