geoserver Helm chart

Name: geoserver Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	1152316	3,891
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1434204340	10,801
geoservercloud/geoserver-cloud-rest	1.0-RC2	2946251402	14,440
geoservercloud/geoserver-cloud-wcs	1.0-RC2	3046246394	14,334
geoservercloud/geoserver-cloud-webui	1.0-RC2	3348253405	14,999
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3548249395	14,936
geoservercloud/geoserver-cloud-wms	1.0-RC2	3448249399	14,934
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42766	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
Low	DEBIAN-CVE-2026-74860	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	GHSA-gr67-pwcv-76gf	gs-wps-core@2.21-CLOUD	2.25.7
Low	GHSA-gr67-pwcv-76gf	gs-wms@2.21-CLOUD	2.25.7
Low	UBUNTU-CVE-2024-50602	expat@2.2.9-1build1	2.2.9-1ubuntu0.8
Low	UBUNTU-CVE-2023-6918	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	GO-2022-0969	stdlib@go1.18.2	1.18.6
Low	UBUNTU-CVE-2025-6020	pam@1.3.1-5ubuntu4.2	no fix listed
Low	UBUNTU-CVE-2023-27538	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	UBUNTU-CVE-2023-7104	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.6
Low	DEBIAN-CVE-2023-39615	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2022-45142	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4
Low	UBUNTU-CVE-2026-86145	pcre2@10.34-7	no fix listed
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.51.Final	4.1.108.Final
Low	DEBIAN-CVE-2024-31852	llvm-toolchain-16@1:16.0.6-15~deb12u1	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.13.3	2.25.5
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.64	1.66
Low	UBUNTU-CVE-2024-8096	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24
Low	GHSA-mgvc-8q2h-5pgc	spring-boot-starter-actuator@2.3.3.RELEASE	no fix listed
Low	UBUNTU-CVE-2023-47039	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.51.Final	4.1.125.Final
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@9.0.37	9.0.118
Low	UBUNTU-CVE-2025-15281	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1
Low	UBUNTU-CVE-2025-6297	dpkg@1.19.7ubuntu3	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.51.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-42011	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.51.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-12243	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12
Low	DEBIAN-CVE-2025-32989	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	UBUNTU-CVE-2022-41916	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2
Low	UBUNTU-CVE-2026-9538	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.37	9.0.117
Low	GHSA-gfwj-fwqj-fp3v	spring-web@5.2.8.RELEASE	5.2.15
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.51.Final	4.1.136.Final
Low	DEBIAN-CVE-2020-15719	openldap@2.5.13+dfsg-5	no fix listed
Low	UBUNTU-CVE-2025-6395	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm1
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.51.Final	4.1.136.Final
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.64	1.78
Low	DEBIAN-CVE-2026-0990	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	UBUNTU-CVE-2025-24528	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GHSA-jjfh-589g-3hjx	spring-boot-actuator@2.3.3.RELEASE	2.7.18
Low	DEBIAN-CVE-2025-7458	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.51.Final	4.1.136.Final
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.37	9.0.113
Low	GO-2023-2185	stdlib@go1.18.2	1.20.11
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-2219	dpkg@1.21.22	1.21.23
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9ubuntu0.2	no fix listed
Low	DEBIAN-CVE-2025-24928	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1762711,5042,651	88,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.