StackRadar

kobotoolbox Helm chart

one-acre-fundVerified publisher

Scored 14 Sept 2026

KoboToolbox field data collection solution

Latest 0.7.4 3 years agoApp version not verified against the render 2Artifact Hub

kobotoolbox 0.7.4 deploys 9 container images: bitnami/mongodb, library/busybox, enketo/enketo-express, jwilder/dockerize and 5 more. Across the 6 measured, 1,357 findings7 critical, 29 high 19 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 9.1.0, fixed in 10.0.1.

Radar Score

18,517729349972

1,357 findings over 6 of 9 images measured

KEV ×19 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
bitnami/mongodb5.0.10-debian-11-r3unmeasured
library/busyboxlatest00000
enketo/enketo-express3.0.435962785,324
jwilder/dockerizelatest00554502
library/nginx1.210414631,126
kobotoolbox/kobocat2.022.24a27922234,510
kobotoolbox/kpi2.022.24d2131423547,055
bitnami/postgresql14.5.0-debian-11-r35unmeasured
bitnami/redis×26.2.7-debian-11-r3unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Critical findings

5 distinct across the version’s images

Critical: findings whose contribution to the Radar Score is 70–100. Show every band

SeverityAdvisoryPackageFixed in
CriticalGHSA-j7hp-h8jx-5pprKEVpillow@9.1.010.0.1
CriticalPYSEC-2026-1794KEVpillow@9.1.010.0.1
CriticalGHSA-ch3r-j5x3-6q2mvm2@3.9.53.9.17
CriticalGHSA-7jxr-cg7f-gpgvvm2@3.9.53.9.15
CriticalGHSA-mrgp-mrhc-5jrqvm2@3.9.53.9.11

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.7.4latest3 years ago72934997218,517

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/one-acre-fund/kobotoolbox.svg)](https://charts.stackradar.io/charts/one-acre-fund/kobotoolbox)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.