ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.6 container image

GitHub Container Registry

Scanned 2 Oct 2026

Deployed by 1 of 17,985 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/thm-mni-ii/fbs-identity-service

ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.6 resolved to 99b9f84726fa, scanned 2 Oct 2026: 154 findings, 0 critical; deployed by 1 chart, among them feedbacksystem.

Radar Score

1,4170012142

154 findings on digest 99b9f84726fa · scanned 2 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v2.0.6resolves to	99b9f84726fa	1 chart	today	0012142	1,417

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

154 distinct on this digest

Findings for digest 99b9f84726fa as scanned on 2 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 2 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@10.1.54	10.1.55
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@10.1.54	10.1.55
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@10.1.54	10.1.55
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@10.1.54	10.1.58
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.21.2	2.21.4
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.17.0	3.18.0
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.8.0	2.14.0
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.21.2	2.21.4
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@10.1.54	10.1.58
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@10.1.54	10.1.58
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@10.1.54	10.1.55
Medium	GHSA-px92-q6rc-6mwv	spring-graphql@1.4.5	1.4.6
Low	GHSA-9pwp-9qqc-pr26	bcprov-jdk18on@1.72	1.85
Low	GHSA-p6pp-m3f8-5c89	jackson-core@2.21.2	2.21.7
Low	UBUNTU-CVE-2026-82560	perl@5.40.1-7ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-48959	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@10.1.54	10.1.55
Low	UBUNTU-CVE-2021-31879	wget@1.25.0-2ubuntu4.4	no fix listed
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.21.2	2.21.6
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-9538	perl@5.40.1-7ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-86145	pcre2@10.46-1build1	no fix listed
Low	UBUNTU-CVE-2026-84782	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@10.1.54	10.1.55
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.21.2	2.21.7
Low	GHSA-qv9r-c865-cp47	log4j-api@2.24.3	2.25.5
Low	UBUNTU-CVE-2026-42497	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GHSA-88fw-v6x4-3f58	spring-data-commons@3.5.11	3.5.12
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@3.5.11	3.5.12
Low	GHSA-m69x-pw9p-7j3q	spring-security-saml2-service-provider@6.5.10	6.5.11
Low	GHSA-r5w3-xv2f-j59q	spring-expression@6.2.18	6.2.19
Low	GHSA-x23c-287f-qqv5	spring-webmvc@6.2.18	6.2.19
Low	UBUNTU-CVE-2026-48962	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.21.2	2.21.7
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.21.2	2.21.7
Low	GHSA-qp49-qgx5-5m26	bcprov-jdk18on@1.72	1.85
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk18on@1.72	1.78
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk18on@1.72	1.84
Low	UBUNTU-CVE-2026-84784	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6
Low	UBUNTU-CVE-2026-93990	expat@2.7.4-1ubuntu0.2	no fix listed
Low	GHSA-wjxj-5m7g-mg7q	bcpkix-jdk18on@1.72	1.73
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk18on@1.72	1.73
Low	GHSA-phxq-526m-79px	spring-graphql@1.4.5	1.4.6
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.47	10.0.2
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk18on@1.72	1.78
Low	UBUNTU-CVE-2026-48961	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk18on@1.72	1.78
Low	UBUNTU-CVE-2026-7017	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GHSA-67mf-3cr5-8w23	bcprov-jdk18on@1.72	1.78
Low	GHSA-574f-3g2m-x479	bcprov-jdk18on@1.72	1.80.2

Used by

1 chart

Chart	Version	Tag	Containers
feedbacksystemthm-mni-iiVerified publisher	0.48.1	v2.0.6	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.