firehose 0.0.18 Helm chart

Name: firehose Helm chart 0.0.18: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

blip-firehose

Scored 14 Sept 2026

A Helm chart for Blip Firehose, a complete ETL solution for messaging platforms.

Version 0.0.18 2 years agodeploys tag 0.0.28 0Artifact Hub

firehose 0.0.18 deploys 11 container images: blipai/deckard, obsidiandynamics/kafdrop, bitnami/mongodb, hashicorp/vault-k8s and 7 more. Across the 4 measured, 998 findings — 9 critical, 30 high — 3 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.12, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

13,459930228731

998 findings over 4 of 11 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
blipai/deckard×2	0.0.28	0417138	1,688
obsidiandynamics/kafdrop	3.30.0	917165297	7,901
bitnami/mongodb	6.0.6-debian-11-r13	—	unmeasured
hashicorp/vault-k8s	1.3.1	0418106	1,418
ko.local/sbenthos×9	latest	—	unmeasured
ko.local/firehose_sindicator_manager	latest	—	unmeasured
bitnami/kafka×2	3.6.1-debian-11-r6	—	unmeasured
bitnami/postgresql	16.1.0-debian-11-r24	—	unmeasured
bitnami/keycloak	23.0.5-debian-11-r0	—	unmeasured
bitnami/redis	7.0.11-debian-11-r20	—	unmeasured
hashicorp/vault	1.15.2	0528190	2,452

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

513 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-57432	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GO-2024-2887	stdlib@go1.21.3	1.21.11
Low	GHSA-6294-6rgp-fr7r	github.com/dvsekhvalnov/jose2go@v1.5.0	1.6.0
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v24.0.5+incompatible	no fix listed
Low	UBUNTU-CVE-2024-26458	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GO-2023-1704	stdlib@go1.18.10	1.19.8
Low	GHSA-f9ch-h8j7-8jwg	github.com/hashicorp/vault@1.15.2	1.19.1
Low	ALPINE-CVE-2025-26519	musl@1.2.4-r1	1.2.4-r3
Low	UBUNTU-CVE-2016-2781	coreutils@8.30-3ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-5545	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-jg74-mwgw-v6x3	github.com/hashicorp/vault@1.15.2	1.17.6
Low	UBUNTU-CVE-2026-3784	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2023-28322	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.19
Low	GHSA-775g-4xr8-78h8	spring-expression@5.3.18	no fix listed
Low	UBUNTU-CVE-2026-42015	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GHSA-w3c8-7r8f-9jp8	spring-webmvc@5.3.18	5.3.42
Low	UBUNTU-CVE-2024-28834	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.11
Low	GO-2023-1568	stdlib@go1.18.10	1.19.6
Low	UBUNTU-CVE-2025-40909	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-9mj6-hxhv-w67j	github.com/dvsekhvalnov/jose2go@v1.5.0	1.7.0
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.17.2	2.25.4
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GO-2023-1987	stdlib@go1.18.10	1.19.12
Low	GHSA-qv3p-fmv3-9hww	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.20.1
Low	GO-2023-1752	stdlib@go1.18.10	1.19.9
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.3.3	1.6.3
Low	UBUNTU-CVE-2025-14524	curl@7.68.0-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2022-35252	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.7	no fix listed
Low	GO-2023-1705	stdlib@go1.18.10	1.19.8
Low	UBUNTU-CVE-2021-20223	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4
Low	UBUNTU-CVE-2026-3731	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4
Low	GHSA-wf66-mphr-4c4r	kafka-clients@3.0.1	3.9.2
Low	GO-2023-1878	stdlib@go1.18.10	1.19.11
Low	UBUNTU-CVE-2025-65018	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm1
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.31-0ubuntu9.7	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.3.18	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.3.18	no fix listed
Low	GHSA-9v3w-w2jh-4hff	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.13.5
Low	GHSA-hwc3-3qh6-r4gg	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.11.9
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.21	1.26.0
Low	GO-2024-2963	stdlib@go1.21.3	1.21.12
Low	GO-2023-1702	stdlib@go1.18.10	1.19.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.17.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.30.0-9ubuntu0.2	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v24.0.5+incompatible	24.0.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.18latest	2 years ago	0.0.28	930228731	13,459

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/blip-firehose/firehose.svg)](https://charts.stackradar.io/charts/blip-firehose/firehose)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.