ghcr.io/thm-mni-ii/fbs-core:v2.0.6 container image
GitHub Container RegistryScanned 2 Oct 2026
Deployed by 1 of 17,985 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/thm-mni-ii/fbs-core
ghcr.io/thm-mni-ii/fbs-core:v2.0.6 resolved to 17b65f8b5119, scanned 2 Oct 2026: 281 findings, 3 critical, 2 on KEV; deployed by 1 chart, among them feedbacksystem.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 17b65f8b5119 as scanned on 2 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 2 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-35363 | rust-coreutils | no fix listed |
| Low | GHSA-vqgp-pf68-6947 | spring-webflux | no fix listed |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | GHSA-9m89-8frq-c98c | tomcat-embed-core | 9.0.118 |
| Low | UBUNTU-CVE-2026-35360 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2025-5278 | coreutils-from | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2026-35364 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35374 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35348 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-102473 | dash | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
| Low | GHSA-659m-px2c-25wj | spring-core | no fix listed |
| Low | UBUNTU-CVE-2024-56433 | shadow | no fix listed |
| Low | GHSA-ggg2-9786-hwc8 | spring-boot-autoconfigure | no fix listed |
| Low | UBUNTU-CVE-2026-89092 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-18374 | glibc | no fix listed |
| Low | GHSA-h3qp-gqrc-q736 | spring-webflux | no fix listed |
| Low | GHSA-h3qp-gqrc-q736 | spring-webmvc | no fix listed |
| Low | UBUNTU-CVE-2026-46675 | libpng1.6 | no fix listed |
| Low | GHSA-4hfh-6x8g-gwpp | spring-webflux | no fix listed |
| Low | UBUNTU-CVE-2026-54875 | openssl | 3.5.5-1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-35345 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-97399 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-89160 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2026-54872 | openssl | 3.5.5-1ubuntu3.6 |
| Low | GHSA-9f52-rjqv-25qv | spring-expression | no fix listed |
| Low | GHSA-4wp7-92pw-q264 | spring-context | no fix listed |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-kqueue | 4.1.135.Final |
| Low | UBUNTU-CVE-2026-77696 | openssl | 3.5.5-1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-35359 | rust-coreutils | no fix listed |
| Low | GHSA-vxf7-qj7q-83fh | spring-security-core | no fix listed |
| Low | UBUNTU-CVE-2026-35370 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35351 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35357 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35354 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-102474 | dash | no fix listed |
| Low | UBUNTU-CVE-2026-89156 | pcre2 | no fix listed |
| Low | GHSA-wg35-8jpf-2xv3 | spring-webmvc | no fix listed |
| Low | GHSA-wg35-8jpf-2xv3 | spring-webflux | no fix listed |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-95818 | glibc | no fix listed |
| Low | GHSA-fghv-69vj-qj49 | netty-codec-http | 4.1.125.Final |
| Low | GHSA-p47f-322f-whfh | logback-core | 1.5.33 |
| Low | UBUNTU-CVE-2025-66382 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-35371 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35373 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35344 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35367 | rust-coreutils | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| feedbacksystemthm-mni-iiVerified publisher | 0.48.1 | v2.0.6 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.