StackRadar

fib 1.0.0 Helm chart

fibonacci-cluster-appsVerified publisher

Scored 14 Sept 2026

An "app-of-apps" Helm chart with Fibonacci applications

Version 1.0.0 1 year agoapp version 1.0.0 0Artifact Hub

fib 1.0.0 deploys 5 container images: golenski/fibonacci-front, golenski/fibonacci-task-manager, golenski/fibonacci-msg-relay, golenski/fibonacci-worker and 1 more. Across them, 1,180 findings — 23 critical, 30 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.31, fixed in 10.1.35.

Radar Score

16,9272330283844

1,180 findings over 5 of 5 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
golenski/fibonacci-front2.0.02740111,710
golenski/fibonacci-task-manager2.0.077792504,780
golenski/fibonacci-msg-relay1.0.077792504,780
golenski/fibonacci-worker2.0.077782514,764
golenski/db-init1.0.002782893

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

487 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-83qj-6fr2-vhqgKEVtomcat-embed-core@10.1.3110.1.35
CriticalALPINE-CVE-2020-15999KEVfreetype@2.10.2-r02.10.4-r0
CriticalALPINE-CVE-2021-3711openssl@1.1.1g-r01.1.1l-r0
CriticalDEBIAN-CVE-2023-4911KEVglibc@2.36-9+deb12u12.36-9+deb12u3
CriticalDEBIAN-CVE-2023-50387systemd@252.12-1~deb12u1252.23-1~deb12u1
CriticalGHSA-5j33-cvvr-w245tomcat-embed-core@10.1.3110.1.34
CriticalGHSA-3p2h-wqq4-wf4htomcat-embed-core@10.1.3110.1.40
CriticalDEBIAN-CVE-2023-50868systemd@252.12-1~deb12u1252.23-1~deb12u1
CriticalDEBIAN-CVE-2024-2961glibc@2.36-9+deb12u12.36-9+deb12u6
HighDEBIAN-CVE-2025-15467openssl@3.0.9-13.0.18-1~deb12u2
HighALPINE-CVE-2022-0778openssl@1.1.1g-r01.1.1n-r0
HighDEBIAN-CVE-2024-6119openssl@3.0.9-13.0.14-1~deb12u2
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@10.1.3110.1.45
HighGHSA-h3gc-qfqq-6h8ftomcat-embed-core@10.1.3110.1.42
HighALPINE-CVE-2018-25032zlib@1.2.11-r31.2.12-r0
HighALPINE-CVE-2021-23840openssl@1.1.1g-r01.1.1j-r0
HighALPINE-CVE-2021-3712openssl@1.1.1g-r01.1.1l-r0
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.12-r2
HighALPINE-CVE-2021-30560libxslt@1.1.34-r01.1.35-r0
HighALPINE-CVE-2021-3449openssl@1.1.1g-r01.1.1k-r0
HighDEBIAN-CVE-2024-2511openssl@3.0.9-13.0.14-1~deb12u1
HighGHSA-vfww-5hm6-hx2jtomcat-embed-core@10.1.3110.1.45
HighGHSA-27hp-xhwr-wr2mtomcat-embed-core@10.1.3110.1.34
HighDLA-4104-1KEVfreetype@2.10.4+dfsg-1+deb11u12.10.4+dfsg-1+deb11u2
HighDLA-4323-1KEVgit@1:2.30.2-1+deb11u31:2.30.2-1+deb11u5
MediumDLA-4052-1postgresql-13@13.16-0+deb11u113.19-0+deb11u1
MediumDLA-3898-1nghttp2@1.43.0-1+deb11u11.43.0-1+deb11u2
MediumALPINE-CVE-2021-3517libxml2@2.9.10-r42.9.10-r6
MediumALPINE-CVE-2021-22945curl@7.69.1-r07.79.0-r0
MediumDEBIAN-CVE-2024-5535openssl@3.0.9-13.0.15-1~deb12u1
MediumALPINE-CVE-2020-8285curl@7.69.1-r07.69.1-r3
MediumDLA-3942-2openssl@1.1.1w-0+deb11u11.1.1w-0+deb11u2
MediumALPINE-CVE-2022-1271xz@5.2.5-r05.2.5-r1
MediumDSA-6113-1openssl@3.0.9-13.0.18-1~deb12u2
MediumDEBIAN-CVE-2019-1010022glibc@2.36-9+deb12u1no fix listed
MediumDEBIAN-CVE-2023-45853zlib@1:1.2.13.dfsg-1no fix listed
MediumALPINE-CVE-2022-27404freetype@2.10.2-r02.10.4-r1
MediumALPINE-CVE-2022-23308libxml2@2.9.10-r42.9.13-r0
MediumALPINE-CVE-2021-3518libxml2@2.9.10-r42.9.10-r6
MediumDEBIAN-CVE-2026-45447openssl@3.0.9-13.0.20-1~deb12u2
MediumDEBIAN-CVE-2018-20796glibc@2.36-9+deb12u1no fix listed
MediumALPINE-CVE-2022-28391busybox@1.31.1-r161.31.1-r22
MediumDEBIAN-CVE-2023-6246glibc@2.36-9+deb12u12.36-9+deb12u4
MediumALPINE-CVE-2021-39537ncurses@6.2_p20200523-r06.2_p20200523-r1
MediumDEBIAN-CVE-2019-1010023glibc@2.36-9+deb12u1no fix listed
MediumALPINE-CVE-2021-36159apk-tools@2.10.5-r12.10.7-r0
MediumALPINE-CVE-2020-8286curl@7.69.1-r07.69.1-r3
MediumALPINE-CVE-2021-22946curl@7.69.1-r07.79.0-r0
MediumALPINE-CVE-2020-8231curl@7.69.1-r07.69.1-r2
MediumALPINE-CVE-2021-23841openssl@1.1.1g-r01.1.1j-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest1 year ago1.0.0233028384416,927

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fibonacci-cluster-apps/fib.svg)](https://charts.stackradar.io/charts/fibonacci-cluster-apps/fib)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.