StackRadar

fib 1.0.0 Helm chart

fibonacci-cluster-appsVerified publisher

Scored 14 Sept 2026

An "app-of-apps" Helm chart with Fibonacci applications

Version 1.0.0 1 year agoapp version 1.0.0 0Artifact Hub

fib 1.0.0 deploys 5 container images: golenski/fibonacci-front, golenski/fibonacci-task-manager, golenski/fibonacci-msg-relay, golenski/fibonacci-worker and 1 more. Across them, 1,180 findings — 23 critical, 30 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.31, fixed in 10.1.35.

Radar Score

16,9272330283844

1,180 findings over 5 of 5 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
golenski/fibonacci-front2.0.02740111,710
golenski/fibonacci-task-manager2.0.077792504,780
golenski/fibonacci-msg-relay1.0.077792504,780
golenski/fibonacci-worker2.0.077782514,764
golenski/db-init1.0.002782893

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

487 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDLA-4455-1python3.9@3.9.2-13.9.2-1+deb11u5
LowDEBIAN-CVE-2023-31437systemd@252.12-1~deb12u1no fix listed
LowGHSA-6p4f-wcwh-5vvmspring-webmvc@6.1.14no fix listed
LowDEBIAN-CVE-2025-68973gnupg2@2.2.40-1.12.2.40-1.1+deb12u2
LowDLA-4315-1tiff@4.2.0-1+deb11u54.2.0-1+deb11u7
LowDEBIAN-CVE-2023-52968mariadb-10.5@1:10.5.23-0+deb11u11:10.5.26-0+deb11u1
LowDEBIAN-CVE-2026-4438glibc@2.36-9+deb12u12.36-9+deb12u14
LowDEBIAN-CVE-2024-28835gnutls28@3.7.9-23.7.9-2+deb12u3
LowDEBIAN-CVE-2023-31438systemd@252.12-1~deb12u1no fix listed
LowDLA-4339-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u7
LowDLA-4273-1postgresql-13@13.16-0+deb11u113.22-0+deb11u1
LowDLA-3951-1curl@7.74.0-1.3+deb11u137.74.0-1.3+deb11u14
LowGHSA-wwpq-f5c3-7hvxspring-boot@3.3.5no fix listed
LowDLA-4159-1postgresql-13@13.16-0+deb11u113.21-0+deb11u1
LowDLA-3875-1gnutls28@3.7.1-5+deb11u53.7.1-5+deb11u6
LowGHSA-gcjf-9mgh-3p7gnetty-codec-http@4.1.114.Final4.1.136.Final
LowGHSA-v8h7-rr48-vmmvnetty-codec-http@4.1.114.Final4.1.133.Final
LowDEBIAN-CVE-2026-78410util-linux@2.38.1-5+b1no fix listed
LowDEBIAN-CVE-2026-89161pcre2@10.42-110.42-1+deb12u1
LowDEBIAN-CVE-2025-14104util-linux@2.38.1-5+b1no fix listed
LowDEBIAN-CVE-2026-42014gnutls28@3.7.9-23.7.9-2+deb12u7
LowDLA-4133-1wget@1.21-1+deb11u11.21-1+deb11u2
LowDLA-4497-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u10
LowDEBIAN-CVE-2026-4105systemd@252.12-1~deb12u1252.39-1~deb12u2
LowDEBIAN-CVE-2026-78409util-linux@2.38.1-5+b1no fix listed
LowDLA-4492-1gnutls28@3.7.1-5+deb11u53.7.1-5+deb11u9
LowDEBIAN-CVE-2024-13176openssl@3.0.9-13.0.16-1~deb12u1
LowDEBIAN-CVE-2023-4641shadow@1:4.13+dfsg1-1+b11:4.13+dfsg1-1+deb12u1
LowDEBIAN-CVE-2026-45446openssl@3.0.9-13.0.20-1~deb12u2
LowDLA-4429-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u8
LowDLA-4146-1libxml2@2.9.10+dfsg-6.7+deb11u52.9.10+dfsg-6.7+deb11u7
LowGHSA-25qh-j22f-pwp8logback-core@1.5.111.5.19
LowDLA-4448-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u9
LowDLA-3930-1libsepol@3.1-13.1-1+deb11u1
LowDEBIAN-CVE-2026-40225systemd@252.12-1~deb12u1252.39-1~deb12u2
LowDEBIAN-CVE-2026-27171zlib@1:1.2.13.dfsg-1no fix listed
LowDEBIAN-CVE-2025-1390libcap2@1:2.66-41:2.66-4+deb12u1
LowDEBIAN-CVE-2017-18018coreutils@9.1-1no fix listed
LowDLA-4139-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u5
LowDEBIAN-CVE-2026-13757p11-kit@0.24.1-2no fix listed
LowGHSA-hvcg-qmg6-jm4cnetty-codec-http@4.1.114.Final4.1.135.Final
LowDEBIAN-CVE-2025-8058glibc@2.36-9+deb12u12.36-9+deb12u13
LowDEBIAN-CVE-2026-56392coreutils@9.1-1no fix listed
LowDLA-4065-1krb5@1.18.3-6+deb11u51.18.3-6+deb11u6
LowDEBIAN-CVE-2026-54370acl@2.3.1-3no fix listed
LowDLA-4094-1mercurial@5.6.1-45.6.1-4+deb11u1
LowDEBIAN-CVE-2005-2541tar@1.34+dfsg-1.2no fix listed
LowGHSA-957g-f97v-vppcspring-webmvc@6.1.14no fix listed
LowDEBIAN-CVE-2026-15534perl@5.36.0-7no fix listed
LowDLA-4128-1glib2.0@2.66.8-1+deb11u42.66.8-1+deb11u6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest1 year ago1.0.0233028384416,927

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fibonacci-cluster-apps/fib.svg)](https://charts.stackradar.io/charts/fibonacci-cluster-apps/fib)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.