dev-feed 3.1.2 Helm chart

Name: dev-feed Helm chart 3.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rm3l

Scored 14 Sept 2026

GraphQL-based API exposing a list of daily curated content from top engineering blogs and articles. https://github.com/rm3l/dev-feed

Version 3.1.2 10 months agoapp version latest 1Artifact Hub

dev-feed 3.1.2 deploys 3 container images: library/busybox, rm3l/dev-feed-api and bitnamilegacy/mariadb. Across them, 666 findings — 12 critical, 20 high — 5 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.68, fixed in 9.0.99.

Radar Score

9,8371220187447

666 findings over 3 of 3 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.28	0000	0
rm3l/dev-feed-api	latest	1217136196	6,542
bitnamilegacy/mariadb×2	11.4.3-debian-12-r0	0351251	3,295

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

447 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2025:8655	glibc@2.34-60.el9_2.7	0:2.34-168.el9_6.19
Low	RHSA-2024:9371	python3.9@3.9.16-1.el9_2.2	0:3.9.19-8.el9
Low	DEBIAN-CVE-2026-9538	perl@5.36.0-7+deb12u1	no fix listed
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.68	9.0.117
Low	DEBIAN-CVE-2025-6395	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	DEBIAN-CVE-2026-0990	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	GHSA-jjfh-589g-3hjx	spring-boot-actuator@2.7.5	2.7.18
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.68	9.0.113
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-2219	dpkg@1.21.22	1.21.23
Low	DEBIAN-CVE-2026-42497	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-24928	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	DEBIAN-CVE-2026-41992	gzip@1.12-1	no fix listed
Low	RHSA-2024:2463	systemd@252-14.el9_2.3	0:252-32.el9_4
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@9.0.68	9.0.110
Low	RHSA-2026:18599	p11-kit@0.24.1-2.el9	0:0.26.2-1.el9
Low	RHSA-2025:12447	libxml2@2.9.13-3.el9_2.1	0:2.9.13-11.el9_6
Low	DEBIAN-CVE-2024-4603	openssl@3.0.13-1~deb12u1	3.0.14-1~deb12u1
Low	GHSA-x23c-287f-qqv5	spring-webflux@5.3.23	no fix listed
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.3.23	no fix listed
Low	DEBIAN-CVE-2024-12133	libtasn1-6@4.19.0-2	4.19.0-2+deb12u1
Low	RHSA-2025:17347	libtasn1@4.16.0-8.el9_1	0:4.16.0-8.el9_2.1
Low	DEBIAN-CVE-2026-75803	openssl@3.0.13-1~deb12u1	no fix listed
Low	BIT-mariadb-2025-30693	mariadb@11.4.3-0	10.5.29
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.7.5	no fix listed
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u7	2.36-9+deb12u14
Low	RHSA-2024:4078	python3.9@3.9.16-1.el9_2.2	0:3.9.18-3.el9_4.1
Low	RHSA-2026:20602	rsync@3.2.3-19.el9	0:3.2.3-19.el9_2.3
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u1	no fix listed
Low	GHSA-42wg-hm62-jcwg	tomcat-embed-core@9.0.68	9.0.106
Low	DEBIAN-CVE-2025-32414	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u7	no fix listed
Low	BIT-mariadb-2025-30722	mariadb@11.4.3-0	10.5.29
Low	RHSA-2026:42887	java-17-openjdk@1:17.0.9.0.9-2.el9	1:17.0.20.0.8-1.1.el9
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.3.23	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u7	no fix listed
Low	BIT-mariadb-2025-21490	mariadb@11.4.3-0	10.5.28
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14	no fix listed
Low	RHSA-2026:0216	libpng@2:1.6.37-12.el9	2:1.6.37-12.el9_2.1
Low	RHSA-2026:0238	libpng@2:1.6.37-12.el9	2:1.6.37-12.el9_7.1
Low	RHSA-2024:5535	python3.9@3.9.16-1.el9_2.2	0:3.9.16-1.el9_2.5
Low	DSA-5949-1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	RHSA-2026:0936	glib2@2.68.4-6.el9	0:2.68.4-18.el9_7.1
Low	DEBIAN-CVE-2025-5222	icu@72.1-3	72.1-3+deb12u1
Low	RHSA-2024:0453	rpm@4.16.1.3-22.el9	0:4.16.1.3-24.el9_2
Low	RHSA-2024:0463	rpm@4.16.1.3-22.el9	0:4.16.1.3-27.el9_3
Low	RHSA-2025:7067	krb5@1.20.1-9.el9_2	0:1.21.1-6.el9
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u7	2.36-9+deb12u14
Low	GO-2026-4341	stdlib@go1.22.6	1.24.12
Low	RHSA-2025:18821	java-17-openjdk@1:17.0.9.0.9-2.el9	1:17.0.17.0.10-1.el9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.2latest	10 months ago	latest	1220187447	9,837

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rm3l/dev-feed.svg)](https://charts.stackradar.io/charts/rm3l/dev-feed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.