StackRadar

geoserver Helm chart

camptocamp2

Scored 14 Sept 2026

A Helm chart for Geoserver

Latest 0.0.3 4 years agoapp version 1.0-RC2 0Artifact Hub

geoserver 0.0.3 deploys 12 container images: library/postgres, geoservercloud/geoserver-cloud-config, geoservercloud/geoserver-cloud-discovery, geoservercloud/geoserver-cloud-gateway and 8 more. Across the 7 measured, 4,607 findings — 176 critical, 271 high — 76 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.3.RELEASE, fixed in 2.5.12.

Radar Score

88,3351762711,5042,651

4,607 findings over 7 of 12 images measured

KEV ×76 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images
ImageTagVulnerabilitiesRadar Score
library/postgres1211523163,891
geoservercloud/geoserver-cloud-config1.0-RC2—unmeasured
geoservercloud/geoserver-cloud-discovery1.0-RC2—unmeasured
geoservercloud/geoserver-cloud-gateway1.0-RC2143420434010,801
geoservercloud/geoserver-cloud-rest1.0-RC2294625140214,440
geoservercloud/geoserver-cloud-wcs1.0-RC2304624639414,334
geoservercloud/geoserver-cloud-webui1.0-RC2334825340514,999
geoservercloud/geoserver-cloud-wfs1.0-RC2354824939514,936
geoservercloud/geoserver-cloud-wms1.0-RC2344824939914,934
bitnami/bitnami-shell10-debian-10-r248—unmeasured
bitnami/postgresql11.14.0-debian-10-r0—unmeasured
bitnami/rabbitmq3.8.9-debian-10-r37—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

980 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2023-2283libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.3
LowGHSA-7v6m-28jr-rg84hibernate-validator@6.1.5.Final6.2.0.CR1
LowGHSA-vx9q-rhv9-3jvgaircompressor@0.202.0.3
LowUBUNTU-CVE-2026-12087perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.5+esm3
LowGHSA-3936-3gx6-49c4commons-vfs2@2.02.10.0
LowGHSA-945q-ch46-pchgspring-amqp@2.2.10.RELEASE2.2.20
LowGHSA-6fmv-xxpf-w3cwplexus-utils@1.5.63.6.1
LowUBUNTU-CVE-2023-47038perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.5
LowGHSA-68mj-5wr7-6fggamqp-client@5.9.05.33.1
LowGHSA-pwqr-wmgm-9rr8netty-codec-http@4.1.51.Final4.1.132.Final
LowUBUNTU-CVE-2020-11080nghttp2@1.40.0-1build11.40.0-1ubuntu0.1
LowGHSA-564r-hj7v-mcr5spring-expression@5.2.8.RELEASE5.2.23.RELEASE
LowGHSA-45q3-82m4-75jrnetty-handler-proxy@4.1.51.Final4.1.133.Final
LowDEBIAN-CVE-2025-32415libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
LowUBUNTU-CVE-2026-0915glibc@2.31-0ubuntu9.22.31-0ubuntu9.18+esm1
LowUBUNTU-CVE-2025-4802glibc@2.31-0ubuntu9.22.31-0ubuntu9.18
LowUBUNTU-CVE-2023-50495ncurses@6.2-0ubuntu2no fix listed
LowGHSA-93j5-89vc-pph4amqp-client@5.9.05.33.1
LowUBUNTU-CVE-2026-5773curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.25+esm5
LowUBUNTU-CVE-2023-5981gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.9
LowGHSA-3wrr-7qpf-2prhjackson-databind@2.11.22.14.0
LowUBUNTU-CVE-2021-3997systemd@245.4-4ubuntu3.13245.4-4ubuntu3.15
LowUBUNTU-CVE-2026-63072openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm5
LowDEBIAN-CVE-2026-40355krb5@1.20.1-2+deb12u21.20.1-2+deb12u5
LowDEBIAN-CVE-2026-40356krb5@1.20.1-2+deb12u21.20.1-2+deb12u5
LowDEBIAN-CVE-2026-45445openssl@3.0.15-1~deb12u13.0.20-1~deb12u2
LowDEBIAN-CVE-2026-85091zlib@1:1.2.13.dfsg-1no fix listed
LowUBUNTU-CVE-2024-33600glibc@2.31-0ubuntu9.22.31-0ubuntu9.16
LowUBUNTU-CVE-2026-66046expat@2.2.9-1build1no fix listed
LowUBUNTU-CVE-2022-48303tar@1.30+dfsg-7ubuntu0.20.04.11.30+dfsg-7ubuntu0.20.04.3
LowGO-2023-2102stdlib@go1.18.21.20.10
LowUBUNTU-CVE-2025-5318libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.5+esm1
LowUBUNTU-CVE-2023-0466openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.18
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.51.Final4.1.137.Final
LowUBUNTU-CVE-2026-80230curl@7.68.0-1ubuntu2.7no fix listed
LowGHSA-mg83-c7gq-rv5cspring-security-crypto@5.3.4.RELEASE5.7.16
LowUBUNTU-CVE-2023-0465openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.18
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@9.0.379.0.118
LowUBUNTU-CVE-2026-42013gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm3
LowUBUNTU-CVE-2026-0861glibc@2.31-0ubuntu9.22.31-0ubuntu9.18+esm1
LowGHSA-7qmg-grcp-qf25gs-web-sec-core@2.21-CLOUD2.26.4
LowDEBIAN-CVE-2026-3833gnutls28@3.7.9-2+deb12u33.7.9-2+deb12u7
LowUBUNTU-CVE-2024-2236libgcrypt20@1.8.5-5ubuntu1.1no fix listed
LowDEBIAN-CVE-2026-31789openssl@3.0.15-1~deb12u13.0.19-1~deb12u2
LowUBUNTU-CVE-2025-69419openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm2
LowGHSA-23hv-mwm6-g8jftomcat-embed-core@9.0.379.0.106
LowDEBIAN-CVE-2023-45322libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
LowUBUNTU-CVE-2022-23491ca-certificates@20210119~20.04.220211016ubuntu0.20.04.1
LowUBUNTU-CVE-2026-54874openssl@1.1.1f-1ubuntu2.81.1.1f-1ubuntu2.24+esm5
LowGHSA-563x-q5rq-57qptomcat-embed-core@9.0.379.0.116

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.3latest4 years ago1.0-RC21762711,5042,65188,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/camptocamp2/geoserver.svg)](https://charts.stackradar.io/charts/camptocamp2/geoserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.