gocd/gocd-server:v19.3.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of gocd/gocd-server

gocd/gocd-server:v19.3.0 resolved to 2da45cb09d57, scanned 14 Sept 2026: 254 findings, 9 critical, 2 on KEV; deployed by 1 chart, among them gocd.

Radar Score

7,17894812572

254 findings on digest 2da45cb09d57 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v19.3.0resolves to	2da45cb09d57	1 chart	7 days ago	94812572	7,178

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

254 distinct on this digest

Findings for digest 2da45cb09d57 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.59	1.78
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.59	1.84
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.14.v20181114	9.4.52
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.59	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2021-23839	openssl@1.1.1b-r1	1.1.1j-r0
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.4.14.v20181114	9.4.54
Low	GHSA-72m5-fvvv-55m6	bcprov-jdk15on@1.59	1.61
Low	GHSA-2rmj-mq67-h97g	spring-web@4.3.22.RELEASE	5.3.38
Low	ALPINE-CVE-2019-1547	openssl@1.1.1b-r1	1.1.1d-r0
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.59	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.59	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2020-28928	musl@1.1.20-r4	1.1.20-r6
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-web@4.3.22.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@4.3.22.RELEASE	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-337m-mw94-2v6g	commons-configuration2@2.4	2.15.0
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.9.6	2.18.8
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.9.4	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@4.3.22.RELEASE	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.9.4	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.14.v20181114	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@4.2.11.RELEASE	no fix listed
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.14.v20181114	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@4.3.22.RELEASE	5.3.39
Low	GHSA-3gh6-v5v9-6v9j	jetty-servlets@9.4.14.v20181114	9.4.52
Low	GHSA-293q-567p-wmwq	spring-security-web@4.2.11.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@4.2.11.RELEASE	5.7.14
Low	GHSA-m6cp-vxjx-65j6	jetty-server@9.4.14.v20181114	9.4.41
Low	GHSA-7g45-4rm6-3mm3	guava@20.0	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GHSA-5mg8-w23w-74h3	guava@20.0	32.0.0-android
Low	GHSA-957g-f97v-vppc	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.9.6	2.13.0
Low	GHSA-cj7v-27pg-wf7q	jetty-http@9.4.14.v20181114	9.4.47
Low	GHSA-p26g-97m4-6q7c	jetty-server@9.4.14.v20181114	9.4.51.v20230217
Low	GHSA-659m-px2c-25wj	spring-core@4.3.22.RELEASE	no fix listed
Low	ALPINE-CVE-2019-1348	git@2.20.1-r0	2.20.2-r0
Low	GHSA-4wp7-92pw-q264	spring-context@4.3.22.RELEASE	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@4.3.22.RELEASE	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@4.3.22.RELEASE	no fix listed
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@9.4.14.v20181114	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@4.3.22.RELEASE	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
gocdcloudnativeapp	1.9.2	v19.3.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.