data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,424 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.0.6	3.1.4
Low	GHSA-8x88-c5mf-7j5w	tar@6.1.15	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@2.2.0	5.0.2
Low	ALPINE-CVE-2024-6923	python3@3.11.6-r0	3.11.10-r0
Low	DLA-2481-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u6
Low	GHSA-vj54-72f3-p5jv	devalue@2.0.1	5.3.2
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.5.10	1.15.4
Low	DLA-2566-1	libbsd@0.8.3-1	0.8.3-1+deb9u1
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu1.2	no fix listed
Low	GHSA-pqw5-jmp5-px4v	parse-url@6.0.0	8.1.0
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.66.Final	4.1.136.Final
Low	GHSA-rv95-896h-c2vc	express@4.18.2	4.19.2
Low	GHSA-45hq-cxwh-f6vc	pillow@5.4.1	12.3.0
Low	GHSA-76p7-773f-r4q5	serialize-javascript@6.0.1	6.0.2
Low	UBUNTU-CVE-2022-2598	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.17
Low	GHSA-5x94-69rx-g8h2	pillow@5.4.1	12.3.0
Low	GHSA-phj9-mv4w-65pm	pillow@5.4.1	12.3.0
Low	GHSA-mm7p-fcc7-pg87	nodemailer@6.9.7	7.0.7
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-8gw3-rxh4-v6jx	expr-eval@2.0.2	no fix listed
Low	GHSA-h383-gmxw-35v2	log4j-1.2-api@2.17.1	2.25.4
Low	UBUNTU-CVE-2026-41992	gzip@1.10-0ubuntu4	no fix listed
Low	UBUNTU-CVE-2023-7008	systemd@245.4-4ubuntu3.15	no fix listed
Low	GHSA-cqjp-jf4r-h5q9	thumbor@6.7.0	7.8.0
Low	GHSA-269q-hmxg-m83q	netty-codec-http@4.1.66.Final	4.1.77.Final
Low	DLA-2760-1	nettle@3.3-1+b2	3.3-1+deb9u1
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.66.Final	4.1.136.Final
Low	GHSA-8v84-f9pq-wr9x	pillow@5.4.1	12.3.0
Low	GHSA-6fx8-h7jm-663j	parseuri@0.0.5	no fix listed
Low	GHSA-xv26-6w52-cph6	websocket-driver@0.7.4	0.7.5
Low	GHSA-5vjc-7cxw-4w6j	thumbor@6.7.0	7.8.0
Low	DSA-4646-1	icu@57.1-6+deb9u3	57.1-6+deb9u4
Low	GHSA-mm3m-5497-xggg	elasticsearch@7.17.1	7.17.25
Low	GHSA-c2c7-rcm5-vvqj	picomatch@2.3.1	2.3.2
Low	DLA-2596-1	shadow@1:4.4-4.1	1:4.4-4.1+deb9u1
Low	GHSA-jgx4-7v3v-vwfm	elasticsearch@7.17.1	7.17.21
Low	UBUNTU-CVE-2020-29562	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Low	ALPINE-CVE-2023-46219	curl@8.1.2-r0	8.5.0-r0
Low	ALPINE-CVE-2024-4603	openssl@3.1.3-r0	3.1.5-r0
Low	GHSA-737v-mqg7-c878	defu@6.1.2	6.1.5
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	UBUNTU-CVE-2026-52859	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm8
Low	UBUNTU-CVE-2026-8932	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm7
Low	GHSA-3x9g-8vmp-wqvf	tornado@5.1.1	6.5.6
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1
Low	DLA-2771-1	krb5@1.15-1+deb9u1	1.15-1+deb9u3
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.8.1	9.37.4
Low	GHSA-2g4f-4pwh-qvx6	ajv@8.12.0	8.18.0
Low	UBUNTU-CVE-2026-8286	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm4
Low	ALPINE-CVE-2024-0853	curl@8.5.0-r0	8.6.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.