data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,424 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	GHSA-fvcv-3m26-pcqx	axios@1.6.5	1.15.0
Low	UBUNTU-CVE-2023-7104	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.6
Low	GHSA-jmr9-qjv8-65gv	extract-zip@1.6.7	no fix listed
Low	UBUNTU-CVE-2022-45142	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4
Low	UBUNTU-CVE-2022-4141	vim@2:8.1.2269-1ubuntu5.7	no fix listed
Low	GHSA-jpp7-7chh-cf67	parse-url@6.0.0	6.0.1
Low	UBUNTU-CVE-2026-86145	pcre2@10.34-7	no fix listed
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.66.Final	4.1.108.Final
Low	DLA-2657-1	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.1	2.25.5
Low	GHSA-rcmh-qjqh-p98v	nodemailer@6.9.7	7.0.11
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.64	1.66
Low	GHSA-6xx3-rg99-gc3p	bc-fips@1.0.2	1.0.2.1
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	UBUNTU-CVE-2022-1771	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-v39h-62p7-jpjc	fast-uri@2.2.0	2.4.1
Low	ALPINE-CVE-2024-8096	curl@8.5.0-r0	8.10.0-r0
Low	UBUNTU-CVE-2024-8096	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-23c5-xmqv-rm74	minimatch@5.1.6	5.1.8
Low	GHSA-ppp5-5v6c-4jwp	node-forge@1.3.1	1.4.0
Low	GHSA-gmg8-593g-7mv3	poi-ooxml@4.1.2	5.4.0
Low	UBUNTU-CVE-2023-47039	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.66.Final	4.1.125.Final
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	UBUNTU-CVE-2025-15281	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1
Low	GHSA-8g77-54rh-46hx	parse-git-config@3.0.0	no fix listed
Low	ALPINE-CVE-2023-1255	openssl@3.0.8-r3	3.0.8-r4
Low	UBUNTU-CVE-2025-6297	dpkg@1.19.7ubuntu3	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.66.Final	4.1.133.Final
Low	GHSA-wcpc-wj8m-hjx6	protobufjs@6.8.6	7.6.1
Low	UBUNTU-CVE-2026-42011	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.66.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-12243	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12
Low	GHSA-73rr-hh4g-fpgx	diff@5.1.0	5.2.2
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.17.1	2.25.3
Low	UBUNTU-CVE-2022-41916	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2
Low	ALPINE-CVE-2026-33630	c-ares@1.34.5-r0	1.34.8-r0
Low	UBUNTU-CVE-2026-9538	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2022-3591	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.18
Low	GHSA-66ff-xgx4-vchm	protobufjs@6.8.6	7.5.6
Low	UBUNTU-CVE-2025-6395	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm1
Low	GHSA-3xv8-3j54-hgrp	pillow@5.4.1	7.1.0
Low	GHSA-w27v-7q3p-w38r	svgo@1.3.2	2.8.4
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.66.Final	4.1.136.Final
Low	GHSA-73wf-gq98-2v4g	browserslist@4.17.6	4.28.7
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.64	1.78
Low	UBUNTU-CVE-2025-24528	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.