feedbacksystem 0.47.1 Helm chart

Name: feedbacksystem Helm chart 0.47.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thm-mni-ii

Scored 14 Sept 2026

Intelligent, personalized feedback for students using artificial intelligence

Version 0.47.1 11 months agoapp version v1.27.1 2Artifact Hub

feedbacksystem 0.47.1 deploys 10 container images: bitnamilegacy/minio, thmmniii/fbs-collab, thmmniii/fbs-core, thmmniii/fbs-qcm-backend and 6 more. Across them, 2,271 findings — 17 critical, 51 high — 14 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.75, fixed in 9.0.99.

Radar Score

28,53417514251,777

2,271 findings over 10 of 10 images measured

KEV ×14 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/minio	2023.12.23-debian-11-r2	0225180	2,265
thmmniii/fbs-collab	v1.27.1	012362	1,110
thmmniii/fbs-core	v1.27.1	1019140443	8,602
thmmniii/fbs-qcm-backend	v1.27.1	012990	1,499
thmmniii/fbs-qcm-frontend	v1.27.1	0439182	2,606
thmmniii/fbs-runner	v1.27.1	1660209	3,413
library/docker	20.10.21-dind	21257204	3,746
bitnamilegacy/mongodb×3	6.0.10-debian-11-r8	2521187	2,470
bitnamilegacy/mysql×2	8.0.35-debian-11-r2	00494	821
bitnamilegacy/postgresql×3	15.4.0-debian-11-r45	2127126	2,002

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,352 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.75	9.0.99
Critical	GHSA-f58c-gq56-vjjf	tika-core@2.8.0	3.2.2
Critical	ALPINE-CVE-2023-38408	openssh@9.1_p1-r1	9.1_p1-r4
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.30	2.0
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.11.1+dfsg-1ubuntu0.1	2.11.1+dfsg-1ubuntu0.3
Critical	ALPINE-CVE-2024-6387	openssh@9.1_p1-r1	9.1_p1-r6
Critical	BIT-postgresql-2025-1094	postgresql@15.4.0-6	13.19.0
Critical	BIT-postgresql-2025-1094	PostgreSQL@15.4.0	13.19.0
Critical	UBUNTU-CVE-2023-4911KEV	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.4
Critical	BIT-mongodb-2025-14847KEV	MongoDB (R)@6.0.10	4.4.30
Critical	BIT-mongodb-2025-14847KEV	mongodb@6.0.10-1	4.4.30
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.1
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.75	9.0.98
Critical	UBUNTU-CVE-2022-3786	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.7
Critical	UBUNTU-CVE-2022-3602	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.7
Critical	UBUNTU-CVE-2024-2961	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.7
High	ALPINE-CVE-2025-15467	openssl@3.5.1-r0	3.5.5-r0
High	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.21
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.27	6.0.0
High	ALPINE-CVE-2024-6119	openssl@3.0.7-r0	3.0.15-r0
High	UBUNTU-CVE-2024-6119	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.18
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.75	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.75	9.0.106
High	ALPINE-CVE-2023-0286	openssl@3.0.7-r0	3.0.8-r0
High	UBUNTU-CVE-2023-0286	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.8
High	GHSA-xx8w-mq23-29g4	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	0.0.0-20240131185645-0ae4915a9391
High	GHSA-g5vr-rgqm-vf78	spring-webflux@5.3.27	no fix listed
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.27	no fix listed
High	ALPINE-CVE-2023-2650	openssl@3.0.7-r0	3.0.9-r0
High	UBUNTU-CVE-2023-2650	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.10
High	ALPINE-CVE-2023-48795	openssh@9.1_p1-r1	9.1_p1-r5
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20231218163308-9d2ee975ef9f
High	UBUNTU-CVE-2023-48795	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.2
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-2ubuntu9	1:1.2.11.dfsg-2ubuntu9.2
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v20.10.3-0.20221021173910-5aac513617f0+incompatible	23.0.15
High	GHSA-4r4m-qw57-chr8KEV	vite@5.4.11	5.4.16
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.75	9.0.81
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.19.0	0.23.0
High	UBUNTU-CVE-2024-28182	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.2
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.3	1.1.12
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	GHSA-x574-m823-4x7w	vite@5.4.11	5.4.15
High	ALPINE-CVE-2024-2511	openssl@3.0.7-r0	3.0.12-r5
High	UBUNTU-CVE-2024-2511	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.17
High	UBUNTU-CVE-2024-3596	krb5@1.19.2-2	1.19.2-2ubuntu0.5
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.75	9.0.86
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.75	9.0.109
High	ALPINE-CVE-2022-4450	openssl@3.0.7-r0	3.0.8-r0
High	UBUNTU-CVE-2022-4450	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.47.1latest	11 months ago	v1.27.1	17514251,777	28,534

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thm-mni-ii/feedbacksystem.svg)](https://charts.stackradar.io/charts/thm-mni-ii/feedbacksystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.