firehose 0.0.18 Helm chart

Name: firehose Helm chart 0.0.18: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

blip-firehose

Scored 14 Sept 2026

A Helm chart for Blip Firehose, a complete ETL solution for messaging platforms.

Version 0.0.18 2 years agodeploys tag 0.0.28 0Artifact Hub

firehose 0.0.18 deploys 11 container images: blipai/deckard, obsidiandynamics/kafdrop, bitnami/mongodb, hashicorp/vault-k8s and 7 more. Across the 4 measured, 998 findings — 9 critical, 30 high — 3 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.12, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

13,459930228731

998 findings over 4 of 11 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
blipai/deckard×2	0.0.28	0417138	1,688
obsidiandynamics/kafdrop	3.30.0	917165297	7,901
bitnami/mongodb	6.0.6-debian-11-r13	—	unmeasured
hashicorp/vault-k8s	1.3.1	0418106	1,418
ko.local/sbenthos×9	latest	—	unmeasured
ko.local/firehose_sindicator_manager	latest	—	unmeasured
bitnami/kafka×2	3.6.1-debian-11-r6	—	unmeasured
bitnami/postgresql	16.1.0-debian-11-r24	—	unmeasured
bitnami/keycloak	23.0.5-debian-11-r0	—	unmeasured
bitnami/redis	7.0.11-debian-11-r20	—	unmeasured
hashicorp/vault	1.15.2	0528190	2,452

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

513 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-6p62-6cg9-f5f5	github.com/hashicorp/vault@1.15.2	1.15.4
Low	UBUNTU-CVE-2025-69420	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2026-57433	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.8.4	no fix listed
Low	UBUNTU-CVE-2026-25646	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm2
Low	UBUNTU-CVE-2023-27535	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	UBUNTU-CVE-2023-4806	glibc@2.31-0ubuntu9.7	2.31-0ubuntu9.14
Low	UBUNTU-CVE-2026-27135	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3+esm1
Low	UBUNTU-CVE-2022-27774	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Low	UBUNTU-CVE-2026-13221	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	UBUNTU-CVE-2026-42496	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm2
Low	UBUNTU-CVE-2026-33636	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm3
Low	UBUNTU-CVE-2023-27536	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.17.2	2.25.4
Low	GHSA-wmg5-g953-qqfw	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.10.11
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2024-37370	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.6
Low	UBUNTU-CVE-2023-38546	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.20
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.14.0	0.52.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.0.0	5.2.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.5.0	4.5.2
Low	GHSA-4qhc-v8r6-8vwm	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.13.10
Low	GHSA-88v5-9hxc-f85r	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	no fix listed
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.8.1	1.1.10.1
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.19.1	3.19.6
Low	UBUNTU-CVE-2026-9076	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm4
Low	UBUNTU-CVE-2026-82209	curl@7.68.0-1ubuntu2.7	no fix listed
Low	GHSA-8f82-53h8-2p34	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.20.3
Low	UBUNTU-CVE-2022-3437	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3
Low	UBUNTU-CVE-2021-40528	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Low	GHSA-wpfp-cm49-9m9q	github.com/hashicorp/go-slug@v0.12.1	0.16.3
Low	GO-2023-1571	stdlib@go1.18.10	1.19.6
Low	UBUNTU-CVE-2023-2283	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.3
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.0.1	3.9.2
Low	UBUNTU-CVE-2026-12087	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	UBUNTU-CVE-2023-47038	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5
Low	GHSA-ch7q-gpff-h9hp	undertow-core@2.2.16.Final	2.2.34.Final
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v3@v3.0.0	3.0.5
Low	GHSA-jqcq-xjh3-6g23	github.com/jackc/pgproto3/v2@v2.3.2	no fix listed
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.58.3	1.83.1
Low	GHSA-xq69-5h5v-x9x4	spring-kafka@2.8.4	no fix listed
Low	UBUNTU-CVE-2020-11080	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.1
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.3.18	5.3.26
Low	GHSA-7vpp-9cxj-q8gv	github.com/mholt/archiver/v3@v3.5.1	no fix listed
Low	UBUNTU-CVE-2026-0915	glibc@2.31-0ubuntu9.7	2.31-0ubuntu9.18+esm1
Low	UBUNTU-CVE-2025-4802	glibc@2.31-0ubuntu9.7	2.31-0ubuntu9.18
Low	UBUNTU-CVE-2023-50495	ncurses@6.2-0ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-5773	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2023-5981	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.9
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.2.2	2.14.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.18latest	2 years ago	0.0.28	930228731	13,459

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/blip-firehose/firehose.svg)](https://charts.stackradar.io/charts/blip-firehose/firehose)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.