geoserver 0.0.3 Helm chart

Name: geoserver Helm chart 0.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Version 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1152316	3,891
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434204340	10,801
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946251402	14,440
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046246394	14,334
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348253405	14,999
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548249395	14,936
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448249399	14,934
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-2827-2mxx-j8pv	spring-retry@1.2.5.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GHSA-jcwr-x25h-x5fh	plexus-utils@1.5.6	3.0.24
Low	GHSA-83f7-v6px-pp3h	spring-webflux@5.2.8.RELEASE	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.11.2	2.18.8
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25
Low	UBUNTU-CVE-2025-5372	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-fh7p-5f6g-vj2w	gs-restconfig@2.21-CLOUD	2.23.3
Low	GO-2024-3105	stdlib@go1.18.2	1.22.7
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.2.8.RELEASE	no fix listed
Low	GO-2022-1095	stdlib@go1.18.2	1.18.8
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GO-2023-1621	stdlib@go1.18.2	1.19.7
Low	GO-2026-4981	stdlib@go1.18.2	1.25.10
Low	DEBIAN-CVE-2023-31439	systemd@252.33-1~deb12u1	no fix listed
Low	GO-2025-3563	stdlib@go1.18.2	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.11.2	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.14	42.2.27
Low	GO-2026-4977	stdlib@go1.18.2	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GO-2024-2610	stdlib@go1.18.2	1.21.8
Low	DEBIAN-CVE-2023-31437	systemd@252.33-1~deb12u1	no fix listed
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-6p4f-wcwh-5vvm	spring-webflux@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-59848	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GO-2026-4986	stdlib@go1.18.2	1.25.10
Low	GO-2026-4918	stdlib@go1.18.2	1.25.10
Low	GO-2026-4337	stdlib@go1.18.2	1.24.13
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u9	2.36-9+deb12u14
Low	UBUNTU-CVE-2023-6004	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	DEBIAN-CVE-2023-31438	systemd@252.33-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-1757	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.3.4.RELEASE	no fix listed
Low	GHSA-9rfr-pf2x-g4xf	gs-ows@2.21-CLOUD	2.23.3
Low	GHSA-9rfr-pf2x-g4xf	gs-main@2.21-CLOUD	2.23.3
Low	GHSA-fcpm-hchj-mh72	gs-wms@2.21-CLOUD	2.23.3
Low	GHSA-fg9v-56hw-g525	gs-wms@2.21-CLOUD	2.23.4
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.3.3.RELEASE	no fix listed
Low	GO-2026-4601	stdlib@go1.18.2	1.25.8
Low	UBUNTU-CVE-2026-72522	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-22695	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm2
Low	UBUNTU-CVE-2026-56403	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-56404	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-56405	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.2.9-1build1	no fix listed
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.51.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.51.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-56406	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-56407	expat@2.2.9-1build1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,5042,651	88,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.