StackRadar

feedbacksystem Helm chart

thm-mni-iiVerified publisher

Scored 14 Sept 2026

Intelligent, personalized feedback for students using artificial intelligence

Latest 0.47.1 11 months agoapp version v1.27.1 2Artifact Hub

feedbacksystem 0.47.1 deploys 10 container images: bitnamilegacy/minio, thmmniii/fbs-collab, thmmniii/fbs-core, thmmniii/fbs-qcm-backend and 6 more. Across them, 2,271 findings17 critical, 51 high 14 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.75, fixed in 9.0.99.

Radar Score

28,53417514251,777

2,271 findings over 10 of 10 images measured

KEV ×14 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images
ImageTagVulnerabilitiesRadar Score
bitnamilegacy/minio2023.12.23-debian-11-r202251802,265
thmmniii/fbs-collabv1.27.10123621,110
thmmniii/fbs-corev1.27.110191404438,602
thmmniii/fbs-qcm-backendv1.27.10129901,499
thmmniii/fbs-qcm-frontendv1.27.104391822,606
thmmniii/fbs-runnerv1.27.116602093,413
library/docker20.10.21-dind212572043,746
bitnamilegacy/mongodb×36.0.10-debian-11-r825211872,470
bitnamilegacy/mysql×28.0.35-debian-11-r200494821
bitnamilegacy/postgresql×315.4.0-debian-11-r4521271262,002

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,352 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2023-42364busybox@1.35.0-r291.35.0-r31
LowUBUNTU-CVE-2022-47007binutils@2.38-3ubuntu12.38-4ubuntu2.5
LowALPINE-CVE-2023-42363busybox@1.35.0-r291.35.0-r31
LowGHSA-v6wh-96g9-6wx3vite@5.4.116.4.3
LowUBUNTU-CVE-2026-1965curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.23
LowGO-2023-1570stdlib@go1.18.71.19.6
LowGHSA-w6w4-rjh9-9r58c3p0@0.9.5.40.14.0
LowALPINE-CVE-2023-51384openssh@9.1_p1-r19.1_p1-r5
LowUBUNTU-CVE-2025-3576krb5@1.19.2-21.19.2-2ubuntu0.7
LowUBUNTU-CVE-2025-68973gnupg2@2.2.27-3ubuntu2.12.2.27-3ubuntu2.5
LowGHSA-v2v4-37r5-5v8gip-address@9.0.510.1.1
LowUBUNTU-CVE-2026-7168curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.24
LowUBUNTU-CVE-2022-3821systemd@249.11-0ubuntu3.4249.11-0ubuntu3.7
LowBIT-postgresql-2025-12818postgresql@15.4.0-613.23.0
LowBIT-postgresql-2025-12818PostgreSQL@15.4.013.23.0
LowGHSA-mq64-j8f9-9gcjspring-webmvc@5.3.27no fix listed
LowGHSA-mq64-j8f9-9gcjspring-webflux@5.3.27no fix listed
LowGHSA-h84g-69h7-mw6vmchange-commons-java@0.2.150.6.0
LowGO-2024-2600stdlib@go1.21.51.21.8
LowGHSA-pvcr-v8j8-j5q3github.com/lestrrat-go/jwx@v1.2.271.2.28
LowALPINE-CVE-2023-42366busybox@1.35.0-r291.35.0-r30
LowUBUNTU-CVE-2026-59847libssh@0.9.6-2build10.9.6-2ubuntu0.22.04.8
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.60.11.82.1
LowGHSA-38f8-5428-x5cvnetty-codec-http@4.1.92.Final4.1.133.Final
LowBIT-mongodb-2024-3374mongodb@6.0.10-15.0.26
LowBIT-mongodb-2024-3374MongoDB (R)@6.0.105.0.26
LowGHSA-5m4m-73w9-8433spring-data-commons@2.7.12no fix listed
LowGHSA-xq3w-v528-46rvnetty-common@4.1.92.Final4.1.115.Final
LowGHSA-28wg-ghj8-5hjvnanoid@3.3.73.3.16
LowUBUNTU-CVE-2026-3783curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.23
LowGHSA-w9j2-pvgh-6h63axios@1.7.81.15.1
LowUBUNTU-CVE-2026-4873curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.24
LowUBUNTU-CVE-2023-39804tar@1.34+dfsg-1build31.34+dfsg-1ubuntu0.1.22.04.2
LowUBUNTU-CVE-2022-47011binutils@2.38-3ubuntu12.38-4ubuntu2.5
LowGHSA-8c42-7qj2-3j46netty-codec-http@4.1.92.Final4.1.137.Final
LowGO-2024-2609stdlib@go1.21.51.21.8
LowUBUNTU-CVE-2026-34743xz-utils@5.2.5-2ubuntu15.2.5-2ubuntu1.1
LowGO-2024-3107stdlib@go1.21.51.22.7
LowUBUNTU-CVE-2022-47008binutils@2.38-3ubuntu12.38-4ubuntu2.5
LowGO-2023-1751stdlib@go1.18.71.19.9
LowGO-2023-1753stdlib@go1.18.71.19.9
LowALPINE-CVE-2023-42365busybox@1.35.0-r291.35.0-r31
LowGHSA-r7wm-3cxj-wff9jackson-core@2.13.52.18.8
LowUBUNTU-CVE-2026-54411pam@1.4.0-11ubuntu21.4.0-11ubuntu2.7
LowGHSA-2v37-7h3g-55p8nanoid@3.3.73.3.18
LowGHSA-389x-839f-4rhxnetty-common@4.1.92.Final4.1.118.Final
LowUBUNTU-CVE-2026-25210expat@2.4.7-12.4.7-1ubuntu0.7
LowUBUNTU-CVE-2022-35205binutils@2.38-3ubuntu12.38-4ubuntu2.4
LowBIT-mongodb-2024-6384mongodb@6.0.10-16.0.16
LowBIT-mongodb-2024-6384MongoDB (R)@6.0.106.0.16

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.47.1latest11 months agov1.27.117514251,77728,534

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/thm-mni-ii/feedbacksystem.svg)](https://charts.stackradar.io/charts/thm-mni-ii/feedbacksystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.