data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 15 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,617 findings — 17 critical, 78 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,42417787541,768

2,617 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,569
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,358
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	0773158	3,385
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	0754159	2,973
ghcr.io/data-fair/elasticsearch	7.17.1	1020211393	10,253
library/mongo	4.4	3959258	4,125
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

917 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-18508	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-8277	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	UBUNTU-CVE-2026-89160	pcre2@10.34-7	no fix listed
Low	GHSA-xhjh-pmcv-23jw	axios@1.6.5	1.15.1
Low	UBUNTU-CVE-2022-3219	gnupg2@2.2.19-3ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-35177	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm9
Low	UBUNTU-CVE-2025-4878	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm1
Low	GHSA-qvfw-j98x-7q72	multer@1.4.4	2.3.0
Low	UBUNTU-CVE-2025-9403	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	ALPINE-CVE-2025-69418	openssl@3.3.3-r0	3.3.6-r0
Low	UBUNTU-CVE-2025-69418	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2
Low	GO-2026-5024	golang.org/x/sys@v0.22.0	0.44.0
Low	UBUNTU-CVE-2026-59846	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-76c9-3jph-rj3q	on-headers@1.0.2	1.1.0
Low	UBUNTU-CVE-2026-18477	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2025-6141	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
Low	ALPINE-CVE-2015-2104	python3@3.11.6-r0	3.11.10-r0
Low	DLA-2424-1	tzdata@2019c-0+deb9u1	2020d-0+deb9u1
Low	DLA-2509-1	tzdata@2019c-0+deb9u1	2020e-0+deb9u1
Low	DLA-2542-1	tzdata@2019c-0+deb9u1	2021a-0+deb9u1
Low	DLA-2593-1	ca-certificates@20161130+nmu1+deb9u1	20200601~deb9u2
Low	DLA-2759-1	gnutls28@3.5.8-5+deb9u4	3.5.8-5+deb9u6
Low	DLA-2797-1	tzdata@2019c-0+deb9u1	2021a-0+deb9u2
Low	DLA-2836-2	nss@2:3.26.2-1.1+deb9u1	2:3.26.2-1.1+deb9u4
Low	DLA-2948-1	debian-archive-keyring@2017.5+deb9u1	2017.5+deb9u2
Low	DLA-2963-1	tzdata@2019c-0+deb9u1	2021a-0+deb9u3
Low	DLA-3051-1	tzdata@2019c-0+deb9u1	2021a-0+deb9u4
Low	GO-2026-5841	github.com/klauspost/compress@v1.17.8	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.25.0	no fix listed
Low	PYSEC-2023-175	pillow@5.4.1	10.0.1
Low	USN-5473-1	ca-certificates@20210119~20.04.2	20211016~20.04.1
Low	USN-6105-1	ca-certificates@20210119~20.04.2	20230311ubuntu0.20.04.1
Low	USN-6663-1	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.22
Low	USN-7034-1	ca-certificates@20210119~20.04.2	20240203~20.04.1
Low	USN-8091-1	util-linux@2.34-0.1ubuntu9.3	2.34-0.1ubuntu9.6+esm1
Low	USN-8202-3	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm3
Low	USN-8688-1	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r12	1.37.0-r14
Low	GHSA-pxg6-pf52-xh8x	cookie@0.4.2	0.7.0
Low	UBUNTU-CVE-2021-27645	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Low	UBUNTU-CVE-2026-0965	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.66.Final	4.1.125.Final
Low	GHSA-52f5-9888-hmc6	tmp@0.1.0	0.2.4
Low	GHSA-c6rq-rjc2-86v2	chownr@1.0.1	1.1.0
Low	GHSA-6475-r3vj-m8vf	@smithy/config-resolver@2.0.16	4.4.0
Low	GHSA-4gmj-3p3h-gm8h	es5-ext@0.10.62	0.10.63
Low	UBUNTU-CVE-2026-40228	systemd@245.4-4ubuntu3.15	no fix listed
Low	GHSA-m3q2-p4fw-w38m	nuxt@2.15.8	3.21.7
Low	GHSA-4x5r-pxfx-6jf8	@babel/core@7.16.0	7.29.6
Low	GHSA-vpq2-c234-7xj6	@tootallnate/once@2.0.0	2.0.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	17787541,768	38,424

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.