StackRadar

fib Helm chart

fibonacci-cluster-appsVerified publisher

Scored 14 Sept 2026

An "app-of-apps" Helm chart with Fibonacci applications

Latest 1.0.0 1 year agoapp version 1.0.0 0Artifact Hub

fib 1.0.0 deploys 5 container images: golenski/fibonacci-front, golenski/fibonacci-task-manager, golenski/fibonacci-msg-relay, golenski/fibonacci-worker and 1 more. Across them, 1,180 findings — 23 critical, 30 high — 9 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.31, fixed in 10.1.35.

Radar Score

16,9272330283844

1,180 findings over 5 of 5 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
golenski/fibonacci-front2.0.02740111,710
golenski/fibonacci-task-manager2.0.077792504,780
golenski/fibonacci-msg-relay1.0.077792504,780
golenski/fibonacci-worker2.0.077782514,764
golenski/db-init1.0.002782893

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

487 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-4437glibc@2.36-9+deb12u12.36-9+deb12u14
LowGHSA-67mf-3cr5-8w23bcprov-jdk18on@1.771.78
LowALPINE-CVE-2021-22898curl@7.69.1-r07.77.0-r0
LowDEBIAN-CVE-2025-8941pam@1.5.2-6no fix listed
LowDSA-6015-1openssl@3.0.9-13.0.17-1~deb12u3
LowDEBIAN-CVE-2026-42012gnutls28@3.7.9-23.7.9-2+deb12u7
LowDEBIAN-CVE-2026-57432perl@5.36.0-7no fix listed
LowDLA-4127-1subversion@1.14.1-3+deb11u11.14.1-3+deb11u2
LowGHSA-xxqh-mfjm-7mv9netty-codec-http@4.1.114.Final4.1.133.Final
LowGHSA-9m3c-qcxr-9x87tomcat-embed-core@10.1.3110.1.53
LowDEBIAN-CVE-2016-2781coreutils@9.1-1no fix listed
LowDLA-3893-1expat@2.2.10-2+deb11u52.2.10-2+deb11u6
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.114.Final4.1.137.Final
LowGHSA-4cx2-fc23-5wg6bcpkix-jdk18on@1.771.79
LowDEBIAN-CVE-2026-42767openssl@3.0.9-1no fix listed
LowDEBIAN-CVE-2026-48962perl@5.36.0-7no fix listed
LowGHSA-m44j-cfrm-g8qcbcprov-jdk18on@1.771.78
LowGHSA-q4f6-jm68-57wwnetty-codec-http@4.1.114.Final4.1.136.Final
LowALPINE-CVE-2020-28928musl@1.1.24-r81.1.24-r10
LowDEBIAN-CVE-2026-42015gnutls28@3.7.9-23.7.9-2+deb12u7
LowDEBIAN-CVE-2026-76642util-linux@2.38.1-5+b1no fix listed
LowDEBIAN-CVE-2024-28834gnutls28@3.7.9-23.7.9-2+deb12u3
LowGHSA-6cqp-g7gg-8hr5netty-codec-http@4.1.114.Final4.1.136.Final
LowDEBIAN-CVE-2025-40909perl@5.36.0-75.36.0-7+deb12u3
LowDEBIAN-CVE-2026-48961perl@5.36.0-7no fix listed
LowGHSA-72hv-8253-57qqjackson-core@2.17.22.18.6
LowDEBIAN-CVE-2026-63074openssl@3.0.9-1no fix listed
LowGHSA-m4cv-j2px-7723netty-codec-http@4.1.114.Final4.1.133.Final
LowDLA-4107-1openjpeg2@2.4.0-32.4.0-3+deb11u1
LowDLA-3926-1perl@5.32.1-4+deb11u35.32.1-4+deb11u4
LowDEBIAN-CVE-2025-14831gnutls28@3.7.9-23.7.9-2+deb12u6
LowDEBIAN-CVE-2026-6238glibc@2.36-9+deb12u1no fix listed
LowGHSA-4xh5-x5gv-qwphpip@24.225.3
LowGHSA-pr98-23f8-jwxvlogback-core@1.5.111.5.13
LowALPINE-CVE-2021-42374busybox@1.31.1-r161.31.1-r21
LowDEBIAN-CVE-2023-2975openssl@3.0.9-13.0.10-1~deb12u1
LowGHSA-jhq6-gfmj-v8fxlogback-core@1.5.111.5.34
LowDEBIAN-CVE-2026-5435glibc@2.36-9+deb12u1no fix listed
LowDEBIAN-CVE-2026-54369acl@2.3.1-3no fix listed
LowDLA-4432-1curl@7.74.0-1.3+deb11u137.74.0-1.3+deb11u16
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowDEBIAN-CVE-2026-7017perl@5.36.0-7no fix listed
LowDLA-4064-1libxml2@2.9.10+dfsg-6.7+deb11u52.9.10+dfsg-6.7+deb11u6
LowGHSA-84h7-rjj3-6jx4netty-codec-http@4.1.114.Final4.1.129.Final
LowDEBIAN-CVE-2026-54371attr@1:2.5.1-4no fix listed
LowGHSA-3pjw-73gf-8qr5jackson-databind@2.17.22.18.8
LowDEBIAN-CVE-2025-0395glibc@2.36-9+deb12u12.36-9+deb12u10
LowDEBIAN-CVE-2023-4039gcc-12@12.2.0-1412.2.0-14+deb12u1
LowDSA-5678-1glibc@2.36-9+deb12u12.36-9+deb12u7
LowDLA-4267-1gnutls28@3.7.1-5+deb11u53.7.1-5+deb11u8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest1 year ago1.0.0233028384416,927

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fibonacci-cluster-apps/fib.svg)](https://charts.stackradar.io/charts/fibonacci-cluster-apps/fib)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.