StackRadar

geoserver Helm chart

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images
ImageTagVulnerabilitiesRadar Score
library/postgres1211523163,891
geoservercloud/geoserver-cloud-config1.0-RC2—unmeasured
geoservercloud/geoserver-cloud-discovery1.0-RC2—unmeasured
geoservercloud/geoserver-cloud-gateway1.0-RC2143420434010,801
geoservercloud/geoserver-cloud-rest1.0-RC2294625140214,440
geoservercloud/geoserver-cloud-wcs1.0-RC2304624639414,334
geoservercloud/geoserver-cloud-webui1.0-RC2334825340514,999
geoservercloud/geoserver-cloud-wfs1.0-RC2354824939514,936
geoservercloud/geoserver-cloud-wms1.0-RC2344824939914,934
bitnami/bitnami-shell10-debian-10-r248—unmeasured
bitnami/postgresql11.14.0-debian-10-r0—unmeasured
bitnami/rabbitmq3.8.9-debian-10-r37—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

279 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2023-36054krb5@1.17-6ubuntu4.11.17-6ubuntu4.4
MediumUBUNTU-CVE-2023-52425expat@2.2.9-1build1no fix listed
MediumUBUNTU-CVE-2022-34903gnupg2@2.2.19-3ubuntu2.12.2.19-3ubuntu2.2
MediumGHSA-r38f-c4h4-hqq2postgresql@42.2.1442.2.26
MediumDEBIAN-CVE-2018-6829libgcrypt20@1.10.1-3no fix listed
MediumGHSA-w9fj-cfpg-grvvnetty-codec-http2@4.1.51.Final4.1.132.Final
MediumGHSA-wx5j-54mm-rqqqnetty-codec-http@4.1.51.Final4.1.71.Final
MediumGHSA-h2fw-rfh5-95r3tomcat-embed-core@9.0.379.0.105
MediumUBUNTU-CVE-2011-10043perl@5.30.0-9ubuntu0.2no fix listed
MediumGHSA-9xv2-5v5q-p794tomcat-embed-core@9.0.379.0.121
MediumUBUNTU-CVE-2019-25013glibc@2.31-0ubuntu9.22.31-0ubuntu9.7
MediumDEBIAN-CVE-2025-32988gnutls28@3.7.9-2+deb12u33.7.9-2+deb12u5
MediumGHSA-9v5q-2gwq-q9hqgs-platform@2.21-CLOUD2.23.4
MediumGHSA-9v5q-2gwq-q9hqgs-restconfig@2.21-CLOUD2.23.4
MediumUBUNTU-CVE-2022-2097openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.16
MediumUBUNTU-CVE-2024-33599glibc@2.31-0ubuntu9.22.31-0ubuntu9.16
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.261.32
MediumGHSA-x27m-9w8j-5vcwjettison@1.3.71.5.2
MediumUBUNTU-CVE-2026-4176perl@5.30.0-9ubuntu0.2no fix listed
MediumUBUNTU-CVE-2024-0553gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.10
MediumUBUNTU-CVE-2026-18924curl@7.68.0-1ubuntu2.7no fix listed
MediumGHSA-6mjq-h674-j845netty-handler@4.1.51.Final4.1.94.Final
MediumUBUNTU-CVE-2023-5678openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.21
MediumUBUNTU-CVE-2022-1304e2fsprogs@1.45.5-2ubuntu11.45.5-2ubuntu1.1
MediumUBUNTU-CVE-2025-9230openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm1
MediumGHSA-p22x-g9px-3945tomcat-embed-core@9.0.379.0.68
MediumGHSA-pvp8-3xj6-8c6xcommons-configuration@1.10no fix listed
MediumUBUNTU-CVE-2026-11856curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.25+esm6
MediumUBUNTU-CVE-2017-20230perl@5.30.0-9ubuntu0.2no fix listed
MediumGHSA-2wrp-6fg6-hmc5spring-web@5.2.8.RELEASE5.3.34
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.103.18.0
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumUBUNTU-CVE-2020-14155pcre3@2:8.39-12build12:8.39-12ubuntu0.1
MediumDEBIAN-CVE-2026-33845gnutls28@3.7.9-2+deb12u33.7.9-2+deb12u7
MediumUBUNTU-CVE-2021-3671heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.1
MediumUBUNTU-CVE-2021-37750krb5@1.17-6ubuntu4.11.17-6ubuntu4.3
MediumGHSA-7rf3-mqpx-h7xgjettison@1.3.71.5.2
MediumGHSA-grr4-wv38-f68wjettison@1.3.71.5.2
MediumDEBIAN-CVE-2011-3389gnutls28@3.7.9-2+deb12u3no fix listed
MediumDEBIAN-CVE-2025-49794libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u3
MediumDEBIAN-CVE-2024-25062libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
MediumGHSA-9q4x-fr4m-jp86commons-vfs2@2.02.10.0
MediumGHSA-v682-8vv8-vpwrtomcat-embed-websocket@9.0.379.0.86
MediumDEBIAN-CVE-2025-6021libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u3
MediumUBUNTU-CVE-2023-0361gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.8
MediumGHSA-g6ph-x5wf-g337plexus-utils@1.5.63.0.24
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.261.31
MediumUBUNTU-CVE-2026-42009gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm2
MediumDEBIAN-CVE-2026-63076openssl@3.0.15-1~deb12u1no fix listed
MediumGHSA-78wr-2p64-hpwjcommons-io@2.10.02.14.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.3latest4 years ago1.0-RC21762711,5042,65188,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.