StackRadar

puppetserver Helm chart

camptocamp3

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 1.0.1 10 days agodeploys tag 8.7.0-main 0Artifact Hub

puppetserver 1.0.1 deploys 2 container images: camptocamp/jmx-exporter and ghcr.io/voxpupuli/puppetserver. Across them, 499 findings — 5 critical, 6 high — 2 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.16, fixed in 2.0.

Radar Score

5,8865688399

499 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
camptocamp/jmx-exporter0.12.01151237
ghcr.io/voxpupuli/puppetserver8.7.0-main45833985,649

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

499 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-mjmj-j48q-9wg2snakeyaml@1.162.0
CriticalUBUNTU-CVE-2025-27363KEVfreetype@2.11.1+dfsg-1ubuntu0.22.11.1+dfsg-1ubuntu0.3
CriticalUBUNTU-CVE-2025-48384KEVgit@1:2.34.1-1ubuntu1.121:2.34.1-1ubuntu1.13
CriticalGHSA-vv7r-c36w-3prjcommons-fileupload@1.41.6.0
CriticalUBUNTU-CVE-2025-6965sqlite3@3.37.2-2ubuntu0.33.37.2-2ubuntu0.5
HighUBUNTU-CVE-2025-15467openssl@3.0.2-0ubuntu1.183.0.2-0ubuntu1.21
HighUBUNTU-CVE-2024-6119openssl@3.0.2-0ubuntu1.18no fix listed
HighGHSA-hfrx-6qgj-fp6ccommons-fileupload@1.41.5
HighGHSA-rvwf-54qp-4r6vsnakeyaml@1.161.26
HighUBUNTU-CVE-2024-2511openssl@3.0.2-0ubuntu1.18no fix listed
HighUBUNTU-CVE-2024-3596krb5@1.19.2-2ubuntu0.41.19.2-2ubuntu0.5
MediumGHSA-5cqm-crxm-6qpvcgi@0.2.00.2.1
MediumUBUNTU-CVE-2024-5535openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2026-45447openssl@3.0.2-0ubuntu1.183.0.2-0ubuntu1.25
MediumUBUNTU-CVE-2025-26465openssh@1:8.9p1-3ubuntu0.101:8.9p1-3ubuntu0.11
MediumGHSA-v5h6-c2hv-hv3rstringio@3.0.03.0.1.1
MediumUBUNTU-CVE-2021-46848libtasn1-6@4.18.0-4build14.18.0-4ubuntu0.2
MediumGHSA-vc47-6rqg-c7f5cgi@0.2.00.2.2
MediumGHSA-qg54-694p-wgppdate@3.1.03.1.2
MediumUBUNTU-CVE-2017-11164pcre3@2:8.39-13ubuntu0.22.04.1no fix listed
MediumGHSA-4vf4-qmvg-mh7hcgi@0.2.00.2.1
MediumUBUNTU-CVE-2024-4741openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2026-3497openssh@1:8.9p1-3ubuntu0.101:8.9p1-3ubuntu0.14
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.161.31
MediumUBUNTU-CVE-2022-24975git@1:2.34.1-1ubuntu1.12no fix listed
MediumGHSA-hv5j-3h9f-99c2uri@0.10.10.10.2
MediumUBUNTU-CVE-2026-19931curl@7.81.0-1ubuntu1.20no fix listed
MediumGHSA-fg7x-g82r-94qctime@0.1.00.1.1
MediumUBUNTU-CVE-2022-40735openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2016-20013glibc@2.35-0ubuntu3.8no fix listed
MediumUBUNTU-CVE-2023-31486perl@5.34.0-3ubuntu1.3no fix listed
MediumUBUNTU-CVE-2018-5709krb5@1.19.2-2ubuntu0.4no fix listed
MediumGHSA-fj7f-vq84-fh43bundler@2.2.222.2.33
MediumUBUNTU-CVE-2016-20012openssh@1:8.9p1-3ubuntu0.10no fix listed
MediumUBUNTU-CVE-2023-25193harfbuzz@2.7.4-1ubuntu3.12.7.4-1ubuntu3.2
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.161.32
MediumUBUNTU-CVE-2026-18924curl@7.81.0-1ubuntu1.20no fix listed
MediumUBUNTU-CVE-2022-4899libzstd@1.4.8+dfsg-3build1no fix listed
MediumUBUNTU-CVE-2023-5678openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2025-9230openssl@3.0.2-0ubuntu1.183.0.2-0ubuntu1.20
MediumUBUNTU-CVE-2026-11856curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.26
MediumUBUNTU-CVE-2023-6129openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2026-8925curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.25
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.14.03.18.0
MediumGHSA-q339-8rmv-2mhverb@4.0.24.0.3.1
MediumUBUNTU-CVE-2026-41316ruby3.0@3.0.2-7ubuntu2.8no fix listed
MediumGHSA-2rxp-v6pw-ch6mrexml@3.2.53.3.9
MediumGHSA-jr6h-r7vg-f9mcini4j@0.5.4no fix listed
MediumUBUNTU-CVE-2025-30749openjdk-17@17.0.13+11-2ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latest10 days ago8.7.0-main56883995,886

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/camptocamp3/puppetserver.svg)](https://charts.stackradar.io/charts/camptocamp3/puppetserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.