StackRadar

dev-feed 3.1.2 Helm chart

rm3lVerified publisher

Scored 14 Sept 2026

GraphQL-based API exposing a list of daily curated content from top engineering blogs and articles. https://github.com/rm3l/dev-feed

Version 3.1.2 10 months agoapp version latest 1Artifact Hub

dev-feed 3.1.2 deploys 3 container images: library/busybox, rm3l/dev-feed-api and bitnamilegacy/mariadb. Across them, 666 findings — 12 critical, 20 high — 5 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.68, fixed in 9.0.99.

Radar Score

9,8371220187447

666 findings over 3 of 3 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.2800000
rm3l/dev-feed-apilatest12171361966,542
bitnamilegacy/mariadb×211.4.3-debian-12-r003512513,295

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

187 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-cx7f-g6mp-7hqmspring-webflux@5.3.23no fix listed
MediumGHSA-cx7f-g6mp-7hqmspring-webmvc@5.3.23no fix listed
MediumRHSA-2023:6659python3.9@3.9.16-1.el9_2.20:3.9.18-1.el9_3
MediumRHSA-2023:6694python-pip@21.2.3-6.el90:21.2.3-7.el9
MediumDEBIAN-CVE-2024-5535openssl@3.0.13-1~deb12u13.0.15-1~deb12u1
MediumRHSA-2025:0324rsync@3.2.3-19.el90:3.2.3-20.el9_5.1
MediumDSA-6113-1openssl@3.0.13-1~deb12u13.0.18-1~deb12u2
MediumDEBIAN-CVE-2019-1010022glibc@2.36-9+deb12u7no fix listed
MediumDEBIAN-CVE-2023-45853zlib@1:1.2.13.dfsg-1no fix listed
MediumRHSA-2026:25239openssl@1:3.0.7-17.el9_21:3.5.5-4.el9_8
MediumGHSA-7phw-cxx7-q9vqspring-webmvc@5.3.235.3.26
MediumDEBIAN-CVE-2026-45447openssl@3.0.13-1~deb12u13.0.20-1~deb12u2
MediumDEBIAN-CVE-2018-20796glibc@2.36-9+deb12u7no fix listed
MediumGHSA-ccgv-vj62-xf9hspring-web@5.3.235.3.32
MediumDEBIAN-CVE-2019-1010023glibc@2.36-9+deb12u7no fix listed
MediumGHSA-wm9w-rjj3-j356tomcat-embed-core@9.0.689.0.90
MediumRHSA-2023:6699krb5@1.20.1-9.el9_20:1.21.1-1.el9
MediumRHSA-2024:2447openssl@1:3.0.7-17.el9_21:3.0.7-27.el9
MediumGHSA-gqp3-2cvr-x8m3tomcat-embed-core@9.0.689.0.108
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@9.0.689.0.118
MediumRHSA-2024:0310openssl@1:3.0.7-17.el9_21:3.0.7-25.el9_3
MediumGHSA-q3mw-pvr8-9ggctomcat-embed-core@9.0.689.0.80
MediumGHSA-hgjh-9rj2-g67jspring-web@5.3.235.3.33
MediumRHSA-2024:5137python-setuptools@53.0.0-12.el90:53.0.0-12.el9_2.1
MediumRHSA-2025:7050rsync@3.2.3-19.el90:3.2.5-3.el9
MediumBIT-mariadb-2026-44170mariadb@11.4.3-010.6.26
MediumDEBIAN-CVE-2024-4741openssl@3.0.13-1~deb12u13.0.14-1~deb12u1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.19.43.25.5
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@9.0.689.0.118
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.301.31
MediumBIT-mariadb-2026-49261mariadb@11.4.3-010.6.27
MediumBIT-mariadb-2026-48165mariadb@11.4.3-010.6.27
MediumDEBIAN-CVE-2025-49796libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u3
MediumRHSA-2025:10699libxml2@2.9.13-3.el9_2.10:2.9.13-10.el9_6
MediumRHSA-2025:12199libxml2@2.9.13-3.el9_2.10:2.9.13-3.el9_2.7
MediumGHSA-fccv-jmmp-qg76tomcat-embed-core@9.0.689.0.83
MediumDEBIAN-CVE-2024-56171libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
MediumGHSA-7jqf-v358-p8g7tomcat-embed-core@9.0.689.0.90
MediumGHSA-rq2w-37h9-vg94tomcat-embed-core@9.0.689.0.69
MediumGHSA-g5h3-w546-pj7fspring-boot-actuator-autoconfigure@2.7.52.7.11
MediumRHSA-2025:1330openssl@1:3.0.7-17.el9_21:3.2.2-6.el9_5.1
MediumDEBIAN-CVE-2019-9192glibc@2.36-9+deb12u7no fix listed
MediumDEBIAN-CVE-2026-42010gnutls28@3.7.9-2+deb12u33.7.9-2+deb12u7
MediumDEBIAN-CVE-2024-34459libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
MediumRHSA-2024:6909python3.9@3.9.16-1.el9_2.20:3.9.16-1.el9_2.8
MediumRHSA-2024:8446python3.9@3.9.16-1.el9_2.20:3.9.18-3.el9_4.6
MediumDEBIAN-CVE-2023-31486perl@5.36.0-7+deb12u1no fix listed
MediumRHSA-2023:6661gmp@1:6.2.0-10.el91:6.2.0-13.el9
MediumGHSA-wc4r-xq3c-5cf3tomcat-embed-core@9.0.689.0.106
MediumGHSA-r6j3-px5g-cq3xtomcat-embed-core@9.0.689.0.81

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.1.2latest10 months agolatest12201874479,837

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/rm3l/dev-feed.svg)](https://charts.stackradar.io/charts/rm3l/dev-feed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.