data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,424 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-mwcw-c2x4-8c55	nanoid@3.3.6	3.3.8
Low	GO-2024-3105	stdlib@go1.21.12	1.22.7
Low	UBUNTU-CVE-2023-48231	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-q8mj-m7cp-5q26	qs@6.13.0	6.15.2
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@6.0.1	7.0.3
Low	UBUNTU-CVE-2026-49839	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	ALPINE-CVE-2022-2867	tiff@4.3.0-r0	4.4.0-r0
Low	ALPINE-CVE-2022-2868	tiff@4.3.0-r0	4.4.0-r0
Low	ALPINE-CVE-2022-2869	tiff@4.3.0-r0	4.4.0-r0
Low	UBUNTU-CVE-2026-73073	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm13
Low	UBUNTU-CVE-2025-53906	vim@2:8.1.2269-1ubuntu5.7	no fix listed
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
Low	GO-2026-4981	stdlib@go1.21.12	1.25.10
Low	GO-2025-3563	stdlib@go1.21.12	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.10.4	2.18.9
Low	GHSA-vmf3-w455-68vh	tar@6.1.15	7.5.16
Low	GO-2026-4977	stdlib@go1.21.12	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	UBUNTU-CVE-2026-59848	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-9w3x-85mw-4fwm	vuetify@2.7.1	3.0.0
Low	GO-2026-4986	stdlib@go1.21.12	1.25.10
Low	UBUNTU-CVE-2026-5704	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.4+esm3
Low	GO-2026-4918	stdlib@go1.21.12	1.25.10
Low	GO-2026-4337	stdlib@go1.21.12	1.24.13
Low	UBUNTU-CVE-2023-6004	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.25.7	2.7.0
Low	GHSA-5c9x-8gcm-mpgx	axios@1.6.5	1.15.1
Low	GHSA-vf2m-468p-8v99	axios@1.6.5	1.15.1
Low	PYSEC-2026-193	gdal@3.6.4	3.13.1
Low	GHSA-x426-x7cc-3fpc	@hapi/wreck@15.1.0	18.1.2
Low	GHSA-vxvm-qww3-2fh7	mongodb@4.2.2	4.17.0
Low	GHSA-54xq-cgqr-rpm3	sharp@0.31.3	0.32.6
Low	GO-2026-4601	stdlib@go1.21.12	1.25.8
Low	GHSA-qx2v-qp2m-jg93	postcss@8.4.31	8.5.10
Low	UBUNTU-CVE-2026-26269	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm2
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.3
Low	GHSA-56r7-h6mw-rcfv	elasticsearch@7.17.1	8.18.8
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.66.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.66.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-78410	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	GHSA-9h6g-pr28-7cqp	nodemailer@6.9.7	6.9.9
Low	GHSA-f7q4-pwc6-w24p	elliptic@6.5.4	6.5.7
Low	GHSA-q6x5-8v7m-xcrf	@protobufjs/utf8@1.1.0	1.1.1
Low	GHSA-q6x5-8v7m-xcrf	protobufjs@6.8.6	7.5.6
Low	GHSA-gphj-4h6p-37xq	x-pack-core@7.17.1	8.19.8
Low	ALPINE-CVE-2025-4516	python3@3.11.6-r0	3.11.12-r1
Low	GO-2026-5026	stdlib@go1.21.12	1.25.13
Low	PYSEC-2026-2153	gdal@3.6.4	3.13.0
Low	UBUNTU-CVE-2025-14104	util-linux@2.34-0.1ubuntu9.3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.