StackRadar

ghcr.io/thm-mni-ii/fbs-runner:v2.0.7 container image

GitHub Container Registry

Scanned 7 Oct 2026

Deployed by 1 of 18,035 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/thm-mni-ii/fbs-runner

ghcr.io/thm-mni-ii/fbs-runner:v2.0.7 resolved to 8a9f30ef6aa8, scanned 7 Oct 2026: 285 findings, 3 critical, 1 on KEV; deployed by 1 chart, among them feedbacksystem.

Radar Score

4,1213579197

285 findings on digest 8a9f30ef6aa8 · scanned 7 Oct 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.0.7resolves to8a9f30ef6aa81 charttoday35791974,121

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

197 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 8a9f30ef6aa8 as scanned on 7 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 7 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2023-52426expat@2.5.0-r12.6.0-r0
LowGO-2026-4976stdlib@go1.20.111.25.10
LowGO-2026-5039stdlib@go1.20.111.25.11
LowGHSA-pwhc-rpq9-4c8wgithub.com/containerd/containerd@v1.7.121.7.29
LowGHSA-hvcg-qmg6-jm4cnetty-codec-http@4.1.49.Final4.1.135.Final
LowGHSA-mfg7-5gfp-c4w3netty-codec-dns@4.1.49.Final4.1.136.Final
LowGO-2026-5856stdlib@go1.20.111.25.12
LowGHSA-hgj6-7826-r7m5jackson-databind@2.14.22.18.8
LowGO-2026-5338github.com/containerd/containerd@v1.7.12no fix listed
LowGHSA-7236-3392-c5c6github.com/moby/buildkit@v0.12.50.31.1
LowGHSA-m6hq-p25p-ffr2github.com/containerd/containerd@v1.7.121.7.29
LowGO-2025-3750stdlib@go1.20.111.23.10
LowGHSA-7jxh-36q5-gcqvgithub.com/containerd/containerd@v1.7.121.7.35
LowGO-2026-5027golang.org/x/net@v0.8.00.55.0
LowGO-2026-5029golang.org/x/net@v0.8.00.55.0
LowGO-2026-5030golang.org/x/net@v0.8.00.55.0
LowGHSA-v8h7-rr48-vmmvnetty-codec-http@4.1.49.Final4.1.133.Final
LowGO-2026-4340stdlib@go1.20.111.24.12
LowGHSA-vvgp-rfg2-7rr6jackson-databind@2.14.22.18.9
LowALPINE-CVE-2024-13176openssl@3.1.4-r13.1.8-r0
LowGHSA-m425-mq94-257ggoogle.golang.org/grpc@v1.53.01.56.3
LowGHSA-xpw8-rcwv-8f8pnetty-codec-http2@4.1.49.Final4.1.100.Final
LowGO-2023-1682github.com/opencontainers/runc@v1.1.31.1.5
LowGHSA-qxp5-gwg8-xv66golang.org/x/net@v0.8.00.36.0
LowGO-2025-3503stdlib@go1.20.111.23.7
LowGHSA-45p5-v273-3qqrvertx-web@3.9.14.5.22
LowGO-2026-4869stdlib@go1.20.111.25.9
LowGHSA-265r-hfxg-fhmggithub.com/containerd/containerd@v1.7.121.7.27
LowGHSA-w8rr-5gcm-pp58go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.14.01.43.0
LowGHSA-p9f8-wvj8-2fg8go.opentelemetry.io/otel/sdk@v1.14.01.33.0
LowGO-2026-6238github.com/cilium/ebpf@v0.9.10.22.0
LowGO-2025-3447stdlib@go1.20.111.22.12
LowGHSA-7ww5-4wqc-m92cgithub.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d91.6.26
LowGHSA-29wx-vh33-7x7rgithub.com/golang-jwt/jwt/v4@v4.4.24.5.1
LowGHSA-jfvp-7x6p-h2pvgithub.com/opencontainers/runc@v1.1.51.1.14
LowGO-2026-4403stdlib@go1.20.111.23.9
LowGHSA-pmwq-pjrm-6p5rgithub.com/in-toto/in-toto-golang@v0.5.00.11.0
LowGHSA-xjvp-4fhw-gc47github.com/opencontainers/runc@v1.1.51.3.6
LowGO-2026-5932golang.org/x/crypto@v0.17.0no fix listed
LowGO-2026-5024golang.org/x/sys@v0.7.00.44.0
LowGHSA-fghv-69vj-qj49netty-codec-http@4.1.49.Final4.1.125.Final
LowGHSA-72x6-4j93-7w86github.com/moby/buildkit@v0.12.50.31.1
LowGO-2026-4602stdlib@go1.20.111.25.8
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/sdk@v1.14.01.45.0
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.14.01.45.0
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.14.01.45.0
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.14.01.45.0

Used by

1 chart
ChartVersionTagContainers
feedbacksystemthm-mni-iiVerified publisher0.48.2v2.0.71

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 7 Oct 2026 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.