feedbacksystem 0.48.3 Helm chart

Name: feedbacksystem Helm chart 0.48.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

thm-mni-ii

Scored 10 Oct 2026

Intelligent, personalized feedback for students using artificial intelligence

Version 0.48.3 yesterdayapp version v2.0.9 2Artifact Hub

feedbacksystem 0.48.3 deploys 14 container images: bitnamilegacy/minio, ghcr.io/thm-mni-ii/fbs-collab, ghcr.io/thm-mni-ii/fbs-core, ghcr.io/thm-mni-ii/fbs-core-web and 10 more. Across them, 2,179 findings — 28 critical, 34 high — 11 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.75, fixed in 9.0.99.

Radar Score

28,95828344581,658

2,179 findings over 14 of 14 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

14 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/minio	2023.12.23-debian-11-r2	3254157	2,870
ghcr.io/thm-mni-ii/fbs-collab	v2.0.9	00228	334
ghcr.io/thm-mni-ii/fbs-core	v2.0.9	31057216	3,908
ghcr.io/thm-mni-ii/fbs-core-web	v2.0.9	00020	141
ghcr.io/thm-mni-ii/fbs-identity-service	v2.0.9	0014146	1,486
ghcr.io/thm-mni-ii/fbs-qcm-backend	v2.0.9	002581	1,305
ghcr.io/thm-mni-ii/fbs-qcm-frontend	v2.0.9	1345177	2,902
ghcr.io/thm-mni-ii/fbs-runner	v2.0.9	3579216	4,253
library/docker	20.10.21-dind	51194179	4,634
ghcr.io/thm-mni-ii/fbs-sql-playground-web	v2.0.9	00020	141
ghcr.io/thm-mni-ii/fbs-web-shell	v2.0.9	00020	141
bitnamilegacy/mongodb×3	6.0.10-debian-11-r8	7342181	3,313
bitnamilegacy/mysql×2	8.0.35-debian-11-r2	201594	1,352
bitnamilegacy/postgresql×3	15.4.0-debian-11-r45	4031123	2,178

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,071 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.23.0	1.26.0
Low	GHSA-w9j2-pvgh-6h63	axios@1.7.8	1.15.1
Low	GO-2026-4980	stdlib@go1.20.11	1.25.10
Low	UBUNTU-CVE-2026-7017	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.92.Final	4.1.129.Final
Low	DLA-4267-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u8
Low	BIT-mongodb-2025-10061	mongodb@6.0.10-1	6.0.25
Low	BIT-mongodb-2025-10061	MongoDB (R)@6.0.10	6.0.25
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd@v1.7.12	1.7.33
Low	GO-2023-1573	github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9	1.5.18
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.92.Final	4.1.136.Final
Low	GO-2024-2600	stdlib@go1.20.11	1.21.8
Low	ALPINE-CVE-2026-22796	openssl@3.0.7-r0	3.0.19-r0
Low	BIT-postgresql-2023-39418	postgresql@15.4.0-6	15.4.0
Low	GHSA-4q2v-9p7v-3v22	reactor-netty-http@1.0.32	1.2.8
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v20.10.3-0.20221021173910-5aac513617f0+incompatible	24.0.9
Low	DLA-4309-1	libxslt@1.1.34-4+deb11u1	1.1.34-4+deb11u3
Low	GO-2026-4440	golang.org/x/net@v0.8.0	0.45.0
Low	DLA-4143-1	glibc@2.31-13+deb11u7	2.31-13+deb11u12
Low	DSA-5678-1	glibc@2.31-13+deb11u7	2.31-13+deb11u10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.17.0	0.45.0
Low	GO-2025-4011	stdlib@go1.20.11	1.24.8
Low	GO-2025-4015	stdlib@go1.20.11	1.24.8
Low	GO-2026-4441	golang.org/x/net@v0.8.0	0.45.0
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.1	7.1.6
Low	GHSA-hmfx-3pcx-653p	github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9	1.6.18
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.19.0	1.43.0
Low	BIT-mongodb-2025-12657	MongoDB (R)@6.0.10	7.0.22
Low	BIT-mongodb-2025-12657	mongodb@6.0.10-1	7.0.22
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.92.Final	4.1.133.Final
Low	GHSA-vg6x-rcgg-rjx6	vite@5.4.11	5.4.12
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.27	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webflux@5.3.27	no fix listed
Low	GHSA-7q8q-rj6j-mhjq	axios@1.7.8	1.18.0
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.27	no fix listed
Low	GHSA-4773-3jfm-qmx3	spring-webflux@5.3.27	no fix listed
Low	GHSA-wjgm-6hv5-3cvf	jackson-databind@2.14.2	2.18.10
Low	GO-2026-4603	stdlib@go1.20.11	1.25.8
Low	DLA-4064-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u6
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.92.Final	4.1.135.Final
Low	GO-2025-4175	stdlib@go1.20.11	1.24.11
Low	GHSA-g2j6-57v7-gm8c	github.com/opencontainers/runc@v1.1.3	1.1.5
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.53.0	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.17.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.17.0	0.52.0
Low	GO-2026-4864	stdlib@go1.20.11	1.25.9
Low	GO-2026-6179	golang.org/x/mod@v0.11.0	0.40.0
Low	BIT-mongodb-2025-10059	MongoDB (R)@6.0.10	6.0.24

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.48.3latest	yesterday	v2.0.9	28344581,658	28,958
0.48.2	4 days ago	v2.0.7	28344601,656	28,635
0.48.1	9 days ago	v2.0.6	28344671,651	29,321
0.48.0	16 days ago	v2.0.1	25394751,662	28,958
0.47.1	1 year ago	v1.27.1	31485311,745	31,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/thm-mni-ii/feedbacksystem.svg)](https://charts.stackradar.io/charts/thm-mni-ii/feedbacksystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.