data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,424 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.15
Critical	GHSA-f58c-gq56-vjjf	tika-core@1.27	3.2.2
Critical	GHSA-f58c-gq56-vjjf	tika-parsers@1.27	2.0.0
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.fips.7.2
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.13
Critical	ALPINE-CVE-2023-38545	curl@8.1.2-r0	8.4.0-r0
Critical	GHSA-j7hp-h8jx-5pprKEV	pillow@5.4.1	10.0.1
Critical	PYSEC-2026-1794KEV	pillow@5.4.1	10.0.1
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.9
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.26	2.0
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.53.0-r0	1.57.0-r0
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2
Critical	GHSA-p72g-pv48-7w9x	tika-parsers@1.27	2.0.0-ALPHA
Critical	ALPINE-CVE-2025-6965	sqlite@3.41.2-r2	3.41.2-r4
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
Critical	UBUNTU-CVE-2024-2961	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.15
High	ALPINE-CVE-2025-15467	openssl@3.3.3-r0	3.3.6-r0
High	ALPINE-CVE-2022-0778	openssl@1.1.1l-r0	1.1.1n-r0
High	ALPINE-CVE-2022-0778	libretls@3.3.3p1-r2	3.3.3p1-r3
High	UBUNTU-CVE-2022-0778	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.12
High	ALPINE-CVE-2024-6119	openssl@3.1.3-r0	3.1.7-r0
High	GHSA-c4w7-xm78-47vh	y18n@3.2.1	3.2.2
High	ALPINE-CVE-2023-38039	curl@8.1.2-r0	8.3.0-r0
High	ALPINE-CVE-2023-0286	openssl@1.1.1n-r0	1.1.1t-r0
High	UBUNTU-CVE-2023-0286	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.17
High	ALPINE-CVE-2024-2398	curl@8.5.0-r0	8.7.1-r0
High	UBUNTU-CVE-2024-2398	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.22
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.3
High	UBUNTU-CVE-2021-23840	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.fips.7.2
High	ALPINE-CVE-2023-2650	openssl@3.0.8-r3	3.0.9-r0
High	UBUNTU-CVE-2023-2650	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.19
High	UBUNTU-CVE-2021-3712	openssl@1.1.1f-1ubuntu2.10	no fix listed
High	UBUNTU-CVE-2023-48795	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.5
High	GHSA-qwrx-45xf-jjf7	elasticsearch@7.17.1	7.17.13
High	UBUNTU-CVE-2021-3449	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.fips.7
High	UBUNTU-CVE-2024-28182	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3
High	UBUNTU-CVE-2022-0572	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.14
High	GHSA-r5fr-rjxr-66jc	lodash.template@4.5.0	4.18.0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	ALPINE-CVE-2024-2511	openssl@3.1.3-r0	3.1.4-r6
High	UBUNTU-CVE-2024-2511	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23
High	UBUNTU-CVE-2024-3596	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.8
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	ALPINE-CVE-2022-40303	libxml2@2.9.13-r0	2.9.14-r2
High	UBUNTU-CVE-2022-35737	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.5
High	UBUNTU-CVE-2022-32206	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.12
High	ALPINE-CVE-2022-4450	openssl@1.1.1n-r0	1.1.1t-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.