data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 15 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,617 findings — 17 critical, 78 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,42417787541,768

2,617 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,569
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,358
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	0773158	3,385
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	0754159	2,973
ghcr.io/data-fair/elasticsearch	7.17.1	1020211393	10,253
library/mongo	4.4	3959258	4,125
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

917 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-51401	vim@2:8.1.2269-1ubuntu5.7	no fix listed
Low	ALPINE-CVE-2023-52426	expat@2.5.0-r1	2.6.0-r0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-fc9h-whq2-v747	elliptic@6.5.4	6.6.0
Low	GHSA-qhxp-v273-g94h	sanitize-html@1.27.5	2.0.0-beta
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.1	2.3.2
Low	UBUNTU-CVE-2023-46246	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-qw6h-vgh9-j6wx	express@4.18.2	4.20.0
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	UBUNTU-CVE-2026-89158	pcre2@10.34-7	no fix listed
Low	GHSA-m9gh-789g-q5pv	elasticsearch@7.17.1	8.19.8
Low	UBUNTU-CVE-2023-48233	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	UBUNTU-CVE-2023-48234	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	UBUNTU-CVE-2023-48235	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	UBUNTU-CVE-2023-48237	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-f38q-mgvj-vph7	protobufjs@6.8.6	7.6.3
Low	GHSA-7q8q-rj6j-mhjq	axios@1.6.5	1.18.0
Low	UBUNTU-CVE-2026-55693	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm9
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b
Low	GHSA-fxwf-4rqh-v8g3	socket.io@2.2.0	2.4.0
Low	ALPINE-CVE-2023-39742	giflib@5.2.1-r4	5.2.2-r0
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	GHSA-6v5v-wf23-fmfq	markdown-it@8.4.2	14.2.0
Low	UBUNTU-CVE-2026-57455	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm9
Low	UBUNTU-CVE-2026-33947	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	UBUNTU-CVE-2023-48236	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.10.4	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2024-41957	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.24
Low	PYSEC-2025-265	tornado@5.1.1	6.5.3
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	ALPINE-CVE-2024-11053	curl@8.5.0-r0	8.11.1-r0
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25
Low	GHSA-gh4j-gqv2-49f6	fast-xml-parser@4.2.5	5.7.0
Low	UBUNTU-CVE-2025-5372	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-mwcw-c2x4-8c55	nanoid@3.3.6	3.3.8
Low	GO-2024-3105	stdlib@go1.21.12	1.22.7
Low	UBUNTU-CVE-2023-48231	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-q8mj-m7cp-5q26	qs@6.13.0	6.15.2
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@6.0.1	7.0.3
Low	UBUNTU-CVE-2026-49839	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	ALPINE-CVE-2022-2867	tiff@4.3.0-r0	4.4.0-r0
Low	ALPINE-CVE-2022-2868	tiff@4.3.0-r0	4.4.0-r0
Low	ALPINE-CVE-2022-2869	tiff@4.3.0-r0	4.4.0-r0
Low	UBUNTU-CVE-2026-73073	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm13
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
Low	GO-2026-4981	stdlib@go1.21.12	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	17787541,768	38,424

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.