gocd 2.18.1 Helm chart

Name: gocd Helm chart 2.18.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

gocd

Scored 14 Sept 2026

GoCD is an open-source continuous delivery server to model and visualize complex workflows with ease.

Version 2.18.1 3 days agoapp version 26.1.0 11Artifact Hub

gocd 2.18.1 deploys 2 container images: gocd/gocd-agent-wolfi and gocd/gocd-server. Across them, 76 findings — 4 critical, 5 high — 2 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 4.3.30.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

1,362451354

76 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
gocd/gocd-agent-wolfi	v26.1.0	00012	97
gocd/gocd-server	v26.1.0	451342	1,265

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

64 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.3.30.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@4.3.30.RELEASE	5.2.20.RELEASE
Critical	GHSA-45hx-wfhj-473x	h2@1.4.200	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.200	2.0.206
High	GHSA-4wrc-f8pq-fpqp	spring-web@4.3.30.RELEASE	6.0.0
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@4.3.30.RELEASE	no fix listed
High	GHSA-hh32-7344-cg2f	spring-security-web@4.2.20.RELEASE	5.4.11
High	GHSA-hh32-7344-cg2f	spring-security-core@4.2.20.RELEASE	5.4.11
High	GHSA-558x-2xjg-6232	spring-expression@4.3.30.RELEASE	5.2.20.RELEASE
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@4.3.30.RELEASE	5.2.21.RELEASE
Medium	GHSA-gq28-h5vg-8prx	spring-security-web@4.2.20.RELEASE	5.2.9
Medium	GHSA-ccgv-vj62-xf9h	spring-web@4.3.30.RELEASE	no fix listed
Medium	GHSA-7rpj-hg47-cx62	h2@1.4.200	2.0.202
Medium	GHSA-hgjh-9rj2-g67j	spring-web@4.3.30.RELEASE	5.3.33
Medium	GHSA-j8jw-g6fq-mp7h	hibernate-core@3.6.10.Final	5.3.20.Final
Medium	GHSA-hh26-6xwr-ggv7	spring-beans@4.3.30.RELEASE	5.2.22.RELEASE
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@4.3.30.RELEASE	5.3.34
Medium	GHSA-8grg-q944-cch5	hibernate-core@3.6.10.Final	5.3.18
Medium	GHSA-355h-qmc2-wpwf	jetty-http@10.0.26	10.0.28
Medium	GHSA-f3jh-qvm4-mg39	spring-security-core@4.2.20.RELEASE	5.7.12
Medium	GHSA-wxqc-pxw9-g2p8	spring-expression@4.3.30.RELEASE	5.2.24.RELEASE
Medium	GHSA-mf92-479x-3373	spring-security-web@4.2.20.RELEASE	no fix listed
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@10.0.26	10.0.31
Low	CGA-35mx-c7ph-5wqg	openssl@3.6.3-r3	3.6.3-r5
Low	GHSA-564r-hj7v-mcr5	spring-expression@4.3.30.RELEASE	5.2.23.RELEASE
Low	CGA-6ph6-75jp-484p	zlib@1.3.2-r3	1.3.3-r0
Low	GHSA-x23c-287f-qqv5	spring-webmvc@4.3.30.RELEASE	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@4.3.30.RELEASE	no fix listed
Low	CGA-pg7p-jc78-5qw9	glibc@2.43-r9	2.43-r10
Low	GHSA-22wj-vf5f-wrvj	h2@1.4.200	2.2.220
Low	GHSA-2rmj-mq67-h97g	spring-web@4.3.30.RELEASE	5.3.38
Low	GHSA-775g-4xr8-78h8	spring-expression@4.3.30.RELEASE	no fix listed
Low	CGA-6vrx-5w7p-6phj	openssl@3.6.3-r3	3.6.3-r4
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.22.0	2.22.1
Low	GHSA-4gc7-5j7h-4qph	spring-web@4.3.30.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@4.3.30.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@4.3.30.RELEASE	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@4.3.30.RELEASE	no fix listed
Low	CGA-7g67-8qrj-cr3q	nghttp2@1.69.0-r0	1.70.0-r0
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@4.3.30.RELEASE	no fix listed
Low	GHSA-wxpp-56q6-5pcg	spring-expression@4.3.30.RELEASE	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.22.0	2.22.1
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@4.3.30.RELEASE	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@10.0.26	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@4.2.20.RELEASE	no fix listed
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@10.0.26	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@4.3.30.RELEASE	5.3.39
Low	GHSA-293q-567p-wmwq	spring-security-web@4.2.20.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@4.2.20.RELEASE	5.7.14
Low	CGA-9f3f-x983-mfhp	curl@8.21.0-r1	8.22.0-r2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.18.1latest	3 days ago	26.1.0	451354	1,362
2.18.0	2 months ago	26.1.0	451354	1,362

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/gocd/gocd.svg)](https://charts.stackradar.io/charts/gocd/gocd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.