geoserver 0.0.3 Helm chart

Name: geoserver Helm chart 0.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Version 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1152316	3,891
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434204340	10,801
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946251402	14,440
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046246394	14,334
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348253405	14,999
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548249395	14,936
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448249399	14,934
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-19542	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-53613	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	UBUNTU-CVE-2026-53615	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	UBUNTU-CVE-2026-77117	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-80489	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2021-36085	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2021-36087	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2025-68160	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-659m-px2c-25wj	spring-core@5.2.8.RELEASE	no fix listed
Low	GHSA-4hfh-6x8g-gwpp	spring-webflux@5.2.8.RELEASE	no fix listed
Low	GO-2026-4403	stdlib@go1.18.2	1.23.9
Low	UBUNTU-CVE-2026-59845	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-1ubuntu5.20.04.1	no fix listed
Low	GO-2026-4970	stdlib@go1.18.2	1.25.12
Low	GHSA-p5f7-rjhp-pxvc	spring-amqp@2.2.10.RELEASE	no fix listed
Low	UBUNTU-CVE-2025-15224	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm2
Low	DEBIAN-CVE-2026-22185	openldap@2.5.13+dfsg-5	no fix listed
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-2	1.0.8-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-32777	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-39113	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-9820	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-0968	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GO-2026-4602	stdlib@go1.18.2	1.25.8
Low	UBUNTU-CVE-2026-76957	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-27456	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-18508	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-8277	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-0992	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	UBUNTU-CVE-2026-45186	expat@2.2.9-1build1	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webflux@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.19-3ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-32776	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-41080	expat@2.2.9-1build1	no fix listed
Low	DEBIAN-CVE-2011-3374	apt@2.6.1	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.2.8.RELEASE	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.51.Final	4.1.135.Final
Low	UBUNTU-CVE-2025-4878	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm1
Low	GHSA-p8qj-fj6r-w7q9	spring-amqp@2.2.10.RELEASE	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1	no fix listed
Low	UBUNTU-CVE-2025-69418	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+b1	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.13.0	0.44.0
Low	UBUNTU-CVE-2026-59846	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webflux@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,5042,651	88,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.