feedbacksystem 0.48.1 Helm chart

Name: feedbacksystem Helm chart 0.48.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thm-mni-ii

Scored 2 Oct 2026

Intelligent, personalized feedback for students using artificial intelligence

Version 0.48.1 yesterdayapp version v2.0.6 2Artifact Hub

feedbacksystem 0.48.1 deploys 14 container images: bitnamilegacy/minio, ghcr.io/thm-mni-ii/fbs-collab, ghcr.io/thm-mni-ii/fbs-core, ghcr.io/thm-mni-ii/fbs-core-web and 10 more. Across them, 2,133 findings — 11 critical, 38 high — 11 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.75, fixed in 9.0.99.

Radar Score

25,09311383701,714

2,133 findings over 14 of 14 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/minio	2023.12.23-debian-11-r2	0244172	2,413
ghcr.io/thm-mni-ii/fbs-collab	v2.0.6	00224	287
ghcr.io/thm-mni-ii/fbs-core	v2.0.6	31057211	3,861
ghcr.io/thm-mni-ii/fbs-core-web	v2.0.6	00235	250
ghcr.io/thm-mni-ii/fbs-identity-service	v2.0.6	0012142	1,417
ghcr.io/thm-mni-ii/fbs-qcm-backend	v2.0.6	002774	1,253
ghcr.io/thm-mni-ii/fbs-qcm-frontend	v2.0.6	0337166	2,380
ghcr.io/thm-mni-ii/fbs-runner	v2.0.6	1666216	3,607
library/docker	20.10.21-dind	31162200	3,768
ghcr.io/thm-mni-ii/fbs-sql-playground-web	v2.0.6	00235	250
ghcr.io/thm-mni-ii/fbs-web-shell	v2.0.6	00235	250
bitnamilegacy/mongodb×3	6.0.10-debian-11-r8	2523185	2,479
bitnamilegacy/mysql×2	8.0.35-debian-11-r2	00494	825
bitnamilegacy/postgresql×3	15.4.0-debian-11-r45	2130125	2,053

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

807 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-w9j2-pvgh-6h63	axios@1.11.0	1.15.1
Low	DLA-4432-1	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u16
Low	DLA-3910-1	e2fsprogs@1.46.2-2	1.46.2-2+deb11u1
Low	GHSA-6pjf-3r9x-m592	github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb	3.1.1
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.92.Final	4.1.129.Final
Low	DLA-4267-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u8
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	BIT-mongodb-2025-10061	mongodb@6.0.10-1	6.0.25
Low	BIT-mongodb-2025-10061	MongoDB (R)@6.0.10	6.0.25
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd@v1.7.12	1.7.33
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.92.Final	4.1.136.Final
Low	GO-2023-2044	stdlib@go1.21.0	1.21.1
Low	GO-2023-2045	stdlib@go1.21.0	1.21.1
Low	ALPINE-CVE-2026-22796	openssl@3.0.7-r0	3.0.19-r0
Low	BIT-postgresql-2023-39418	postgresql@15.4.0-6	15.4.0
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v20.10.3-0.20221021173910-5aac513617f0+incompatible	24.0.9
Low	DLA-4309-1	libxslt@1.1.34-4+deb11u1	1.1.34-4+deb11u3
Low	DSA-5678-1	glibc@2.31-13+deb11u7	2.31-13+deb11u10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.2.0	0.45.0
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u7
Low	GHSA-4q2v-9p7v-3v22	reactor-netty-http@1.0.32	1.2.8
Low	GHSA-w34q-cm8f-9c5x	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0	0.21.0
Low	GHSA-hmfx-3pcx-653p	github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9	1.6.18
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.19.0	1.43.0
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.92.Final	4.1.133.Final
Low	GHSA-vg6x-rcgg-rjx6	vite@5.4.11	5.4.12
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	GO-2023-2375	stdlib@go1.18.7	1.20.0
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.27	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webflux@5.3.27	no fix listed
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.8.0	0.38.0
Low	GHSA-7q8q-rj6j-mhjq	axios@1.11.0	1.18.0
Low	GO-2023-1569	stdlib@go1.18.7	1.19.6
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.27	no fix listed
Low	GHSA-4773-3jfm-qmx3	spring-webflux@5.3.27	no fix listed
Low	GO-2022-1143	stdlib@go1.18.7	1.18.9
Low	GHSA-wjgm-6hv5-3cvf	jackson-databind@2.14.2	2.18.10
Low	DLA-4064-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u6
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.92.Final	4.1.135.Final
Low	GHSA-g2j6-57v7-gm8c	github.com/opencontainers/runc@v1.1.3	1.1.5
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.0	1.83.1
Low	GO-2023-2382	stdlib@go1.20.11	1.20.12
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.2.0	0.52.0
Low	DLA-4259-1	systemd@247.3-7+deb11u4	247.3-7+deb11u7
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.2.0	0.52.0
Low	BIT-mongodb-2025-10059	mongodb@6.0.10-1	6.0.24
Low	BIT-mongodb-2025-10059	MongoDB (R)@6.0.10	6.0.24
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.2.0	0.45.0
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.1	2.3.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.48.1latest	yesterday	v2.0.6	11383701,714	25,093
0.48.0	8 days ago	v2.0.1	11424021,704	26,149
0.47.1	1 year ago	v1.27.1	17514581,787	28,983

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thm-mni-ii/feedbacksystem.svg)](https://charts.stackradar.io/charts/thm-mni-ii/feedbacksystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.