firehose 0.0.18 Helm chart

Name: firehose Helm chart 0.0.18: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

blip-firehose

Scored 14 Sept 2026

A Helm chart for Blip Firehose, a complete ETL solution for messaging platforms.

Version 0.0.18 2 years agodeploys tag 0.0.28 0Artifact Hub

firehose 0.0.18 deploys 11 container images: blipai/deckard, obsidiandynamics/kafdrop, bitnami/mongodb, hashicorp/vault-k8s and 7 more. Across the 4 measured, 998 findings — 9 critical, 30 high — 3 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.12, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

13,459930228731

998 findings over 4 of 11 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
blipai/deckard×2	0.0.28	0417138	1,688
obsidiandynamics/kafdrop	3.30.0	917165297	7,901
bitnami/mongodb	6.0.6-debian-11-r13	—	unmeasured
hashicorp/vault-k8s	1.3.1	0418106	1,418
ko.local/sbenthos×9	latest	—	unmeasured
ko.local/firehose_sindicator_manager	latest	—	unmeasured
bitnami/kafka×2	3.6.1-debian-11-r6	—	unmeasured
bitnami/postgresql	16.1.0-debian-11-r24	—	unmeasured
bitnami/keycloak	23.0.5-debian-11-r0	—	unmeasured
bitnami/redis	7.0.11-debian-11-r20	—	unmeasured
hashicorp/vault	1.15.2	0528190	2,452

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

513 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-53w6-v7cv-fc9h	spring-kafka@2.8.4	no fix listed
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r2	1.36.1-r7
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.2	2.18.8
Low	UBUNTU-CVE-2026-54411	pam@1.3.1-5ubuntu4.3	no fix listed
Low	UBUNTU-CVE-2026-25210	expat@2.2.9-1ubuntu0.4	2.2.9-1ubuntu0.8+esm1
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.12.1	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.31.0	1.97.3
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.4.10	1.7.8
Low	GHSA-9mh8-9j64-443f	github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047	1.9.10
Low	UBUNTU-CVE-2026-19487	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.14.0	0.52.0
Low	GHSA-jc7w-c686-c4v9	github.com/ulikunitz/xz@v0.5.10	0.5.15
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v24.0.5+incompatible	no fix listed
Low	GO-2023-2041	stdlib@go1.18.10	1.20.8
Low	GHSA-v6r4-35f9-9rpw	github.com/hashicorp/vault@1.15.2	1.20.1
Low	GO-2023-2043	stdlib@go1.18.10	1.20.8
Low	GHSA-qgj7-fmq2-6cc4	github.com/hashicorp/vault@1.15.2	1.20.1
Low	GO-2023-2186	stdlib@go1.21.3	1.20.11
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.18	no fix listed
Low	GHSA-2827-2mxx-j8pv	spring-retry@1.3.2	no fix listed
Low	GO-2024-3333	golang.org/x/net@v0.17.0	0.33.0
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	GHSA-rwvp-r38j-9rgg	github.com/nwaples/rardecode@v1.1.2	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.2.2	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25
Low	UBUNTU-CVE-2025-5372	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GO-2024-3105	stdlib@go1.21.3	1.22.7
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.18	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	GO-2023-1621	stdlib@go1.18.10	1.19.7
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
Low	GO-2026-4981	stdlib@go1.21.3	1.25.10
Low	GO-2025-3563	stdlib@go1.21.3	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.2.2	2.18.9
Low	GHSA-8r5m-3f66-qpr3	github.com/hashicorp/vault@1.15.2	no fix listed
Low	GO-2026-4977	stdlib@go1.21.3	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GO-2024-2610	stdlib@go1.21.3	1.21.8
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.18	no fix listed
Low	UBUNTU-CVE-2026-59848	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GO-2026-4986	stdlib@go1.21.3	1.25.10
Low	UBUNTU-CVE-2026-5704	tar@1.30+dfsg-7ubuntu0.20.04.2	1.30+dfsg-7ubuntu0.20.04.4+esm3
Low	GO-2026-4918	stdlib@go1.21.3	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.17.0	0.53.0
Low	GO-2026-4337	stdlib@go1.21.3	1.24.13
Low	UBUNTU-CVE-2023-6004	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.6.6	no fix listed
Low	GO-2026-4601	stdlib@go1.21.3	1.25.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.18latest	2 years ago	0.0.28	930228731	13,459

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/blip-firehose/firehose.svg)](https://charts.stackradar.io/charts/blip-firehose/firehose)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.