geoserver 0.0.3 Helm chart

Name: geoserver Helm chart 0.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Version 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1152316	3,891
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434204340	10,801
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946251402	14,440
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046246394	14,334
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348253405	14,999
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548249395	14,936
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448249399	14,934
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-63074	openssl@3.0.15-1~deb12u1	no fix listed
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.51.Final	4.1.133.Final
Low	GO-2023-1752	stdlib@go1.18.2	1.19.9
Low	UBUNTU-CVE-2025-14524	curl@7.68.0-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2022-35252	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.2	no fix listed
Low	GHSA-826p-4gcg-35vw	gt-wfs-ng@27-SNAPSHOT	28.6.1
Low	GO-2023-1705	stdlib@go1.18.2	1.19.8
Low	GHSA-5843-p793-ghmm	spring-webflux@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2021-20223	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4
Low	UBUNTU-CVE-2026-3731	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-qx7j-jv8m-fppr	amqp-client@5.9.0	5.31.0
Low	GO-2023-1878	stdlib@go1.18.2	1.19.11
Low	UBUNTU-CVE-2025-65018	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm1
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	UBUNTU-CVE-2026-5435	glibc@2.31-0ubuntu9.2	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.2.8.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.2.8.RELEASE	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.51.Final	4.1.135.Final
Low	GO-2022-1039	stdlib@go1.18.2	1.18.7
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	GO-2024-2963	stdlib@go1.18.2	1.21.12
Low	GO-2023-1702	stdlib@go1.18.2	1.19.8
Low	UBUNTU-CVE-2026-7017	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.51.Final	4.1.129.Final
Low	GO-2022-0525	stdlib@go1.18.2	1.17.12
Low	GO-2022-0520	stdlib@go1.18.2	1.17.12
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	UBUNTU-CVE-2025-0395	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.17
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	UBUNTU-CVE-2023-4039	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.24+esm1
Low	UBUNTU-CVE-2024-28085	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.6
Low	GO-2023-2375	stdlib@go1.18.2	1.20.0
Low	UBUNTU-CVE-2025-15079	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm2
Low	GO-2023-1569	stdlib@go1.18.2	1.19.6
Low	DSA-5979-1	libxslt@1.1.35-1	1.1.35-1+deb12u2
Low	GO-2023-2382	stdlib@go1.18.2	1.20.12
Low	UBUNTU-CVE-2026-6429	curl@7.68.0-1ubuntu2.7	no fix listed
Low	GO-2022-1143	stdlib@go1.18.2	1.18.9
Low	GHSA-cqpc-x2c6-2gmf	gs-wms@2.21-CLOUD	2.22.5
Low	UBUNTU-CVE-2024-22365	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.51.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-72pg-x5f8-j25j	spring-webflux@5.2.8.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-2474-2566-3qxp	batik-script@1.14	1.17

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,5042,651	88,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.