data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

910 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-3w6x-2g7m-8v23	axios@1.6.5	1.15.2
Low	GHSA-g6rj-rv7j-xwp4	pillow@5.4.1	8.2.0
Low	GHSA-r292-9mhp-454m	tar@6.1.15	7.5.21
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.64	1.84
Low	UBUNTU-CVE-2026-0966	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.5	1.16.0
Low	ALPINE-CVE-2025-15468	openssl@3.3.3-r0	3.3.6-r0
Low	GHSA-r28c-9q8g-f849	postcss@8.4.31	8.5.18
Low	GHSA-6x26-6r6f-m537	thumbor@6.7.0	7.8.0
Low	GHSA-qjxf-f2mg-c6mc	tornado@5.1.1	6.5.5
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.64	1.78
Low	GHSA-jvwf-75h9-cwgg	protobufjs@6.8.6	7.5.6
Low	DLA-3037-1	libjpeg-turbo@1:1.5.1-2	1:1.5.1-2+deb9u2
Low	UBUNTU-CVE-2026-48959	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-fj3w-jwp8-x2g3	fast-xml-parser@4.2.5	4.5.4
Low	UBUNTU-CVE-2026-59843	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	DLA-2777-1	tiff@4.0.8-2+deb9u4	4.0.8-2+deb9u7
Low	UBUNTU-CVE-2026-5928	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-3833	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.64	no fix listed
Low	UBUNTU-CVE-2026-40164	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	GHSA-h75v-3vvj-5mfj	jinja2@2.10.3	3.1.4
Low	GHSA-rm97-x556-q36h	sanitize-html@2.11.0	2.12.1
Low	GHSA-wf5p-g6vw-rhxx	axios@0.21.4	0.28.0
Low	ALPINE-CVE-2023-48161	giflib@5.2.1-r4	5.2.2-r0
Low	GHSA-395f-4hp3-45gv	shell-quote@1.8.1	1.9.0
Low	GHSA-c83g-rgw3-j3cx	browserslist@4.17.6	4.28.7
Low	GHSA-ph34-pc88-72gc	npm@5.5.1	5.7.1
Low	UBUNTU-CVE-2026-6791	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-8458	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm4
Low	GHSA-7pqw-9j4j-h8q3	extract-zip@1.6.7	no fix listed
Low	UBUNTU-CVE-2026-6253	curl@7.68.0-1ubuntu2.7	no fix listed
Low	GHSA-mpf4-983q-p7j4	tornado@5.1.1	6.5.8
Low	GHSA-w5hq-g745-h8pq	uuid@8.3.2	11.1.1
Low	UBUNTU-CVE-2020-27618	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Low	GHSA-w5gg-2q56-6h4f	elasticsearch@7.17.1	7.17.19
Low	GHSA-ghfh-p92w-j4mg	elasticsearch@7.17.1	8.15.1
Low	GHSA-j452-xhg8-qg39	protocol-buffers-schema@3.6.0	3.6.1
Low	UBUNTU-CVE-2026-33412	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm3
Low	GHSA-w4pp-8pjf-rmxw	pacote@17.0.4	21.5.1
Low	UBUNTU-CVE-2022-4415	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20
Low	UBUNTU-CVE-2026-41411	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm6
Low	UBUNTU-CVE-2022-2980	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.13
Low	GHSA-gxpj-cx7g-858c	debug@2.6.8	2.6.9
Low	DLA-2425-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u5
Low	GHSA-phj3-59pf-cp83	thumbor@6.7.0	7.8.0
Low	GHSA-2328-f5f3-gj25	node-forge@1.3.1	1.4.0
Low	GHSA-h5c8-rqwp-cp95	jinja2@2.10.3	3.1.3
Low	GHSA-9ppj-qmqm-q256	tar@6.1.15	7.5.11
Low	GHSA-qwph-4952-7xr6	jsonwebtoken@8.5.1	9.0.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.