kobotoolbox Helm chart

Name: kobotoolbox Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

one-acre-fund

Scored 14 Sept 2026

KoboToolbox field data collection solution

Latest 0.7.4 3 years agoApp version not verified against the render 2Artifact Hub

kobotoolbox 0.7.4 deploys 9 container images: bitnami/mongodb, library/busybox, enketo/enketo-express, jwilder/dockerize and 5 more. Across the 6 measured, 1,357 findings — 7 critical, 29 high — 19 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 9.1.0, fixed in 10.0.1.

Radar Score

18,517729349972

1,357 findings over 6 of 9 images measured

KEV ×19 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mongodb	5.0.10-debian-11-r3	—	unmeasured
library/busybox	latest	0000	0
enketo/enketo-express	3.0.4	3596278	5,324
jwilder/dockerize	latest	00554	502
library/nginx	1.21	041463	1,126
kobotoolbox/kobocat	2.022.24a	2792223	4,510
kobotoolbox/kpi	2.022.24d	213142354	7,055
bitnami/postgresql	14.5.0-debian-11-r35	—	unmeasured
bitnami/redis×2	6.2.7-debian-11-r3	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

632 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	DLA-3928-1	ffmpeg@7:4.3.4-0+deb11u1	7:4.3.8-0+deb11u1
Low	DLA-4385-1	libssh@0.9.5-1+deb11u1	0.9.8-0+deb11u2
Low	DSA-5276-1	pixman@0.40.0-1	0.40.0-1.1~deb11u1
Low	GHSA-34jh-p97f-mpxf	urllib3@1.26.9	1.26.19
Low	GHSA-qj8w-gfj5-8c6v	serialize-javascript@6.0.0	7.0.5
Low	DSA-5721-1	ffmpeg@7:4.3.4-0+deb11u1	7:4.3.7-0+deb11u1
Low	GHSA-4xh5-x5gv-qwph	pip@22.2.1	25.3
Low	DLA-4183-1	setuptools@52.0.0-4	52.0.0-4+deb11u2
Low	GHSA-w8wr-v893-vjvp	tar@4.4.19	7.5.18
Low	GHSA-j383-35pm-c5h4	grunt@1.4.1	1.5.2
Low	DSA-5239-1	gdal@3.2.2+dfsg-2+deb11u1	3.2.2+dfsg-2+deb11u2
Low	GO-2023-1705	stdlib@go1.17.1	1.19.8
Low	GHSA-m7pr-hjqh-92cm	axios@0.21.4	0.31.1
Low	GHSA-9jgg-88mc-972h	webpack-dev-server@4.8.1	5.2.1
Low	GO-2023-1878	stdlib@go1.17.1	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.45.0	0.52.0
Low	GHSA-h35f-9h28-mq5c	setuptools@63.2.0	83.0.0
Low	DSA-5394-1	ffmpeg@7:4.3.4-0+deb11u1	7:4.3.6-0+deb11u1
Low	GO-2022-1039	stdlib@go1.17.1	1.18.7
Low	DSA-5349-1	gnutls28@3.7.1-5	3.7.1-5+deb11u3
Low	GO-2024-2963	stdlib@go1.17.1	1.21.12
Low	DSA-5537-1	openjdk-11@11.0.16+8-1~deb11u1	11.0.21+9-1~deb11u1
Low	GO-2023-1702	stdlib@go1.17.1	1.19.8
Low	DSA-5567-1	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u5
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.47.0	0.55.0
Low	DSA-5250-1	dbus@1.12.20-2	1.12.24-0+deb11u1
Low	DLA-4432-1	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16
Low	GHSA-fj7v-r99m-22gq	pillow@9.1.0	12.3.0
Low	DLA-3910-1	e2fsprogs@1.46.2-2	1.46.2-2+deb11u1
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.7.5	0.8.15
Low	GHSA-6gmq-8vp8-gcm6	xmldom@0.5.0	no fix listed
Low	GHSA-mmx7-hfxf-jppx	axios@0.21.4	0.33.0
Low	GHSA-rx8g-88g5-qh64	min-document@2.19.0	2.19.1
Low	DLA-4064-1	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u6
Low	DSA-5671-1	openjdk-11@11.0.16+8-1~deb11u1	11.0.23+9-1~deb11u1
Low	GO-2022-0525	stdlib@go1.17.1	1.17.12
Low	GO-2022-0520	stdlib@go1.17.1	1.17.12
Low	GHSA-mrwq-x4v8-fh7p	pygments@2.11.2	2.15.0
Low	DLA-4257-1	libcaca@0.99.beta19-2.2	0.99.beta19-2.2+deb11u1
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	MAL-2022-4933	npm-cli-docs@0.1.0	no fix listed
Low	DLA-2932-1	tiff@4.0.8-2+deb9u7	4.0.8-2+deb9u8
Low	GHSA-4v9v-hfq4-rm2v	webpack-dev-server@4.8.1	5.2.1
Low	DSA-5409-1	libssh@0.9.5-1+deb11u1	0.9.7-0+deb11u1
Low	GHSA-q89c-q3h5-w34g	i18next-http-backend@1.3.1	3.0.5
Low	DSA-5678-1	glibc@2.31-13+deb11u3	2.31-13+deb11u10
Low	DLA-4267-1	gnutls28@3.7.1-5	3.7.1-5+deb11u8
Low	DLA-4063-1	gnutls28@3.7.1-5	3.7.1-5+deb11u7
Low	DSA-5486-1	json-c@0.15-2	0.15-2+deb11u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.4latest	3 years ago	—	729349972	18,517

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/one-acre-fund/kobotoolbox.svg)](https://charts.stackradar.io/charts/one-acre-fund/kobotoolbox)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.