dev-feed 3.1.2 Helm chart

Name: dev-feed Helm chart 3.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rm3l

Scored 14 Sept 2026

GraphQL-based API exposing a list of daily curated content from top engineering blogs and articles. https://github.com/rm3l/dev-feed

Version 3.1.2 10 months agoapp version latest 1Artifact Hub

dev-feed 3.1.2 deploys 3 container images: library/busybox, rm3l/dev-feed-api and bitnamilegacy/mariadb. Across them, 666 findings — 12 critical, 20 high — 5 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.68, fixed in 9.0.99.

Radar Score

9,8371220187447

666 findings over 3 of 3 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.28	0000	0
rm3l/dev-feed-api	latest	1217136196	6,542
bitnamilegacy/mariadb×2	11.4.3-debian-12-r0	0351251	3,295

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

666 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.68	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.68	9.0.118
Medium	RHSA-2024:0310	openssl@1:3.0.7-17.el9_2	1:3.0.7-25.el9_3
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.68	9.0.80
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.23	5.3.33
Medium	RHSA-2024:5137	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_2.1
Medium	RHSA-2025:7050	rsync@3.2.3-19.el9	0:3.2.5-3.el9
Medium	BIT-mariadb-2026-44170	mariadb@11.4.3-0	10.6.26
Medium	DEBIAN-CVE-2024-4741	openssl@3.0.13-1~deb12u1	3.0.14-1~deb12u1
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.19.4	3.25.5
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.68	9.0.118
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.30	1.31
Medium	BIT-mariadb-2026-49261	mariadb@11.4.3-0	10.6.27
Medium	BIT-mariadb-2026-48165	mariadb@11.4.3-0	10.6.27
Medium	DEBIAN-CVE-2025-49796	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Medium	RHSA-2025:10699	libxml2@2.9.13-3.el9_2.1	0:2.9.13-10.el9_6
Medium	RHSA-2025:12199	libxml2@2.9.13-3.el9_2.1	0:2.9.13-3.el9_2.7
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.68	9.0.83
Medium	DEBIAN-CVE-2024-56171	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.68	9.0.90
Medium	GHSA-rq2w-37h9-vg94	tomcat-embed-core@9.0.68	9.0.69
Medium	GHSA-g5h3-w546-pj7f	spring-boot-actuator-autoconfigure@2.7.5	2.7.11
Medium	RHSA-2025:1330	openssl@1:3.0.7-17.el9_2	1:3.2.2-6.el9_5.1
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u7	no fix listed
Medium	DEBIAN-CVE-2026-42010	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Medium	DEBIAN-CVE-2024-34459	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	RHSA-2024:6909	python3.9@3.9.16-1.el9_2.2	0:3.9.16-1.el9_2.8
Medium	RHSA-2024:8446	python3.9@3.9.16-1.el9_2.2	0:3.9.18-3.el9_4.6
Medium	DEBIAN-CVE-2023-31486	perl@5.36.0-7+deb12u1	no fix listed
Medium	RHSA-2023:6661	gmp@1:6.2.0-10.el9	1:6.2.0-13.el9
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.68	9.0.106
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.68	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.68	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.68	9.0.118
Medium	RHBA-2024:2518	expat@2.5.0-1.el9	0:2.5.0-2.el9_4
Medium	RHSA-2024:1530	expat@2.5.0-1.el9	0:2.5.0-1.el9_3.1
Medium	RHSA-2024:3926	expat@2.5.0-1.el9	0:2.5.0-1.el9_2.1
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.68	9.0.107
Medium	BIT-mariadb-2026-32710	mariadb@11.4.3-0	11.4.10
Medium	DEBIAN-CVE-2023-31484	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.68	9.0.107
Medium	RHSA-2024:5643	krb5@1.20.1-9.el9_2	0:1.20.1-9.el9_2.1
Medium	RHSA-2024:6166	krb5@1.20.1-9.el9_2	0:1.21.1-2.el9_4
Medium	RHSA-2024:2410	harfbuzz@2.7.4-8.el9	0:2.7.4-10.el9
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.10.1-3	no fix listed
Medium	RHSA-2026:19368	rsync@3.2.3-19.el9	0:3.2.5-7.el9_8
Medium	RHSA-2026:20612	gnutls@3.7.6-21.el9_2	0:3.8.10-4.el9_8
Medium	RHSA-2026:41921	gnutls@3.7.6-21.el9_2	0:3.7.6-21.el9_2.7
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.68	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.68	9.0.121

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.2latest	10 months ago	latest	1220187447	9,837

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rm3l/dev-feed.svg)](https://charts.stackradar.io/charts/rm3l/dev-feed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.