gocd 1.9.2 Helm chart

Name: gocd Helm chart 1.9.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudnativeapp

Scored 14 Sept 2026

GoCD is an open-source continuous delivery server to model and visualize complex workflows with ease.

Version 1.9.2 5 years agoapp version 19.3.0 0Artifact Hub

gocd 1.9.2 deploys 2 container images: gocd/gocd-agent-alpine-3.9 and gocd/gocd-server. Across them, 324 findings — 11 critical, 61 high — 2 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 4.3.22.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

9,144116116290

324 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
gocd/gocd-agent-alpine-3.9	v19.3.0	2133718	1,966
gocd/gocd-server	v19.3.0	94812572	7,178

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

254 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@4.3.22.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.3.22.RELEASE	5.2.20.RELEASE
Critical	GHSA-599f-7c49-w659	commons-text@1.6	1.10.0
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.18	2.0
Critical	ALPINE-CVE-2019-8457	sqlite@3.26.0-r3	3.28.0-r0
Critical	GHSA-xj57-8qj4-c4m6	commons-configuration2@2.4	2.8.0
Critical	GHSA-p66x-2cv9-qq3v	commons-beanutils@1.8.3	1.9.4
Critical	GHSA-vv7r-c36w-3prj	commons-fileupload@1.4	1.6.0
Critical	ALPINE-CVE-2019-9513	nghttp2@1.35.1-r0	1.35.1-r1
High	GHSA-9339-86wc-4qgf	xalan@2.7.2	2.7.3
High	GHSA-4wrc-f8pq-fpqp	spring-web@4.3.22.RELEASE	6.0.0
High	ALPINE-CVE-2019-9511	nghttp2@1.35.1-r0	1.35.1-r1
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.4	2.9.10.3
High	ALPINE-CVE-2019-5436	curl@7.64.0-r1	7.64.0-r2
High	ALPINE-CVE-2019-1349	git@2.20.1-r0	2.20.2-r0
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@4.3.22.RELEASE	no fix listed
High	GHSA-26vr-8j45-3r4w	jetty-server@9.4.14.v20181114	9.4.39
High	ALPINE-CVE-2021-23840	openssl@1.1.1b-r1	1.1.1j-r0
High	GHSA-hfrx-6qgj-fp6c	commons-fileupload@1.4	1.5
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.9.4	2.9.5
High	ALPINE-CVE-2019-1350	git@2.20.1-r0	2.20.2-r0
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.4	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.4	2.9.10.4
High	ALPINE-CVE-2019-5482	curl@7.64.0-r1	7.64.0-r3
High	ALPINE-CVE-2019-1352	git@2.20.1-r0	2.20.2-r0
High	GHSA-59j4-wjwp-mw9m	velocity@1.7	no fix listed
High	ALPINE-CVE-2019-1354	git@2.20.1-r0	2.20.2-r0
High	GHSA-9qcf-c26r-x5rf	quartz@2.3.1	2.3.2
High	ALPINE-CVE-2021-3449	openssl@1.1.1b-r1	1.1.1k-r0
High	GHSA-645p-88qh-w398	jackson-databind@2.9.4	2.9.7
High	GHSA-gwcr-j4wh-j3cq	jetty-servlets@9.4.14.v20181114	9.4.41
High	GHSA-hh32-7344-cg2f	spring-security-core@4.2.11.RELEASE	5.4.11
High	GHSA-hh32-7344-cg2f	spring-security-web@4.2.11.RELEASE	5.4.11
High	GHSA-m394-8rww-3jr7	jetty-server@9.4.14.v20181114	9.4.37
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.8.3	1.9.4
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.18	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.4	2.9.10.8
High	GHSA-9mxf-g3x6-wv74	jackson-databind@2.9.4	2.9.7
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.4	2.9.10
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.9.4	2.9.8
High	GHSA-f9hv-mg5h-xcw9	jackson-databind@2.9.4	2.9.8
High	GHSA-mx9v-gmh4-mgqw	jackson-databind@2.9.4	2.9.8
High	GHSA-558x-2xjg-6232	spring-expression@4.3.22.RELEASE	5.2.20.RELEASE
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.4	2.9.9.1
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.4	2.9.9
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.9.4	2.9.7
High	ALPINE-CVE-2019-9948	python2@2.7.15-r3	2.7.16-r1
High	ALPINE-CVE-2019-9636	python2@2.7.15-r3	2.7.16-r1
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.4	2.9.10.2
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.4	2.9.9.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.9.2latest	5 years ago	19.3.0	116116290	9,144

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/gocd.svg)](https://charts.stackradar.io/charts/cloudnativeapp/gocd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.