geoserver Helm chart

Name: geoserver Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

camptocamp2

Scored 15 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,648 findings — 169 critical, 278 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

88,3771692781,4962,700

4,648 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	12	0244323	3,699
geoservercloud/geoserver-cloud-config	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-discovery	1.0-RC2	—	unmeasured
geoservercloud/geoserver-cloud-gateway	1.0-RC2	1335204347	10,840
geoservercloud/geoserver-cloud-rest	1.0-RC2	2847251409	14,479
geoservercloud/geoserver-cloud-wcs	1.0-RC2	2947246401	14,373
geoservercloud/geoserver-cloud-webui	1.0-RC2	3249253412	15,038
geoservercloud/geoserver-cloud-wfs	1.0-RC2	3449249402	14,975
geoservercloud/geoserver-cloud-wms	1.0-RC2	3349249406	14,973
bitnami/bitnami-shell	10-debian-10-r248	—	unmeasured
bitnami/postgresql	11.14.0-debian-10-r0	—	unmeasured
bitnami/rabbitmq	3.8.9-debian-10-r37	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

981 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-53615	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	UBUNTU-CVE-2026-77117	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-80489	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2021-36085	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2021-36087	libsepol@3.0-1	3.0-1ubuntu0.1
Low	UBUNTU-CVE-2025-68160	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-659m-px2c-25wj	spring-core@5.2.8.RELEASE	no fix listed
Low	GHSA-4hfh-6x8g-gwpp	spring-webflux@5.2.8.RELEASE	no fix listed
Low	GO-2026-4403	stdlib@go1.18.2	1.23.9
Low	UBUNTU-CVE-2026-59845	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GO-2026-4970	stdlib@go1.18.2	1.25.12
Low	GHSA-p5f7-rjhp-pxvc	spring-amqp@2.2.10.RELEASE	no fix listed
Low	UBUNTU-CVE-2025-15224	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm2
Low	DEBIAN-CVE-2026-22185	openldap@2.5.13+dfsg-5	no fix listed
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-2	1.0.8-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-32777	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2025-9820	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-39113	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-0968	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GO-2026-4602	stdlib@go1.18.2	1.25.8
Low	UBUNTU-CVE-2026-76957	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-27456	util-linux@2.34-0.1ubuntu9.1	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-18508	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-8277	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-0992	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	UBUNTU-CVE-2026-45186	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-89160	pcre2@10.34-7	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webflux@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.19-3ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-32776	expat@2.2.9-1build1	no fix listed
Low	UBUNTU-CVE-2026-41080	expat@2.2.9-1build1	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.2.8.RELEASE	no fix listed
Low	DEBIAN-CVE-2023-40403	libxslt@1.1.35-1	1.1.35-1+deb12u2
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.51.Final	4.1.135.Final
Low	UBUNTU-CVE-2025-4878	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm1
Low	GHSA-p8qj-fj6r-w7q9	spring-amqp@2.2.10.RELEASE	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1	no fix listed
Low	DEBIAN-CVE-2024-31852	llvm-toolchain-16@1:16.0.6-15~deb12u1	no fix listed
Low	UBUNTU-CVE-2025-69418	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+b1	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.13.0	0.44.0
Low	UBUNTU-CVE-2026-59846	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webflux@5.2.8.RELEASE	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@5.2.8.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	DSA-5979-2	libxslt@1.1.35-1	1.1.35-1+deb12u3
Low	USN-5473-1	ca-certificates@20210119~20.04.2	20211016~20.04.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.3latest	4 years ago	1.0-RC2	1692781,4962,700	88,377

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.