data-fair 1.1.2 Helm chart

Name: data-fair Helm chart 1.1.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Version 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,569
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,358
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	0773158	3,385
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	0754159	2,973
ghcr.io/data-fair/elasticsearch	7.17.1	1020211393	10,253
library/mongo	4.4	3959258	4,125
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,431 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-5038	stdlib@go1.21.12	1.25.11
Low	UBUNTU-CVE-2026-13757	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1
Low	GHSA-5mg8-w23w-74h3	guava@19.0	32.0.0-android
Low	UBUNTU-CVE-2024-23337	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm1
Low	GHSA-93f3-23rq-pjfp	npm@5.5.1	6.14.6
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.66.Final	4.1.135.Final
Low	GHSA-f88m-g3jw-g9cj	sharp@0.32.6	0.35.0
Low	GHSA-898c-q2cr-xwhg	axios@1.6.5	1.16.0
Low	GHSA-r7g4-qg5f-qqm2	nodemailer@6.9.7	8.0.8
Low	UBUNTU-CVE-2026-11850	krb5@1.17-6ubuntu4.1	no fix listed
Low	GO-2025-4012	stdlib@go1.21.12	1.24.8
Low	DLA-2830-1	tar@1.29b-1.1	1.29b-1.1+deb9u1
Low	GO-2025-3956	stdlib@go1.21.12	1.23.12
Low	UBUNTU-CVE-2025-8058	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1
Low	GO-2025-4011	stdlib@go1.21.12	1.24.8
Low	GO-2025-4015	stdlib@go1.21.12	1.24.8
Low	GO-2026-6218	stdlib@go1.21.12	1.25.13
Low	GHSA-8423-8fgw-73vq	tornado@5.1.1	6.5.8
Low	ALPINE-CVE-2025-5025	curl@8.12.1-r1	8.14.0-r0
Low	GHSA-848j-6mx2-7j84	elliptic@6.5.4	no fix listed
Low	UBUNTU-CVE-2024-43374	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.24
Low	UBUNTU-CVE-2013-4235	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4
Low	UBUNTU-CVE-2025-45582	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-15534	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4
Low	GHSA-r5m4-5vww-w9f5	gdal@3.6.4	3.13.0RC1
Low	GO-2025-3373	stdlib@go1.21.12	1.22.11
Low	GO-2026-5970	golang.org/x/text@v0.16.0	0.39.0
Low	GHSA-268h-hp4c-crq3	nodemailer@6.9.7	8.0.9
Low	GHSA-9gqv-wp59-fq42	http-proxy-middleware@1.3.1	2.0.9
Low	GHSA-wqvq-jvpq-h66f	nodemailer@6.9.7	8.0.9
Low	DLA-2312-1	libx11@2:1.6.4-3+deb9u1	2:1.6.4-3+deb9u2
Low	GHSA-4www-5p9h-95mh	http-proxy-middleware@1.3.1	2.0.8
Low	GO-2025-4155	stdlib@go1.21.12	1.24.11
Low	DLA-3063-1	systemd@232-25+deb9u12	232-25+deb9u14
Low	GHSA-g8qq-57p8-ggw5	sanitize-html@2.11.0	2.17.7
Low	UBUNTU-CVE-2025-14017	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm2
Low	DLA-3047-1	avahi@0.6.32-2	0.6.32-2+deb9u1
Low	GO-2025-4008	stdlib@go1.21.12	1.24.8
Low	GO-2025-4010	stdlib@go1.21.12	1.24.8
Low	GHSA-vccv-cmxp-4j9h	sanitize-html@2.11.0	2.17.5
Low	UBUNTU-CVE-2025-22134	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.30
Low	UBUNTU-CVE-2024-10041	pam@1.3.1-5ubuntu4.3	no fix listed
Low	UBUNTU-CVE-2026-59850	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-cc9r-2j5m-2m83	nodemailer@6.10.1	9.1.0
Low	GHSA-w235-7p84-xx57	tornado@5.1.1	6.4.1
Low	GHSA-wmmp-3585-3rmp	nodemailer@6.9.7	9.1.0
Low	ALPINE-CVE-2025-0167	curl@8.5.0-r0	8.12.0-r0
Low	UBUNTU-CVE-2024-43802	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.25
Low	UBUNTU-CVE-2026-40612	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-44777	jq@1.6-1ubuntu0.20.04.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.