gocd 1.9.2 Helm chart

Name: gocd Helm chart 1.9.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudnativeapp

Scored 14 Sept 2026

GoCD is an open-source continuous delivery server to model and visualize complex workflows with ease.

Version 1.9.2 5 years agoapp version 19.3.0 0Artifact Hub

gocd 1.9.2 deploys 2 container images: gocd/gocd-agent-alpine-3.9 and gocd/gocd-server. Across them, 324 findings — 11 critical, 61 high — 2 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 4.3.22.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

9,144116116290

324 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
gocd/gocd-agent-alpine-3.9	v19.3.0	2133718	1,966
gocd/gocd-server	v19.3.0	94812572	7,178

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

72 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2018-1000654	libtasn1@4.13-r0	4.14-r0
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.3	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.3	1.2.13
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.14.v20181114	9.4.63
Low	ALPINE-CVE-2019-5188	e2fsprogs@1.44.5-r0	1.44.5-r2
Low	ALPINE-CVE-2019-3902	mercurial@4.8.2-r0	4.9-r0
Low	GHSA-mq66-vcfc-8246	mercurial@4.8.2	4.9
Low	GHSA-v2r2-7qm7-jj6v	spring-security-core@4.2.11.RELEASE	4.2.12
Low	GHSA-564r-hj7v-mcr5	spring-expression@4.3.22.RELEASE	5.2.23.RELEASE
Low	GHSA-vrpq-qp53-qv56	org.eclipse.jgit@5.1.3.201810200350-r	5.13.4.202507202350-r
Low	ALPINE-CVE-2019-5435	curl@7.64.0-r1	7.64.0-r2
Low	GHSA-g8m5-722r-8whq	jetty-server@9.4.14.v20181114	9.4.56
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.18	1.31
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.59	1.66
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.14.v20181114	9.4.57.v20241219
Low	ALPINE-CVE-2019-1563	openssl@1.1.1b-r1	1.1.1d-r0
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.59	1.78
Low	GHSA-x23c-287f-qqv5	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.59	1.78
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.59	1.84
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.14.v20181114	9.4.52
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.59	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2021-23839	openssl@1.1.1b-r1	1.1.1j-r0
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.14.v20181114	9.4.54
Low	GHSA-72m5-fvvv-55m6	bcprov-jdk15on@1.59	1.61
Low	GHSA-2rmj-mq67-h97g	spring-web@4.3.22.RELEASE	5.3.38
Low	ALPINE-CVE-2019-1547	openssl@1.1.1b-r1	1.1.1d-r0
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.59	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.59	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2020-28928	musl@1.1.20-r4	1.1.20-r6
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-context@4.3.22.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@4.3.22.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-337m-mw94-2v6g	commons-configuration2@2.4	2.15.0
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.9.6	2.18.8
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.9.4	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@4.3.22.RELEASE	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.9.4	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.14.v20181114	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@4.2.11.RELEASE	no fix listed
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.14.v20181114	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@4.3.22.RELEASE	5.3.39
Low	GHSA-3gh6-v5v9-6v9j	jetty-servlets@9.4.14.v20181114	9.4.52

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.9.2latest	5 years ago	19.3.0	116116290	9,144

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/gocd.svg)](https://charts.stackradar.io/charts/cloudnativeapp/gocd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.