data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,424 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-gvpg-vgmx-xg6w	nimbus-jose-jwt@9.8.1	9.37.2
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.305.2
Medium	GHSA-96hv-2xvq-fx4p	ws@7.5.9	7.5.11
Medium	GHSA-3ppc-4f35-3m26	minimatch@5.1.6	5.1.7
Medium	ALPINE-CVE-2026-28389	openssl@3.3.3-r0	3.3.7-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.3.3-r0	3.3.7-r0
Medium	UBUNTU-CVE-2026-28389	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3
Medium	UBUNTU-CVE-2026-28390	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Medium	GHSA-pf86-5x62-jrwf	axios@1.6.5	1.15.1
Medium	GHSA-vh95-rmgr-6w4m	minimist@0.0.8	0.2.1
Medium	GHSA-5xp3-jfq3-5q8x	pip@19.3.1	21.1
Medium	GHSA-677m-j7p3-52f9	socket.io-parser@3.3.2	3.3.5
Medium	GHSA-4pg4-qvpc-4q3h	multer@1.4.4	2.0.0
Low	ALPINE-CVE-2025-69420	openssl@3.3.3-r0	3.3.6-r0
Low	UBUNTU-CVE-2025-69420	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2026-57433	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GHSA-xfrj-6vvc-3xm2	xmlsec@2.1.4	2.2.6
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	UBUNTU-CVE-2022-0943	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.8
Low	GHSA-qw3f-w4pf-jh5f	tika-core@1.27	1.28.3
Low	GHSA-44fp-w29j-9vj5	multer@1.4.4	2.0.0
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	UBUNTU-CVE-2023-27535	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	UBUNTU-CVE-2023-4806	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14
Low	ALPINE-CVE-2026-27135	nghttp2@1.64.0-r0	1.68.1
Low	UBUNTU-CVE-2026-27135	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3+esm1
Low	GHSA-9342-92gg-6v29	jakarta.mail@1.6.4	1.6.8
Low	GHSA-6vfc-qv3f-vr6c	markdown-it@8.4.2	12.3.2
Low	UBUNTU-CVE-2022-27774	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Low	UBUNTU-CVE-2026-13221	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GHSA-v62p-rq8g-8h59	pbkdf2@3.1.2	3.1.3
Low	UBUNTU-CVE-2026-42496	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm2
Low	UBUNTU-CVE-2023-27536	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.17.1	2.25.4
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.25.0	0.52.0
Low	UBUNTU-CVE-2024-37370	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.6
Low	ALPINE-CVE-2025-0840	binutils@2.40-r7	2.40-r8
Low	ALPINE-CVE-2023-38546	curl@8.1.2-r0	8.4.0-r0
Low	UBUNTU-CVE-2023-38546	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.20
Low	GHSA-62hf-57xw-28j9	axios@1.6.5	1.15.1
Low	GHSA-h7cp-r72f-jxh6	pbkdf2@3.1.2	3.1.3
Low	GHSA-7cx3-6m66-7c5m	tornado@5.1.1	6.5
Low	UBUNTU-CVE-2022-4292	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.18
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-hhhv-q57g-882q	jose@2.0.6	2.0.7
Low	DLA-2904-1	expat@2.2.0-2+deb9u3	2.2.0-2+deb9u4
Low	UBUNTU-CVE-2026-39979	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	ALPINE-CVE-2024-9287	python3@3.11.6-r0	3.11.11-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.