gocd/gocd-server:v19.3.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gocd/gocd-server
gocd/gocd-server:v19.3.0 resolved to 2da45cb09d57, scanned 14 Sept 2026: 254 findings, 9 critical, 2 on KEV; deployed by 1 chart, among them gocd.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
254 distinct on this digest
Findings for digest 2da45cb09d57 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-58pp-9c76-5625 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-rf6r-2c4q-2vwg | jackson-databind | 2.9.10.4 |
| Medium | GHSA-v3xw-c963-f5hc | jackson-databind | 2.9.10.4 |
| Medium | GHSA-758m-v56v-grj4 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-mc6h-4qgp-37qh | jackson-databind | 2.9.10.5 |
| Medium | GHSA-g5mm-vmx4-3rg7 | spring-context | 5.2.21.RELEASE |
| Medium | GHSA-cf6r-3wgc-h863 | jackson-databind | 2.9.10 |
| Medium | GHSA-c2q3-4qrh-fm48 | jackson-databind | 2.9.10.5 |
| Medium | ALPINE-CVE-2020-11080 | nghttp2 | 1.35.1-r2 |
| Medium | GHSA-cmfg-87vq-g5g4 | jackson-databind | 2.9.9.1 |
| Medium | GHSA-7vx9-xjhr-rw6h | jetty-server | 9.4.16.v20190411 |
| Medium | GHSA-gq28-h5vg-8prx | spring-security-web | 5.2.9 |
| Medium | GHSA-h2f4-v4c4-6wx4 | jetty-server | 9.4.12.v20180830 |
| Medium | ALPINE-CVE-2019-1551 | openssl | 1.1.1d-r2 |
| Medium | ALPINE-CVE-2019-1353 | git | 2.20.2-r0 |
| Medium | GHSA-ccgv-vj62-xf9h | spring-web | no fix listed |
| Medium | GHSA-95cm-88f5-f2c7 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | ALPINE-CVE-2019-17498 | libssh2 | 1.9.0-r1 |
| Medium | GHSA-27xj-rqx5-2255 | jackson-databind | 2.9.10.4 |
| Medium | ALPINE-CVE-2020-28196 | krb5 | 1.15.5-r1 |
| Medium | ALPINE-CVE-2020-11655 | sqlite | 3.28.0-r3 |
| Medium | GHSA-rpr3-cw39-3pxh | jackson-databind | 2.9.10.4 |
| Medium | GHSA-qmqc-x3r4-6v39 | jackson-databind | 2.9.10 |
| Medium | ALPINE-CVE-2020-11008 | git | 2.20.4-r0 |
| Medium | ALPINE-CVE-2020-8231 | curl | 7.66.0-r5 |
| Medium | ALPINE-CVE-2021-23841 | openssl | 1.1.1j-r0 |
| Medium | GHSA-xqj7-j8j5-f2xr | bcprov-jdk15on | 1.60 |
| Medium | GHSA-3p86-9955-h393 | org.eclipse.jgit | 5.13.3.202401111512-r |
| Medium | GHSA-g3wg-6mcf-8jj6 | jetty-webapp | 9.4.33.v20201020 |
| Medium | ALPINE-CVE-2020-8169 | curl | 7.64.0-r4 |
| Medium | ALPINE-CVE-2019-0203 | subversion | 1.12.2-r0 |
| Medium | ALPINE-CVE-2020-1971 | openssl | 1.1.1i-r0 |
| Medium | ALPINE-CVE-2019-19244 | sqlite | 3.28.0-r2 |
| Medium | GHSA-9wcx-326r-7j7w | activemq-core | 5.6.0 |
| Medium | GHSA-hgjh-9rj2-g67j | spring-web | 5.3.33 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | GHSA-668q-qrv7-99fm | logback-core | 1.2.9 |
| Medium | GHSA-wxr5-93ph-8wr9 | commons-beanutils | 1.11.0 |
| Medium | GHSA-j8jw-g6fq-mp7h | hibernate-core | 5.3.20.Final |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | ALPINE-CVE-2019-16168 | sqlite | 3.28.0-r1 |
| Medium | ALPINE-CVE-2019-2201 | libjpeg-turbo | 1.5.3-r6 |
| Medium | GHSA-3mc7-4q67-w48m | snakeyaml | 1.31 |
| Medium | GHSA-rp9p-863f-9c4h | activemq-core | 5.8.0 |
| Medium | GHSA-gwrp-pvrq-jmwv | commons-io | 2.7 |
| Medium | GHSA-c9gx-27hq-wcvj | activemq-core | 5.9.0 |
| Medium | GHSA-mvr2-9pj6-7w5j | guava | 24.1.1-android |
| Medium | GHSA-r5c2-rxh2-f5h2 | jasypt | 1.9.2 |