geoserver Helm chart

Name: geoserver Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 15 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,648 findings — 169 critical, 278 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

88,3771692781,4962,700

4,648 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	0244323	3,699
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1335204347	10,840
geoservercloud/geoserver-cloud-rest	1.0-RC2	2847251409	14,479
geoservercloud/geoserver-cloud-wcs	1.0-RC2	2947246401	14,373
geoservercloud/geoserver-cloud-webui	1.0-RC2	3249253412	15,038
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3449249402	14,975
geoservercloud/geoserver-cloud-wms	1.0-RC2	3349249406	14,973
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

981 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-14104	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	UBUNTU-CVE-2025-64505	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm1
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.51.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-86142	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	UBUNTU-CVE-2026-42014	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GO-2025-3420	stdlib@go1.18.2	1.22.11
Low	GO-2026-4342	stdlib@go1.18.2	1.24.12
Low	DEBIAN-CVE-2026-4105	systemd@252.33-1~deb12u1	252.39-1~deb12u2
Low	GO-2024-2598	stdlib@go1.18.2	1.21.8
Low	GO-2025-3751	stdlib@go1.18.2	1.23.10
Low	UBUNTU-CVE-2026-78409	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	UBUNTU-CVE-2024-13176	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24
Low	GHSA-68cf-j696-wvv9	gs-wfs@2.21-CLOUD	2.24.4
Low	GHSA-xpw8-rcwv-8f8p	netty-codec-http2@4.1.51.Final	4.1.100.Final
Low	UBUNTU-CVE-2023-2004	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.3
Low	UBUNTU-CVE-2025-52099	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7
Low	GHSA-293q-567p-wmwq	spring-security-web@5.3.4.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.3.4.RELEASE	5.7.14
Low	DEBIAN-CVE-2026-45446	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Low	GHSA-7g45-4rm6-3mm3	guava@29.0-jre	32.0.0-android
Low	UBUNTU-CVE-2026-22801	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm2
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	UBUNTU-CVE-2026-58055	nghttp2@1.40.0-1build1	no fix listed
Low	GO-2026-4870	stdlib@go1.18.2	1.25.9
Low	GO-2022-0532	stdlib@go1.18.2	1.17.11
Low	GO-2025-4009	stdlib@go1.18.2	1.24.8
Low	DEBIAN-CVE-2026-86138	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	GO-2026-4947	stdlib@go1.18.2	1.25.9
Low	UBUNTU-CVE-2021-20193	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.2
Low	DEBIAN-CVE-2026-86143	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	GO-2025-4006	stdlib@go1.18.2	1.24.8
Low	UBUNTU-CVE-2025-29088	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7
Low	GO-2026-5037	stdlib@go1.18.2	1.25.11
Low	UBUNTU-CVE-2026-40225	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.24+esm3
Low	GO-2026-4971	stdlib@go1.18.2	1.25.10
Low	GHSA-wf6j-gr27-g7ch	gs-main@2.21-CLOUD	2.27.0
Low	GHSA-wf6j-gr27-g7ch	gs-wms@2.21-CLOUD	2.27.0
Low	UBUNTU-CVE-2026-56409	expat@2.2.9-1build1	no fix listed
Low	GO-2026-5972	stdlib@go1.18.2	1.25.13
Low	GO-2026-6088	stdlib@go1.18.2	1.25.13
Low	GO-2026-6089	stdlib@go1.18.2	1.25.13
Low	GO-2026-6090	stdlib@go1.18.2	1.25.13
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.5.13+dfsg-5	no fix listed
Low	GHSA-j59v-vgcr-hxvf	gs-main@2.21-CLOUD	2.24.4
Low	DEBIAN-CVE-2025-1390	libcap2@1:2.66-4	1:2.66-4+deb12u1
Low	UBUNTU-CVE-2026-50813	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	GO-2026-5038	stdlib@go1.18.2	1.25.11
Low	DEBIAN-CVE-2017-18018	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-86139	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1692781,4962,700	88,377

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.