StackRadar

feedbacksystem 0.48.0 Helm chart

thm-mni-iiVerified publisher

Scored 25 Sept 2026

Intelligent, personalized feedback for students using artificial intelligence

Version 0.48.0 todayapp version v2.0.1 2Artifact Hub

feedbacksystem 0.48.0 deploys 14 container images: bitnamilegacy/minio, ghcr.io/thm-mni-ii/fbs-collab, ghcr.io/thm-mni-ii/fbs-core, ghcr.io/thm-mni-ii/fbs-core-web and 10 more. Across them, 2,080 findings — 11 critical, 42 high — 11 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.75, fixed in 9.0.99.

Radar Score

25,43911424051,622

2,080 findings over 14 of 14 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images
ImageTagVulnerabilitiesRadar Score
bitnamilegacy/minio2023.12.23-debian-11-r202431732,411
ghcr.io/thm-mni-ii/fbs-collabv2.0.100218228
ghcr.io/thm-mni-ii/fbs-corev2.0.1310602143,932
ghcr.io/thm-mni-ii/fbs-core-webv2.0.1021821685
ghcr.io/thm-mni-ii/fbs-identity-servicev2.0.100161431,473
ghcr.io/thm-mni-ii/fbs-qcm-backendv2.0.10024681,142
ghcr.io/thm-mni-ii/fbs-qcm-frontendv2.0.103341602,268
ghcr.io/thm-mni-ii/fbs-runnerv2.0.116652083,506
library/docker20.10.21-dind311612003,755
ghcr.io/thm-mni-ii/fbs-sql-playground-webv2.0.1021821685
ghcr.io/thm-mni-ii/fbs-web-shellv2.0.1000115
bitnamilegacy/mongodb×36.0.10-debian-11-r825231852,474
bitnamilegacy/mysql×28.0.35-debian-11-r200494822
bitnamilegacy/postgresql×315.4.0-debian-11-r4521371162,043

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

257 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-2p5w-cvg5-gc5chibernate-core@5.6.15.Finalno fix listed
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.2.00.52.0
MediumALPINE-CVE-2025-0725curl@8.5.0-r08.12.0-r0
MediumGHSA-5m62-pw8w-7w9ftomcat-embed-core@9.0.759.0.118
MediumBIT-minio-2026-40344MinIO@2023.12.23no fix listed
MediumBIT-minio-2026-40344minio@2023.12.23-0no fix listed
MediumGHSA-4hjh-wcwx-xvwjaxios@1.7.81.12.0
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.53.01.83.1
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.2.00.52.0
MediumGHSA-h3x4-894j-xpx5tomcat-embed-core@9.0.759.0.121
MediumALPINE-CVE-2023-6237openssl@3.1.4-r13.1.4-r4
MediumGHSA-h46c-h94j-95f3jackson-core@2.13.52.15.0
MediumGHSA-493p-pfq6-5258json-smart@2.4.82.4.9
MediumBIT-minio-2026-33322minio@2023.12.23-02026.03.17
MediumBIT-minio-2026-33322MinIO@2023.12.232026.03.17
MediumGHSA-5cx5-wh4m-82fhgithub.com/minio/minio@v0.0.0-20231223071911-496027b589c2no fix listed
MediumBIT-mongodb-2024-1351MongoDB (R)@6.0.105.0.26
MediumBIT-mongodb-2024-1351mongodb@6.0.10-15.0.26
MediumGHSA-xjhv-p3fv-x24rreactor-netty-http@1.0.321.0.39
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.2.00.52.0
MediumBIT-postgresql-2026-16239PostgreSQL@15.4.014.24.0
MediumBIT-postgresql-2026-16239postgresql@15.4.0-614.24.0
MediumGHSA-prj3-ccx8-p6x4netty-codec-http2@4.1.92.Final4.1.124.Final
MediumALPINE-CVE-2024-9143openssl@3.1.4-r63.1.7-r1
MediumBIT-postgresql-2026-6478PostgreSQL@15.4.014.23.0
MediumBIT-postgresql-2026-6478postgresql@15.4.0-614.23.0
MediumALPINE-CVE-2023-3817openssl@3.0.7-r03.0.10-r0
MediumGHSA-6wrf-mxfj-pf5pgithub.com/docker/docker@v20.10.3-0.20221021173910-5aac513617f0+incompatible20.10.24
MediumBIT-postgresql-2026-14669postgresql@15.4.0-614.24.0
MediumBIT-postgresql-2026-14669PostgreSQL@15.4.014.24.0
MediumGHSA-c5pq-fr2g-9jpfgithub.com/rabbitmq/amqp091-go@v1.9.01.13.0
MediumALPINE-CVE-2025-0665curl@8.5.0-r08.12.0-r0
MediumALPINE-CVE-2023-29491ncurses@6.3_p20221119-r06.3_p20221119-r1
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.92.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http2@4.1.92.Final4.1.133.Final
MediumUBUNTU-CVE-2026-18924curl@8.18.0-1ubuntu2.5no fix listed
MediumGHSA-55g7-9cwv-5qfvsnappy-java@1.1.10.11.1.10.4
MediumGHSA-8wv5-x4w7-5gwwgithub.com/apache/thrift@v0.19.00.24.0
MediumBIT-mongodb-2026-8053mongodb@6.0.10-15.0.33
MediumBIT-mongodb-2026-8053MongoDB (R)@6.0.105.0.33
MediumALPINE-CVE-2026-14457openssl@3.5.6-r03.5.8-r0
MediumGHSA-gcx9-497g-6cp6tomcat-embed-core@9.0.759.0.121
MediumALPINE-CVE-2025-31115xz@5.4.5-r05.4.5-r1
MediumALPINE-CVE-2024-2379curl@8.5.0-r08.7.1-r0
MediumALPINE-CVE-2026-63072openssl@3.5.6-r03.5.8-r0
MediumGHSA-w37g-rhq8-7m4jsnakeyaml@1.301.32
MediumGHSA-5mcr-gq6c-3hq2netty-codec-http@4.1.49.Final4.1.59.Final
MediumGHSA-r936-gwx5-v52fspring-webmvc@5.3.27no fix listed
MediumGHSA-p92q-9vqr-4j8vaxios@1.7.81.16.0
MediumGHSA-25h7-pfq9-p65fflatted@3.3.13.4.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.48.0latesttodayv2.0.111424051,62225,439
0.47.11 year agov1.27.117514631,77928,950

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/thm-mni-ii/feedbacksystem.svg)](https://charts.stackradar.io/charts/thm-mni-ii/feedbacksystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 25 Sept 2026 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.