StackRadar

geoserver Helm chart

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images
ImageTagVulnerabilitiesRadar Score
library/postgres1211523163,891
geoservercloud/geoserver-cloud-config1.0-RC2—unmeasured
geoservercloud/geoserver-cloud-discovery1.0-RC2—unmeasured
geoservercloud/geoserver-cloud-gateway1.0-RC2143420434010,801
geoservercloud/geoserver-cloud-rest1.0-RC2294625140214,440
geoservercloud/geoserver-cloud-wcs1.0-RC2304624639414,334
geoservercloud/geoserver-cloud-webui1.0-RC2334825340514,999
geoservercloud/geoserver-cloud-wfs1.0-RC2354824939514,936
geoservercloud/geoserver-cloud-wms1.0-RC2344824939914,934
bitnami/bitnami-shell10-debian-10-r248—unmeasured
bitnami/postgresql11.14.0-debian-10-r0—unmeasured
bitnami/rabbitmq3.8.9-debian-10-r37—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2023-28321curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.19
MediumUBUNTU-CVE-2025-69421openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm2
MediumGHSA-mf92-479x-3373spring-security-web@5.3.4.RELEASEno fix listed
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.51.Final4.1.135.Final
MediumUBUNTU-CVE-2023-1667libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.3
MediumGO-2022-1144stdlib@go1.18.21.18.9
MediumUBUNTU-CVE-2026-28387openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm3
MediumDEBIAN-CVE-2015-9019libxslt@1.1.35-1no fix listed
MediumUBUNTU-CVE-2021-3999glibc@2.31-0ubuntu9.22.31-0ubuntu9.7
MediumGHSA-gx5v-xp9w-j4cgtomcat-embed-core@9.0.379.0.118
MediumUBUNTU-CVE-2022-31782freetype@2.10.1-2ubuntu0.12.10.1-2ubuntu0.2
MediumGHSA-wx54-3278-m5g4spring-security-core@5.3.4.RELEASE5.5.7
MediumUBUNTU-CVE-2026-28389openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2026-28390openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm3
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u9no fix listed
LowUBUNTU-CVE-2025-69420openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm2
LowUBUNTU-CVE-2026-57433perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.5+esm3
LowGHSA-g3pr-3p32-fp23micrometer-core@1.5.4no fix listed
LowDEBIAN-CVE-2026-6653libxml2@2.9.14+dfsg-1.3~deb12u1no fix listed
LowUBUNTU-CVE-2026-25646libpng1.6@1.6.37-21.6.37-2ubuntu0.1~esm2
LowUBUNTU-CVE-2023-27535curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.18
LowUBUNTU-CVE-2023-4806glibc@2.31-0ubuntu9.22.31-0ubuntu9.14
LowGHSA-gq5f-xv48-2365batik-bridge@1.141.17
LowGHSA-gq5f-xv48-2365batik-transcoder@1.141.17
LowUBUNTU-CVE-2026-27135nghttp2@1.40.0-1build11.40.0-1ubuntu0.3+esm1
LowUBUNTU-CVE-2022-27774curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.10
LowUBUNTU-CVE-2026-13221perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.5+esm3
LowUBUNTU-CVE-2026-42496perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.5+esm2
LowUBUNTU-CVE-2026-33636libpng1.6@1.6.37-21.6.37-2ubuntu0.1~esm3
LowGHSA-vmq6-5m68-f53mlogback-classic@1.2.31.2.13
LowGHSA-vmq6-5m68-f53mlogback-core@1.2.31.2.13
LowUBUNTU-CVE-2023-27536curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.18
LowGHSA-g8pj-r55q-5c2vtomcat-embed-core@9.0.379.0.81
LowGHSA-973x-65j7-xcf4aircompressor@0.200.27
LowGHSA-jhqx-5v5g-mpf3gs-gwc@2.21-CLOUD2.23.5
LowGHSA-c5xv-qc8p-mh2vbatik-bridge@1.141.15
LowDEBIAN-CVE-2024-56406perl@5.36.0-7+deb12u15.36.0-7+deb12u2
LowGHSA-v6w3-2prq-h95fjakarta.el@3.0.33.0.4
LowUBUNTU-CVE-2024-37370krb5@1.17-6ubuntu4.11.17-6ubuntu4.6
LowUBUNTU-CVE-2023-38546curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.20
LowGHSA-8g7v-vjrc-x4g5gs-main@2.21-CLOUDno fix listed
LowGHSA-53jm-3hc9-fqqcbatik-bridge@1.141.15
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.1.51.Final4.1.133.Final
LowDEBIAN-CVE-2023-40403libxslt@1.1.35-11.1.35-1+deb12u2
LowUBUNTU-CVE-2026-9076openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm4
LowUBUNTU-CVE-2026-82209curl@7.68.0-1ubuntu2.7no fix listed
LowGHSA-fx7f-rjqj-52pjspring-amqp@2.2.10.RELEASE2.2.19
LowUBUNTU-CVE-2022-3437heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.3
LowUBUNTU-CVE-2021-40528libgcrypt20@1.8.5-5ubuntu1.11.8.5-5ubuntu1.fips.1.1
LowGO-2023-1571stdlib@go1.18.21.19.6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.3latest4 years ago1.0-RC21762711,5042,65188,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.