StackRadar

signserver-ce Helm chart

signserverOfficialVerified publisher

Scored 14 Sept 2026

A Helm chart for running SignServer in Kubernetes

Latest 2.3.5app version 7.3.2 1Artifact Hub

signserver-ce 2.3.5 deploys 1 container image: keyfactor/signserver-ce. Across them, 219 findings1 critical, 4 high. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.19, fixed in 2.0.

Radar Score

2,4061447167

219 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
keyfactor/signserver-ce7.3.214471672,406

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

219 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-v3jc-474w-2wm6httpcore5-h2@5.2.45.4.3
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.118.Final4.1.135.Final
LowGHSA-9342-92gg-6v29smtp@2.0.32.0.4
LowGHSA-2hfh-9h53-qc24neethi@3.2.13.2.2
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.20.02.25.4
LowGHSA-2fvj-hgj9-j2grjetty-security@12.0.1512.0.36
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.1.116.Final4.1.133.Final
LowGHSA-g36m-9g3m-2vmpneethi@3.2.13.2.2
LowGHSA-xxh7-fcf3-rj7fjetty-server@12.0.1512.0.32
LowGHSA-pwqr-wmgm-9rr8netty-codec-http@4.1.116.Final4.1.132.Final
LowGHSA-45q3-82m4-75jrnetty-handler-proxy@4.1.116.Final4.1.133.Final
LowGHSA-w33c-445m-f8w7okio@1.14.11.17.6
LowGHSA-574f-3g2m-x479bcprov-jdk18on@1.801.80.2
LowGHSA-vrpq-qp53-qv56org.eclipse.jgit@6.10.0.202406032230-r6.10.1.202505221210-r
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.118.Final4.1.137.Final
LowGHSA-g8m5-722r-8whqjetty-server@9.4.8.v201711219.4.56
LowGHSA-5pvg-856g-cp85netty-resolver-dns@4.1.112.Final4.1.135.Final
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.191.31
LowGHSA-qv9r-c865-cp47log4j-api@2.23.12.25.5
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.116.Final4.1.125.Final
LowGHSA-q4rv-gq96-w7c5jetty-server@9.4.8.v201711219.4.57.v20241219
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.116.Final4.1.133.Final
LowGHSA-ghvc-7hp8-2g2vcxf-core@4.0.64.1.7
LowGHSA-c653-97m9-rcg9netty-handler@4.1.118.Final4.1.135.Final
LowGHSA-vc5p-v9hr-52mjlog4j-core@2.20.02.25.3
LowGHSA-93wv-jw9v-4972netty-codec-http2@4.1.118.Final4.1.136.Final
LowGHSA-6jqx-86gh-f27wnetty-codec-http@4.1.116.Final4.1.136.Final
LowGHSA-mvh2-crg5-v77cnetty-codec-http@4.1.116.Final4.1.136.Final
LowGHSA-h383-gmxw-35v2log4j-1.2-api@2.20.02.25.4
LowGHSA-558v-64gr-wgg4netty-codec@4.1.116.Final4.1.136.Final
LowGHSA-c3fc-8qff-9hwxbcprov-jdk18on@1.801.84
LowGHSA-xwmg-2g98-w7v9nimbus-jose-jwt@9.4010.0.2
LowGHSA-676x-f7gg-47vcnetty-resolver-dns@4.1.112.Final4.1.135.Final
LowGHSA-wg6q-6289-32hpbcpkix-jdk18on@1.801.84
LowGHSA-hmr7-m48g-48f6jetty-http@9.4.8.v201711219.4.52
LowGHSA-33hj-rcmx-86mvundertow-core@2.3.18.Final2.3.21.Final
LowGHSA-269g-pwp5-87ppjunit@4.124.13.1
LowGHSA-287c-fxr7-3w6cneethi@3.2.13.2.2
LowGHSA-cphf-4846-3xx9vertx-core@4.5.104.5.24
LowGHSA-xxqh-mfjm-7mv9netty-codec-http@4.1.116.Final4.1.133.Final
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.118.Final4.1.137.Final
LowGHSA-36wv-v2qp-v4g4cxf-core@4.0.64.0.7
LowGHSA-q4f6-jm68-57wwnetty-codec-http@4.1.116.Final4.1.136.Final
LowGHSA-6cqp-g7gg-8hr5netty-codec-http@4.1.116.Final4.1.136.Final
LowGHSA-6hg6-v5c8-fphqlog4j-core@2.20.02.25.4
LowGHSA-72hv-8253-57qqjackson-core@2.17.02.18.6
LowGHSA-m4cv-j2px-7723netty-codec-http@4.1.116.Final4.1.133.Final
LowGHSA-f4v5-65jj-pcr2jetty-server@12.0.1512.0.36
LowGHSA-5gvw-p9qm-jgwhjackson-databind@2.18.22.18.9
LowGHSA-c2gf-v879-257jnetty-codec-http2@4.1.118.Final4.1.135.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.3.5latest7.3.214471672,406

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/signserver/signserver-ce.svg)](https://charts.stackradar.io/charts/signserver/signserver-ce)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.