StackRadar

signserver-ce 2.3.5 Helm chart

signserverOfficialVerified publisher

Scored 14 Sept 2026

A Helm chart for running SignServer in Kubernetes

Version 2.3.5app version 7.3.2 1Artifact Hub

signserver-ce 2.3.5 deploys 1 container image: keyfactor/signserver-ce. Across them, 219 findings — 1 critical, 4 high. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.19, fixed in 2.0.

Radar Score

2,4061447167

219 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
keyfactor/signserver-ce7.3.214471672,406

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

47 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-4jrv-ppp4-jm57gson@2.8.42.8.9
MediumGHSA-84q7-p226-4x5wjetty-server@9.4.8.v201711219.4.11.v20180605
MediumGHSA-7vx9-xjhr-rw6hjetty-server@9.4.8.v201711219.4.16.v20190411
MediumGHSA-h2f4-v4c4-6wx4jetty-server@9.4.8.v201711219.4.12.v20180830
MediumGHSA-mwcx-532g-8pq3jetty-server@9.4.8.v201711219.4.11.v20180605
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.54.5.13
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.9.41.11.0
MediumGHSA-j382-5jj3-vw4jundertow-core@2.3.18.Final2.3.21.Final
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.191.31
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.62.7
MediumGHSA-95h4-w6j8-2rp8undertow-core@2.3.18.Final2.3.20.Final
MediumGHSA-4g8c-wm8x-jfhwnetty-handler@4.1.116.Final4.1.118.Final
MediumGHSA-86wm-rrjm-8wh8jetty-server@9.4.8.v201711219.4.35.v20201120
MediumGHSA-xc67-hjx6-cgg6jetty-server@9.4.8.v201711219.4.17.v20190418
MediumGHSA-w9fj-cfpg-grvvnetty-codec-http2@4.1.118.Final4.1.132.Final
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.191.32
MediumGHSA-pvp8-3xj6-8c6xcommons-configuration@1.10no fix listed
MediumGHSA-9rgv-h7x4-qw8gjetty-server@9.4.8.v201711219.4.11.v20180605
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.113.18.0
MediumGHSA-93g8-qqv3-mrx8cxf-rt-transports-jms@4.0.64.1.7
MediumGHSA-r28m-g6j9-r2h5jetty-server@9.4.8.v201711219.4.17.v20190418
MediumGHSA-6h4f-pj3g-q8fqundertow-core@2.3.18.Final2.3.21.Final
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.191.31
MediumGHSA-cgp8-4m63-fhh5commons-net@3.63.9.0
MediumGHSA-78wr-2p64-hpwjcommons-io@2.62.14.0
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.118.Final4.1.135.Final
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.8.v201711219.4.60
MediumGHSA-g4px-6qhm-hqjmcxf-rt-transports-jms@4.0.64.0.9
MediumGHSA-98wm-3w3q-mw94snakeyaml@1.191.31
MediumGHSA-cj8j-37rh-8475bcpg-jdk18on@1.801.84
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.4.8.v201711219.4.51.v20230217
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.17.22.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.17.22.18.8
MediumGHSA-qhp6-6p8p-2rqhwildfly-elytron-integration@27.0.1.Final31.0.3.Final
MediumGHSA-prj3-ccx8-p6x4netty-codec-http2@4.1.118.Final4.1.124.Final
MediumGHSA-5v34-g2px-j4fwant@1.10.91.10.11
MediumGHSA-w37g-rhq8-7m4jsnakeyaml@1.191.32
MediumGHSA-cm33-6792-r9fmnetty-codec-dns@4.1.116.Final4.1.133.Final
MediumGHSA-q5r4-cfpx-h6fhant@1.10.91.10.11
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http2@4.1.118.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.116.Final4.1.133.Final
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.116.Final4.1.136.Final
MediumGHSA-3cqm-mf7h-prrjokhttp@3.10.04.9.2
MediumGHSA-hf6x-8p5f-cgmfhttpcore5@5.2.45.4.3
MediumGHSA-v3jc-474w-2wm6httpcore5-h2@5.2.45.4.3
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.118.Final4.1.135.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.3.5latest—7.3.214471672,406

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/signserver/signserver-ce.svg)](https://charts.stackradar.io/charts/signserver/signserver-ce)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.