data-fair Helm chart

Name: data-fair Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Latest 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

910 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-69420	openssl@3.3.3-r0	3.3.6-r0
Low	UBUNTU-CVE-2025-69420	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2026-57433	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GHSA-xfrj-6vvc-3xm2	xmlsec@2.1.4	2.2.6
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	UBUNTU-CVE-2022-0943	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.8
Low	GHSA-qw3f-w4pf-jh5f	tika-core@1.27	1.28.3
Low	GHSA-44fp-w29j-9vj5	multer@1.4.4	2.0.0
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	UBUNTU-CVE-2023-27535	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	UBUNTU-CVE-2023-4806	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14
Low	ALPINE-CVE-2026-27135	nghttp2@1.64.0-r0	1.68.1
Low	UBUNTU-CVE-2026-27135	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3+esm1
Low	GHSA-9342-92gg-6v29	jakarta.mail@1.6.4	1.6.8
Low	GHSA-6vfc-qv3f-vr6c	markdown-it@8.4.2	12.3.2
Low	UBUNTU-CVE-2022-27774	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Low	UBUNTU-CVE-2026-13221	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GHSA-v62p-rq8g-8h59	pbkdf2@3.1.2	3.1.3
Low	UBUNTU-CVE-2026-42496	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm2
Low	UBUNTU-CVE-2023-27536	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.17.1	2.25.4
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.25.0	0.52.0
Low	UBUNTU-CVE-2024-37370	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.6
Low	ALPINE-CVE-2025-0840	binutils@2.40-r7	2.40-r8
Low	ALPINE-CVE-2023-38546	curl@8.1.2-r0	8.4.0-r0
Low	UBUNTU-CVE-2023-38546	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.20
Low	GHSA-62hf-57xw-28j9	axios@1.6.5	1.15.1
Low	GHSA-h7cp-r72f-jxh6	pbkdf2@3.1.2	3.1.3
Low	GHSA-7cx3-6m66-7c5m	tornado@5.1.1	6.5
Low	UBUNTU-CVE-2022-4292	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.18
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-hhhv-q57g-882q	jose@2.0.6	2.0.7
Low	DLA-2904-1	expat@2.2.0-2+deb9u3	2.2.0-2+deb9u4
Low	UBUNTU-CVE-2026-39979	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	ALPINE-CVE-2024-9287	python3@3.11.6-r0	3.11.11-r0
Low	GHSA-34x7-hfp2-rc4v	tar@6.1.15	7.5.7
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.66.Final	4.1.133.Final
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.16.1	3.16.3
Low	GHSA-44wm-f244-xhp3	pillow@5.4.1	10.3.0
Low	UBUNTU-CVE-2026-9076	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
Low	GHSA-62p4-gmf7-7g93	pillow@5.4.1	12.3.0
Low	UBUNTU-CVE-2026-82209	curl@7.68.0-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2022-3437	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3
Low	UBUNTU-CVE-2021-40528	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Low	UBUNTU-CVE-2021-4193	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.14
Low	UBUNTU-CVE-2023-2283	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.3
Low	UBUNTU-CVE-2023-4781	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.20
Low	GHSA-rjqq-98f6-6j3r	sanitize-html@1.27.5	2.3.1
Low	GHSA-q8qp-cvcw-x6jj	axios@1.6.5	1.15.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.