firehose 0.0.18 Helm chart

Name: firehose Helm chart 0.0.18: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

blip-firehose

Scored 14 Sept 2026

A Helm chart for Blip Firehose, a complete ETL solution for messaging platforms.

Version 0.0.18 2 years agodeploys tag 0.0.28 0Artifact Hub

firehose 0.0.18 deploys 11 container images: blipai/deckard, obsidiandynamics/kafdrop, bitnami/mongodb, hashicorp/vault-k8s and 7 more. Across the 4 measured, 998 findings — 9 critical, 30 high — 3 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.12, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

13,459930228731

998 findings over 4 of 11 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
blipai/deckard×2	0.0.28	0417138	1,688
obsidiandynamics/kafdrop	3.30.0	917165297	7,901
bitnami/mongodb	6.0.6-debian-11-r13	—	unmeasured
hashicorp/vault-k8s	1.3.1	0418106	1,418
ko.local/sbenthos×9	latest	—	unmeasured
ko.local/firehose_sindicator_manager	latest	—	unmeasured
bitnami/kafka×2	3.6.1-debian-11-r6	—	unmeasured
bitnami/postgresql	16.1.0-debian-11-r24	—	unmeasured
bitnami/keycloak	23.0.5-debian-11-r0	—	unmeasured
bitnami/redis	7.0.11-debian-11-r20	—	unmeasured
hashicorp/vault	1.15.2	0528190	2,452

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

513 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-0395	glibc@2.31-0ubuntu9.7	2.31-0ubuntu9.17
Low	UBUNTU-CVE-2023-4039	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	UBUNTU-CVE-2026-76642	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.14.0	0.45.0
Low	UBUNTU-CVE-2026-11822	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.24+esm1
Low	GHSA-xvfq-4q6q-gxx7	spring-kafka@2.8.4	no fix listed
Low	UBUNTU-CVE-2024-28085	util-linux@2.34-0.1ubuntu9.3	2.34-0.1ubuntu9.6
Low	GO-2023-2375	stdlib@go1.18.10	1.20.0
Low	UBUNTU-CVE-2025-15079	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm2
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.17.0	0.38.0
Low	GHSA-j2rp-gmqv-frhv	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.16.0
Low	GO-2023-1569	stdlib@go1.18.10	1.19.6
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.18	no fix listed
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.58.3	1.83.1
Low	GHSA-v6v8-xj6m-xwqh	github.com/hashicorp/go-retryablehttp@v0.7.4	0.7.7
Low	GO-2023-2382	stdlib@go1.21.3	1.20.12
Low	UBUNTU-CVE-2026-6429	curl@7.68.0-1ubuntu2.7	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2024-22365	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.14.0	0.45.0
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.18	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.14.0	0.52.0
Low	GO-2024-2599	stdlib@go1.21.3	1.21.8
Low	GO-2024-3106	stdlib@go1.21.3	1.22.7
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r2	1.36.1-r7
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r2	1.36.1-r7
Low	UBUNTU-CVE-2026-1965	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm3
Low	GO-2023-1570	stdlib@go1.18.10	1.19.6
Low	UBUNTU-CVE-2025-3576	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.11
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-7168	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2022-3821	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.3.18	no fix listed
Low	GHSA-vgh3-mwxq-rcp8	github.com/hashicorp/vault@1.15.2	1.15.5
Low	GHSA-6c5r-4wfc-3mcx	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.20.1
Low	GO-2024-2600	stdlib@go1.21.3	1.21.8
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r2	1.36.1-r6
Low	UBUNTU-CVE-2026-59847	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.58.3	1.82.1
Low	UBUNTU-CVE-2026-3783	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2026-4873	curl@7.68.0-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2023-39804	tar@1.30+dfsg-7ubuntu0.20.04.2	1.30+dfsg-7ubuntu0.20.04.4
Low	GO-2024-2609	stdlib@go1.21.3	1.21.8
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.4-1ubuntu1	5.2.4-1ubuntu1.1+esm1
Low	GO-2024-3107	stdlib@go1.21.3	1.22.7
Low	GO-2023-1751	stdlib@go1.18.10	1.19.9
Low	GO-2023-1753	stdlib@go1.18.10	1.19.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.18latest	2 years ago	0.0.28	930228731	13,459

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/blip-firehose/firehose.svg)](https://charts.stackradar.io/charts/blip-firehose/firehose)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.