geoserver 0.0.3 Helm chart

Name: geoserver Helm chart 0.0.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Version 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1152316	3,891
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434204340	10,801
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946251402	14,440
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046246394	14,334
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348253405	14,999
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548249395	14,936
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448249399	14,934
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	UBUNTU-CVE-2024-2398	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.22
High	GHSA-jj54-8f66-c5pc	gs-wfs@2.21-CLOUD	2.25.7
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.3
High	UBUNTU-CVE-2021-23840	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.fips.7.2
High	UBUNTU-CVE-2023-2650	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.19
High	GHSA-hfrx-6qgj-fp6c	commons-fileupload@1.4	1.5
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.37	9.0.71
High	GHSA-4cch-wxpw-8p28	xstream@1.4.11.1	1.4.15
High	UBUNTU-CVE-2021-3712	openssl@1.1.1f-1ubuntu2.8	no fix listed
High	UBUNTU-CVE-2023-48795	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4
High	GHSA-4hrm-m67v-5cxr	xstream@1.4.11.1	1.4.16
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.5
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.37	9.0.81
High	GHSA-hwpc-8xqv-jvj4	xstream@1.4.11.1	1.4.16
High	GHSA-hrcp-8f3q-4w2c	xstream@1.4.11.1	1.4.16
High	UBUNTU-CVE-2021-3449	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.fips.7
High	UBUNTU-CVE-2024-28182	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3
High	GHSA-hh32-7344-cg2f	spring-security-web@5.3.4.RELEASE	5.4.11
High	GHSA-hh32-7344-cg2f	spring-security-core@5.3.4.RELEASE	5.4.11
High	GHSA-59jw-jqf4-3wq3	xstream@1.4.11.1	1.4.16
High	UBUNTU-CVE-2024-2511	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23
High	UBUNTU-CVE-2024-3596	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.8
High	GHSA-f6hm-88x3-mfjv	xstream@1.4.11.1	1.4.16
High	GHSA-558x-2xjg-6232	spring-expression@5.2.8.RELEASE	5.2.20.RELEASE
High	GHSA-g5w6-mrj7-75h2	xstream@1.4.11.1	1.4.18
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.37	9.0.86
High	UBUNTU-CVE-2022-35737	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.5
High	UBUNTU-CVE-2022-32206	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.12
High	GHSA-p8pq-r894-fm8f	xstream@1.4.11.1	1.4.18
High	UBUNTU-CVE-2022-4450	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.17
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@9.0.37	9.0.43
High	GHSA-6hgm-866r-3cjv	commons-collections@3.2.1	3.2.2
High	GHSA-hvv8-336g-rx3m	xstream@1.4.11.1	1.4.16
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.37	9.0.98
High	GHSA-xw4p-crpj-vjx2	xstream@1.4.11.1	1.4.18
High	GHSA-74cv-f58x-f9wf	xstream@1.4.11.1	1.4.16
Medium	GHSA-8vhq-qq4p-grq3	plexus-utils@1.5.6	3.0.16
Medium	GO-2024-2687	stdlib@go1.18.2	1.21.9
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.6	2.8.9
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@5.3.0	5.4.0
Medium	GHSA-j563-grx4-pjpv	xstream@1.4.11.1	1.4.20
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.2.14	42.2.28
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@9.0.37	9.0.40
Medium	UBUNTU-CVE-2022-25235	expat@2.2.9-1build1	2.2.9-1ubuntu0.2
Medium	UBUNTU-CVE-2022-22822	expat@2.2.9-1build1	2.2.9-1ubuntu0.2
Medium	UBUNTU-CVE-2022-25315	expat@2.2.9-1build1	2.2.9-1ubuntu0.4
Medium	UBUNTU-CVE-2022-23218	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Medium	UBUNTU-CVE-2022-42898	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3
Medium	UBUNTU-CVE-2022-42898	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.2
Medium	UBUNTU-CVE-2021-36222	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,5042,651	88,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.