data-fair Helm chart

Name: data-fair Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Latest 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

910 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	DLA-2932-1	tiff@4.0.8-2+deb9u4	4.0.8-2+deb9u8
Low	UBUNTU-CVE-2025-0395	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.17
Low	UBUNTU-CVE-2023-4039	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	UBUNTU-CVE-2026-76642	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	DSA-4685-1	apt@1.4.9	1.4.10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.25.0	0.45.0
Low	UBUNTU-CVE-2026-11822	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2022-2923	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.13
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.24+esm1
Low	UBUNTU-CVE-2024-28085	util-linux@2.34-0.1ubuntu9.3	2.34-0.1ubuntu9.6
Low	PYSEC-2026-3721	pip@19.3.1	26.2
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.1.0	4.1.1
Low	UBUNTU-CVE-2025-15079	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm2
Low	GHSA-65ch-62r8-g69g	node-forge@1.3.1	1.3.2
Low	GHSA-mq26-g339-26xf	pip@19.3.1	23.3
Low	ALPINE-CVE-2025-4947	curl@8.12.1-r1	8.14.0-r0
Low	GHSA-cm22-4g7w-348p	serve-static@1.15.0	1.16.0
Low	UBUNTU-CVE-2023-2609	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.15
Low	GHSA-cpwx-vrp4-4pq7	jinja2@2.10.3	3.1.6
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.82.1	1.83.1
Low	UBUNTU-CVE-2026-73076	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm12
Low	DLA-2784-1	icu@57.1-6+deb9u3	57.1-6+deb9u5
Low	UBUNTU-CVE-2026-39881	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm4
Low	UBUNTU-CVE-2026-6429	curl@7.68.0-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2022-4293	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.18
Low	UBUNTU-CVE-2026-73072	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm12
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-p9pc-299p-vxgp	yargs-parser@7.0.0	13.1.2
Low	UBUNTU-CVE-2024-22365	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7
Low	ALPINE-CVE-2026-22796	openssl@3.3.3-r0	3.3.6-r0
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.25.0	0.45.0
Low	GHSA-gvwx-54wh-qm9j	tar@6.1.15	7.5.17
Low	UBUNTU-CVE-2026-43961	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm7
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.25.0	0.52.0
Low	ALPINE-CVE-2025-10148	curl@8.12.1-r1	8.14.1-r2
Low	GHSA-434g-2637-qmqr	elliptic@6.5.4	6.5.6
Low	GHSA-qrpm-p2h7-hrv2	nanoid@3.1.25	3.1.31
Low	GHSA-vjh7-7g9h-fjfh	elliptic@6.5.4	6.6.1
Low	UBUNTU-CVE-2026-51400	vim@2:8.1.2269-1ubuntu5.7	no fix listed
Low	UBUNTU-CVE-2026-55895	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm9
Low	GO-2024-3106	stdlib@go1.21.12	1.22.7
Low	ALPINE-CVE-2024-2004	curl@8.5.0-r0	8.7.1-r0
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r2	1.36.1-r7
Low	GHSA-68m8-v89j-7j2p	bc-fips@1.0.2	1.0.2.4
Low	UBUNTU-CVE-2023-5441	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.20
Low	UBUNTU-CVE-2026-45130	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm5
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r2	1.36.1-r7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.