ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.1 container image
GitHub Container RegistryScanned 25 Sept 2026
Deployed by 1 of 17,844 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/thm-mni-ii/fbs-identity-service
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.1 resolved to baf79539e5df, scanned 25 Sept 2026: 159 findings, 0 critical; deployed by 1 chart, among them feedbacksystem.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
159 distinct on this digest
Findings for digest baf79539e5df as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-r29c-68gh-xp6x | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-h6fc-48rj-7qqh | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-9xv2-5v5q-p794 | tomcat-embed-core | 10.1.58 |
| Medium | UBUNTU-CVE-2026-19931 | curl | no fix listed |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.21.4 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-78wr-2p64-hpwj | commons-io | 2.14.0 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.21.4 |
| Medium | GHSA-5m62-pw8w-7w9f | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-h3x4-894j-xpx5 | tomcat-embed-core | 10.1.58 |
| Medium | UBUNTU-CVE-2026-18924 | curl | no fix listed |
| Medium | GHSA-gcx9-497g-6cp6 | tomcat-embed-core | 10.1.58 |
| Medium | UBUNTU-CVE-2026-80229 | curl | no fix listed |
| Medium | GHSA-gx5v-xp9w-j4cg | tomcat-embed-core | 10.1.55 |
| Medium | GHSA-px92-q6rc-6mwv | spring-graphql | 1.4.6 |
| Medium | GHSA-9pwp-9qqc-pr26 | bcprov-jdk18on | 1.85 |
| Low | UBUNTU-CVE-2026-66046 | expat | 2.7.4-1ubuntu0.2 |
| Low | GHSA-5mp6-jrq3-r938 | tomcat-embed-core | 10.1.55 |
| Low | GHSA-fv25-8xcx-gqjc | tomcat-embed-core | 10.1.55 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-80255 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-82560 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-48959 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-76641 | expat | 2.7.4-1ubuntu0.2 |
| Low | UBUNTU-CVE-2021-31879 | wget | no fix listed |
| Low | UBUNTU-CVE-2026-85091 | zlib | no fix listed |
| Low | UBUNTU-CVE-2026-9538 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | UBUNTU-CVE-2026-93990 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-42497 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-13608 | curl | no fix listed |
| Low | GHSA-88fw-v6x4-3f58 | spring-data-commons | 3.5.12 |
| Low | GHSA-9fw2-h3hf-293r | spring-data-commons | 3.5.12 |
| Low | GHSA-m69x-pw9p-7j3q | spring-security-saml2-service-provider | 6.5.11 |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | 6.2.19 |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | 6.2.19 |
| Low | UBUNTU-CVE-2026-48962 | perl | no fix listed |
| Low | GHSA-qp49-qgx5-5m26 | bcprov-jdk18on | 1.85 |
| Low | GHSA-v435-xc8x-wvr9 | bcprov-jdk18on | 1.78 |
| Low | GHSA-wg6q-6289-32hp | bcpkix-jdk18on | 1.84 |
| Low | GHSA-wjxj-5m7g-mg7q | bcpkix-jdk18on | 1.73 |
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-jdk18on | 1.73 |
| Low | GHSA-phxq-526m-79px | spring-graphql | 1.4.6 |
| Low | GHSA-xwmg-2g98-w7v9 | nimbus-jose-jwt | 10.0.2 |
| Low | GHSA-8xfc-gm6g-vgpv | bcprov-jdk18on | 1.78 |
| Low | UBUNTU-CVE-2026-48961 | perl | no fix listed |
| Low | GHSA-4h8f-2wvx-gg5w | bcprov-jdk18on | 1.78 |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| feedbacksystemthm-mni-iiVerified publisher | 0.48.0 | v2.0.1 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.