geoserver Helm chart

Name: geoserver Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1152316	3,891
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434204340	10,801
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946251402	14,440
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046246394	14,334
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348253405	14,999
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548249395	14,936
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448249399	14,934
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

279 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2024-4741	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23
Medium	UBUNTU-CVE-2022-28321	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.4
Medium	UBUNTU-CVE-2022-27405	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2
Medium	UBUNTU-CVE-2022-40674	expat@2.2.9-1build1	2.2.9-1ubuntu0.5
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.11.2	2.12.7.1
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.11.2	2.12.7.1
Medium	UBUNTU-CVE-2019-20838	pcre3@2:8.39-12build1	2:8.39-12ubuntu0.1
Medium	UBUNTU-CVE-2020-35527	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.37	9.0.118
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.26	1.31
Medium	UBUNTU-CVE-2022-27781	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.11
Medium	UBUNTU-CVE-2022-22576	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Medium	DEBIAN-CVE-2025-49796	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.37	9.0.83
Medium	GHSA-rwqr-m72q-v6cm	batik-bridge@1.14	1.16
Medium	DEBIAN-CVE-2024-56171	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	UBUNTU-CVE-2026-19931	curl@7.68.0-1ubuntu2.7	no fix listed
Medium	GHSA-6phf-6h5g-97j2	sqlite-jdbc@3.31.1	3.41.2.2
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.37	9.0.90
Medium	GHSA-g5h3-w546-pj7f	spring-boot-actuator-autoconfigure@2.3.3.RELEASE	2.5.15
Medium	UBUNTU-CVE-2022-27776	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Medium	GHSA-v7wg-cpwc-24m4	postgresql@42.2.14	42.2.25
Medium	UBUNTU-CVE-2022-43680	expat@2.2.9-1build1	2.2.9-1ubuntu0.6
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u9	no fix listed
Medium	GHSA-f256-j965-7f32	netty-codec-http2@4.1.51.Final	4.1.61.Final
Medium	DEBIAN-CVE-2026-42010	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2021-33560	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Medium	UBUNTU-CVE-2023-3446	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.20
Medium	DEBIAN-CVE-2024-34459	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	GHSA-5gw5-jccf-6hxw	gs-wfs@2.21-CLOUD	2.24.4
Medium	UBUNTU-CVE-2016-20013	glibc@2.31-0ubuntu9.2	no fix listed
Medium	GHSA-f8cc-g7j8-xxpm	xstream@1.4.11.1	1.4.20
Medium	UBUNTU-CVE-2023-31486	perl@5.30.0-9ubuntu0.2	no fix listed
Medium	UBUNTU-CVE-2022-25313	expat@2.2.9-1build1	2.2.9-1ubuntu0.4
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.37	9.0.106
Medium	UBUNTU-CVE-2018-5709	krb5@1.17-6ubuntu4.1	no fix listed
Medium	GHSA-rqph-vqwm-22vc	spring-messaging@5.2.8.RELEASE	5.2.22.RELEASE
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.37	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.37	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.37	9.0.118
Medium	UBUNTU-CVE-2024-28757	expat@2.2.9-1build1	no fix listed
Medium	GHSA-hfq9-hggm-c56q	xstream@1.4.11.1	1.4.21
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.37	9.0.107
Medium	GHSA-hh26-6xwr-ggv7	spring-beans@5.2.8.RELEASE	5.2.22.RELEASE
Medium	UBUNTU-CVE-2016-10228	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Medium	UBUNTU-CVE-2023-31484	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.4
Medium	UBUNTU-CVE-2023-2953	openldap@2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.10
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.37	9.0.107
Medium	GHSA-vp98-w2p3-mv35	log4j@1.2.17	2.0
Medium	UBUNTU-CVE-2022-2509	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,5042,651	88,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.