StackRadar

feedbacksystem 0.48.0 Helm chart

thm-mni-iiVerified publisher

Scored 25 Sept 2026

Intelligent, personalized feedback for students using artificial intelligence

Version 0.48.0 todayapp version v2.0.1 2Artifact Hub

feedbacksystem 0.48.0 deploys 14 container images: bitnamilegacy/minio, ghcr.io/thm-mni-ii/fbs-collab, ghcr.io/thm-mni-ii/fbs-core, ghcr.io/thm-mni-ii/fbs-core-web and 10 more. Across them, 2,080 findings — 11 critical, 42 high — 11 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.75, fixed in 9.0.99.

Radar Score

25,43911424051,622

2,080 findings over 14 of 14 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images
ImageTagVulnerabilitiesRadar Score
bitnamilegacy/minio2023.12.23-debian-11-r202431732,411
ghcr.io/thm-mni-ii/fbs-collabv2.0.100218228
ghcr.io/thm-mni-ii/fbs-corev2.0.1310602143,932
ghcr.io/thm-mni-ii/fbs-core-webv2.0.1021821685
ghcr.io/thm-mni-ii/fbs-identity-servicev2.0.100161431,473
ghcr.io/thm-mni-ii/fbs-qcm-backendv2.0.10024681,142
ghcr.io/thm-mni-ii/fbs-qcm-frontendv2.0.103341602,268
ghcr.io/thm-mni-ii/fbs-runnerv2.0.116652083,506
library/docker20.10.21-dind311612003,755
ghcr.io/thm-mni-ii/fbs-sql-playground-webv2.0.1021821685
ghcr.io/thm-mni-ii/fbs-web-shellv2.0.1000115
bitnamilegacy/mongodb×36.0.10-debian-11-r825231852,474
bitnamilegacy/mysql×28.0.35-debian-11-r200494822
bitnamilegacy/postgresql×315.4.0-debian-11-r4521371162,043

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

257 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumBIT-postgresql-2026-6477postgresql@15.4.0-614.23.0
MediumBIT-postgresql-2026-6477PostgreSQL@15.4.014.23.0
MediumGHSA-4f99-4q7p-p3ghgithub.com/sirupsen/logrus@v1.9.01.9.1
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.92.Final4.1.136.Final
MediumALPINE-CVE-2025-9232openssl@3.1.4-r63.1.8-r1
MediumALPINE-CVE-2026-9076openssl@3.5.6-r03.5.7-r0
MediumGHSA-6g7g-w4f8-9c9xgithub.com/buger/jsonparser@v1.1.11.1.2
MediumBIT-minio-2026-33419MinIO@2023.12.232026.03.17
MediumBIT-minio-2026-33419minio@2023.12.23-02026.03.17
MediumGHSA-jv87-32hw-hh99github.com/minio/minio@v0.0.0-20231223071911-496027b589c2no fix listed
MediumGHSA-62hf-57xw-28j9axios@1.7.81.15.1
MediumGHSA-hfxv-24rg-xrqfaxios@1.7.81.16.0
MediumBIT-minio-2026-41145minio@2023.12.23-0no fix listed
MediumBIT-minio-2026-41145MinIO@2023.12.23no fix listed
MediumALPINE-CVE-2025-69421openssl@3.0.7-r03.0.19-r0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.2.00.35.0
MediumGHSA-hqxw-f8mx-cpmwgithub.com/docker/distribution@v2.8.1+incompatible2.8.2-beta.1
MediumGHSA-j497-x9hr-x34xgithub.com/rabbitmq/amqp091-go@v1.9.01.13.0
MediumGHSA-9c4q-hq6p-c237github.com/minio/minio@v0.0.0-20231223071911-496027b589c2no fix listed
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.120.1.13
MediumGHSA-777c-7fjr-54vfaxios@1.7.81.16.0
MediumGHSA-96hv-2xvq-fx4pws@8.18.08.21.0
MediumGHSA-q8qp-cvcw-x6jjaxios@1.7.81.15.2
MediumGHSA-6c5v-hqjr-5xxpgithub.com/rabbitmq/amqp091-go@v1.9.01.13.0
MediumGHSA-q24v-hpg3-v3jpreactor-netty-core@1.0.321.0.39
MediumALPINE-CVE-2025-69420openssl@3.0.7-r03.0.19-r0
MediumBIT-postgresql-2026-15742postgresql@15.4.0-614.24.0
MediumBIT-postgresql-2026-15742PostgreSQL@15.4.014.24.0
MediumGHSA-356w-63v5-8wf4vite@5.4.115.4.18
MediumGHSA-pf86-5x62-jrwfaxios@1.7.81.15.1
MediumALPINE-CVE-2026-7383openssl@3.5.6-r03.5.7-r0
MediumBIT-postgresql-2026-6637postgresql@15.4.0-614.23.0
MediumBIT-postgresql-2026-6637PostgreSQL@15.4.014.23.0
MediumGO-2022-1144stdlib@go1.18.71.18.9
MediumGHSA-4v58-74mf-rjx3github.com/rabbitmq/amqp091-go@v1.9.01.13.0
MediumGHSA-r9c8-gcjp-xfwhgithub.com/rabbitmq/amqp091-go@v1.9.01.13.0
MediumGHSA-xwwf-m8fg-p9q2github.com/rabbitmq/amqp091-go@v1.9.01.13.0
MediumUBUNTU-CVE-2026-80229curl@8.18.0-1ubuntu2.5no fix listed
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.4.00.27.0
MediumGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.2.00.52.0
MediumGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.2.00.52.0
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumALPINE-CVE-2024-2466curl@8.5.0-r08.7.1-r0
MediumGHSA-gx5v-xp9w-j4cgtomcat-embed-core@9.0.759.0.118
MediumGHSA-mf92-479x-3373spring-security-web@5.7.8no fix listed
MediumGHSA-px92-q6rc-6mwvspring-graphql@1.4.51.4.6
MediumGHSA-cm33-6792-r9fmnetty-codec-dns@4.1.92.Final4.1.133.Final
MediumGHSA-3g43-6gmg-66jwaxios@1.7.81.15.2
MediumGHSA-3ppc-4f35-3m26minimatch@9.0.49.0.6
MediumBIT-mongodb-2024-8654MongoDB (R)@6.0.106.0.15

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.48.0latesttodayv2.0.111424051,62225,439
0.47.11 year agov1.27.117514631,77928,950

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/thm-mni-ii/feedbacksystem.svg)](https://charts.stackradar.io/charts/thm-mni-ii/feedbacksystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 25 Sept 2026 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.