puppetserver Helm chart
camptocamp3Scored 14 Sept 2026
A Helm chart for Kubernetes
Latest 1.0.1 11 days agodeploys tag 8.7.0-main 0Artifact Hub
puppetserver 1.0.1 deploys 2 container images: camptocamp/jmx-exporter and ghcr.io/voxpupuli/puppetserver. Across them, 499 findings — 5 critical, 6 high — 2 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.16, fixed in 2.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| camptocamp/ | 0.12.0 | 1151 | 237 |
| ghcr.io/ | 8.7.0-main | 4583398 | 5,649 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
499 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2025-8277 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | UBUNTU-CVE-2026-39316 | cups | 2.4.1op1-1ubuntu4.20 |
| Low | UBUNTU-CVE-2026-45186 | expat | no fix listed |
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-87876 | cups | no fix listed |
| Low | UBUNTU-CVE-2026-32776 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-39314 | cups | 2.4.1op1-1ubuntu4.20 |
| Low | UBUNTU-CVE-2026-41080 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-4878 | libssh | 0.9.6-2ubuntu0.22.04.4 |
| Low | GHSA-wjpw-4j6x-6rwh | jetty-http | no fix listed |
| Low | UBUNTU-CVE-2025-69418 | openssl | 3.0.2-0ubuntu1.21 |
| Low | UBUNTU-CVE-2026-59846 | libssh | 0.9.6-2ubuntu0.22.04.8 |
| Low | UBUNTU-CVE-2026-35387 | openssh | 1:8.9p1-3ubuntu0.15 |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-73281 | openssh | 1:8.9p1-3ubuntu0.17 |
| Low | UBUNTU-CVE-2025-6141 | ncurses | 6.3-2ubuntu0.3 |
| Low | USN-5376-4 | git | 1:2.34.1-1ubuntu1.16 |
| Low | USN-5376-5 | git | 1:2.34.1-1ubuntu1.17 |
| Low | USN-5495-2 | curl | 7.81.0-1ubuntu1.21 |
| Low | USN-7412-2 | gnupg2 | 2.2.27-3ubuntu2.4 |
| Low | USN-8091-1 | util-linux | 2.37.2-4ubuntu3.5 |
| Low | USN-8405-2 | cups | 2.4.1op1-1ubuntu4.21 |
| Low | USN-8436-1 | ca-certificates | 20260601~22.04.1 |
| Low | USN-8625-1 | openssl | 3.0.2-0ubuntu1.26 |
| Low | USN-8688-1 | pam | 1.4.0-11ubuntu2.8 |
| Low | UBUNTU-CVE-2025-61985 | openssh | 1:8.9p1-3ubuntu0.14 |
| Low | UBUNTU-CVE-2026-0965 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | GHSA-q2mw-fvj9-vvcw | net-imap | 0.4.24 |
| Low | UBUNTU-CVE-2025-66382 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-24515 | expat | 2.4.7-1ubuntu0.7 |
| Low | UBUNTU-CVE-2026-40228 | systemd | no fix listed |
| Low | UBUNTU-CVE-2026-32778 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-30258 | gnupg2 | 2.2.27-3ubuntu2.3 |
| Low | GHSA-p47f-322f-whfh | logback-core | 1.5.33 |
| Low | GHSA-6v67-2wr5-gvf4 | logback-core | 1.3.15 |
| Low | UBUNTU-CVE-2026-1485 | glib2.0 | 2.72.4-0ubuntu2.9 |
| Low | UBUNTU-CVE-2026-53910 | diffutils | 1:3.8-0ubuntu2.1 |
| Low | UBUNTU-CVE-2026-22007 | openjdk-17 | 17.0.19+10-1~22.04.2 |
| Low | UBUNTU-CVE-2026-34268 | openjdk-17 | 17.0.19+10-1~22.04.2 |
| Low | UBUNTU-CVE-2026-0967 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | GHSA-6wx8-w4f5-wwcr | concurrent-ruby | 1.3.7 |
| Low | GHSA-c4fp-cxrr-mj66 | net-imap | 0.5.15 |
| Low | UBUNTU-CVE-2026-47241 | ruby3.0 | no fix listed |
| Low | UBUNTU-CVE-2026-35388 | openssh | 1:8.9p1-3ubuntu0.15 |
| Low | UBUNTU-CVE-2026-73283 | openssh | 1:8.9p1-3ubuntu0.17 |
| Low | UBUNTU-CVE-2026-5958 | sed | 4.8-1ubuntu2.1 |
| Low | UBUNTU-CVE-2026-6368 | glibc | 2.35-0ubuntu3.15 |
| Low | GHSA-qqpg-mvqg-649v | logback-core | 1.5.25 |
| None | GHSA-5rv5-xj5j-3484 | faraday | 2.14.2 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/camptocamp3/puppetserver)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.