gocd 1.9.2 Helm chart

Name: gocd Helm chart 1.9.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudnativeapp

Scored 14 Sept 2026

GoCD is an open-source continuous delivery server to model and visualize complex workflows with ease.

Version 1.9.2 5 years agoapp version 19.3.0 0Artifact Hub

gocd 1.9.2 deploys 2 container images: gocd/gocd-agent-alpine-3.9 and gocd/gocd-server. Across them, 324 findings — 11 critical, 61 high — 2 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 4.3.22.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

9,144116116290

324 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
gocd/gocd-agent-alpine-3.9	v19.3.0	2133718	1,966
gocd/gocd-server	v19.3.0	94812572	7,178

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

254 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.59	1.78
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.59	1.84
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.14.v20181114	9.4.52
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.59	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2021-23839	openssl@1.1.1b-r1	1.1.1j-r0
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.14.v20181114	9.4.54
Low	GHSA-72m5-fvvv-55m6	bcprov-jdk15on@1.59	1.61
Low	GHSA-2rmj-mq67-h97g	spring-web@4.3.22.RELEASE	5.3.38
Low	ALPINE-CVE-2019-1547	openssl@1.1.1b-r1	1.1.1d-r0
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.59	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.59	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2020-28928	musl@1.1.20-r4	1.1.20-r6
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-web@4.3.22.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@4.3.22.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-337m-mw94-2v6g	commons-configuration2@2.4	2.15.0
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.9.6	2.18.8
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.9.4	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@4.3.22.RELEASE	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.9.4	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.14.v20181114	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@4.2.11.RELEASE	no fix listed
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.14.v20181114	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@4.3.22.RELEASE	5.3.39
Low	GHSA-3gh6-v5v9-6v9j	jetty-servlets@9.4.14.v20181114	9.4.52
Low	GHSA-293q-567p-wmwq	spring-security-web@4.2.11.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@4.2.11.RELEASE	5.7.14
Low	GHSA-m6cp-vxjx-65j6	jetty-server@9.4.14.v20181114	9.4.41
Low	GHSA-7g45-4rm6-3mm3	guava@20.0	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GHSA-5mg8-w23w-74h3	guava@20.0	32.0.0-android
Low	GHSA-957g-f97v-vppc	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.9.6	2.13.0
Low	GHSA-cj7v-27pg-wf7q	jetty-http@9.4.14.v20181114	9.4.47
Low	GHSA-p26g-97m4-6q7c	jetty-server@9.4.14.v20181114	9.4.51.v20230217
Low	GHSA-659m-px2c-25wj	spring-core@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2019-1348	git@2.20.1-r0	2.20.2-r0
Low	GHSA-4wp7-92pw-q264	spring-context@4.3.22.RELEASE	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@4.3.22.RELEASE	no fix listed
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@9.4.14.v20181114	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@4.3.22.RELEASE	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.9.2latest	5 years ago	19.3.0	116116290	9,144

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/gocd.svg)](https://charts.stackradar.io/charts/cloudnativeapp/gocd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.