feedbacksystem 0.48.1 Helm chart

Name: feedbacksystem Helm chart 0.48.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thm-mni-ii

Scored 2 Oct 2026

Intelligent, personalized feedback for students using artificial intelligence

Version 0.48.1 todayapp version v2.0.6 2Artifact Hub

feedbacksystem 0.48.1 deploys 14 container images: bitnamilegacy/minio, ghcr.io/thm-mni-ii/fbs-collab, ghcr.io/thm-mni-ii/fbs-core, ghcr.io/thm-mni-ii/fbs-core-web and 10 more. Across them, 2,133 findings — 11 critical, 38 high — 11 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.75, fixed in 9.0.99.

Radar Score

25,09311383701,714

2,133 findings over 14 of 14 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/minio	2023.12.23-debian-11-r2	0244172	2,413
ghcr.io/thm-mni-ii/fbs-collab	v2.0.6	00224	287
ghcr.io/thm-mni-ii/fbs-core	v2.0.6	31057211	3,861
ghcr.io/thm-mni-ii/fbs-core-web	v2.0.6	00235	250
ghcr.io/thm-mni-ii/fbs-identity-service	v2.0.6	0012142	1,417
ghcr.io/thm-mni-ii/fbs-qcm-backend	v2.0.6	002774	1,253
ghcr.io/thm-mni-ii/fbs-qcm-frontend	v2.0.6	0337166	2,380
ghcr.io/thm-mni-ii/fbs-runner	v2.0.6	1666216	3,607
library/docker	20.10.21-dind	31162200	3,768
ghcr.io/thm-mni-ii/fbs-sql-playground-web	v2.0.6	00235	250
ghcr.io/thm-mni-ii/fbs-web-shell	v2.0.6	00235	250
bitnamilegacy/mongodb×3	6.0.10-debian-11-r8	2523185	2,479
bitnamilegacy/mysql×2	8.0.35-debian-11-r2	00494	825
bitnamilegacy/postgresql×3	15.4.0-debian-11-r45	2130125	2,053

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,085 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-q24v-hpg3-v3jp	reactor-netty-core@1.0.32	1.0.39
Medium	ALPINE-CVE-2025-69420	openssl@3.0.7-r0	3.0.19-r0
Medium	BIT-postgresql-2026-15742	postgresql@15.4.0-6	14.24.0
Medium	BIT-postgresql-2026-15742	PostgreSQL@15.4.0	14.24.0
Medium	GHSA-356w-63v5-8wf4	vite@5.4.11	5.4.18
Medium	GHSA-pf86-5x62-jrwf	axios@1.11.0	1.15.1
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	GO-2022-1144	stdlib@go1.18.7	1.18.9
Medium	GHSA-4v58-74mf-rjx3	github.com/rabbitmq/amqp091-go@v1.9.0	1.13.0
Medium	GHSA-r9c8-gcjp-xfwh	github.com/rabbitmq/amqp091-go@v1.9.0	1.13.0
Medium	GHSA-xwwf-m8fg-p9q2	github.com/rabbitmq/amqp091-go@v1.9.0	1.13.0
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.2.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.2.0	0.52.0
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@9.0.75	9.0.118
Medium	GHSA-mf92-479x-3373	spring-security-web@5.7.8	no fix listed
Medium	GHSA-px92-q6rc-6mwv	spring-graphql@1.4.5	1.4.6
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.92.Final	4.1.133.Final
Medium	GHSA-3g43-6gmg-66jw	axios@1.11.0	1.15.2
Medium	BIT-gdal-2026-4738	GDAL@3.7.2	3.11.0
Medium	GHSA-3ppc-4f35-3m26	minimatch@9.0.5	9.0.6
Medium	BIT-mongodb-2024-8654	mongodb@6.0.10-1	6.0.15
Medium	BIT-mongodb-2024-8654	MongoDB (R)@6.0.10	6.0.15
Medium	GHSA-4c29-8rgm-jvjj	github.com/moby/buildkit@v0.11.2	0.28.1
Medium	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.92.Final	4.1.137.Final
Medium	GHSA-gvpg-vgmx-xg6w	nimbus-jose-jwt@9.22	9.37.2
Medium	GHSA-34x7-hfp2-rc4v	tar@6.2.1	7.5.7
Low	GHSA-hv4r-mvr4-25vw	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	no fix listed
Low	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.3	1.2.8
Low	GHSA-9pwp-9qqc-pr26	bcprov-jdk18on@1.72	1.85
Low	GHSA-h7rh-xfpj-hpcm	minio@8.5.4	8.6.0
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.12	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.12	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@9.0.75	9.0.81
Low	GHSA-j5f8-grm9-p9fc	axios@1.11.0	1.16.0
Low	GHSA-h75p-j8xm-m278	github.com/coredns/coredns@v1.11.1	1.14.2
Low	GHSA-527x-5wrf-22m2	github.com/coredns/coredns@v1.11.1	1.14.0
Low	GHSA-vp29-5652-4fw9	github.com/coredns/coredns@v1.11.1	1.14.3
Low	BIT-postgresql-2026-15741	postgresql@15.4.0-6	14.24.0
Low	BIT-postgresql-2026-15741	PostgreSQL@15.4.0	14.24.0
Low	ALPINE-CVE-2024-37370	krb5@1.20.1-r0	1.20.2-r1
Low	ALPINE-CVE-2025-0840	binutils@2.40-r7	2.40-r8
Low	BIT-postgresql-2026-14662	PostgreSQL@15.4.0	14.24.0
Low	BIT-postgresql-2026-14662	postgresql@15.4.0-6	14.24.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.4.2	4.5.2
Low	BIT-postgresql-2026-6478	postgresql@15.4.0-6	14.23.0
Low	BIT-postgresql-2026-6478	PostgreSQL@15.4.0	14.23.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.48.1latest	today	v2.0.6	11383701,714	25,093
0.48.0	7 days ago	v2.0.1	11424021,704	26,149
0.47.1	1 year ago	v1.27.1	17514581,787	28,983

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thm-mni-ii/feedbacksystem.svg)](https://charts.stackradar.io/charts/thm-mni-ii/feedbacksystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.