StackRadar

kobotoolbox 0.7.4 Helm chart

one-acre-fundVerified publisher

Scored 14 Sept 2026

KoboToolbox field data collection solution

Version 0.7.4 3 years agoApp version not verified against the render 2Artifact Hub

kobotoolbox 0.7.4 deploys 9 container images: bitnami/mongodb, library/busybox, enketo/enketo-express, jwilder/dockerize and 5 more. Across the 6 measured, 1,357 findings7 critical, 29 high 19 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 9.1.0, fixed in 10.0.1.

Radar Score

18,517729349972

1,357 findings over 6 of 9 images measured

KEV ×19 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
bitnami/mongodb5.0.10-debian-11-r3unmeasured
library/busyboxlatest00000
enketo/enketo-express3.0.435962785,324
jwilder/dockerizelatest00554502
library/nginx1.210414631,126
kobotoolbox/kobocat2.022.24a27922234,510
kobotoolbox/kpi2.022.24d2131423547,055
bitnami/postgresql14.5.0-debian-11-r35unmeasured
bitnami/redis×26.2.7-debian-11-r3unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

234 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDLA-3859-1systemd@247.3-7247.3-7+deb11u6
MediumDSA-5620-1unbound@1.13.1-11.13.1-1+deb11u2
MediumGHSA-hrpp-h998-j3ppqs@6.5.26.5.3
MediumDSA-5169-1openssl@1.1.1n-0+deb11u21.1.1n-0+deb11u3
MediumDSA-5586-1openssh@1:8.4p1-5+deb11u11:8.4p1-5+deb11u3
MediumDSA-5591-1libssh@0.9.5-1+deb11u10.9.8-0+deb11u1
MediumGHSA-6v56-cpg6-3rpxmercurial@4.04.4.1
MediumGO-2024-2687stdlib@go1.17.11.21.9
MediumDLA-4052-1postgresql-13@13.7-0+deb11u113.19-0+deb11u1
MediumDSA-5673-1glibc@2.31-13+deb11u32.31-13+deb11u9
MediumGHSA-6w2r-r2m5-xq5wdjango@2.2.284.2.24
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.45.00.52.0
MediumDLA-3898-1nghttp2@1.43.0-11.43.0-1+deb11u2
MediumGHSA-3qmg-c9vc-r47jmercurial@4.04.3
MediumDLA-3008-1openssl@1.1.0l-1~deb9u41.1.0l-1~deb9u6
MediumDSA-5523-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u10
MediumDSA-5417-1openssl@1.1.1n-0+deb11u21.1.1n-0+deb11u5
MediumDLA-2952-1openssl@1.1.0l-1~deb9u41.1.0l-1~deb9u5
MediumDLA-2953-1openssl1.0@1.0.2u-1~deb9u61.0.2u-1~deb9u7
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumGHSA-xvch-5gv4-984hminimist@1.2.51.2.6
MediumDLA-3017-1openldap@2.4.44+dfsg-5+deb9u82.4.44+dfsg-5+deb9u9
MediumDLA-3904-1cups@2.3.3op2-3+deb11u22.3.3op2-3+deb11u9
MediumGHSA-g644-9gfx-q4q4vm2@3.9.5no fix listed
MediumDSA-5343-1openssl@1.1.1n-0+deb11u21.1.1n-0+deb11u4
MediumGHSA-cchq-frgv-rjh5vm2@3.9.53.10.0
MediumGHSA-xj72-wvfv-8985vm2@3.9.53.9.16
MediumDSA-5332-1git@1:2.30.2-11:2.30.2-1+deb11u1
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumDLA-3942-1openssl@1.1.1n-0+deb11u21.1.1n-0+deb11u6
MediumDLA-3942-2openssl@1.1.1n-0+deb11u21.1.1w-0+deb11u2
MediumGHSA-9c47-m6qq-7p4hjson5@2.2.12.2.2
MediumDLA-3867-1git@1:2.30.2-11:2.30.2-1+deb11u3
MediumDLA-2968-1zlib@1:1.2.8.dfsg-51:1.2.8.dfsg-5+deb9u1
MediumGHSA-w24h-v9qh-8gxjdjango@2.2.272.2.28
MediumGHSA-6pw2-5hjv-9pf7vm2@3.9.53.9.6
MediumGHSA-76p3-8jx3-jpfqloader-utils@2.0.02.0.3
MediumDSA-5728-1exim4@4.94.2-74.94.2-7+deb11u3
MediumGHSA-3mjj-mr4f-qxmxmercurial@4.04.6.1
MediumGHSA-j7qv-pgf6-hvh4jquery-ui@1.12.11.13.0
MediumGHSA-8hfj-j24r-96c4moment@2.29.12.29.2
MediumDLA-2935-1expat@2.2.0-2+deb9u32.2.0-2+deb9u5
MediumGHSA-wc69-rhjr-hc9gmoment@2.29.12.29.4
MediumPYSEC-2022-43145pillow@9.1.09.1.1
MediumDSA-5197-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u2
MediumGHSA-hvr9-wr9p-grgrmercurial@4.04.3.1
MediumGHSA-4mr4-7vjv-9hm6mercurial@4.04.5.1
MediumDSA-5512-1exim4@4.94.2-74.94.2-7+deb11u1
MediumGHSA-gx6r-qc2v-3p3vsysteminformation@5.9.95.21.7
MediumGHSA-6j2x-vhqr-qr7qvm2@3.9.53.11.4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.7.4latest3 years ago72934997218,517

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/one-acre-fund/kobotoolbox.svg)](https://charts.stackradar.io/charts/one-acre-fund/kobotoolbox)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.