data-fair Helm chart

Name: data-fair Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Latest 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,569
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,358
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	0773158	3,385
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	0754159	2,973
ghcr.io/data-fair/elasticsearch	7.17.1	1020211393	10,253
library/mongo	4.4	3959258	4,125
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

917 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-8w57-jfpm-945m	http-proxy-agent@2.0.0	2.1.0
Low	GHSA-jgpv-4h4c-xhw3	pillow@5.4.1	8.1.2
Low	UBUNTU-CVE-2025-52099	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@2.0.0	3.2.1
Low	GHSA-7g45-4rm6-3mm3	guava@19.0	32.0.0-android
Low	PYSEC-2026-2156	gdal@3.6.4	3.13.0
Low	DLA-2898-1	nss@2:3.26.2-1.1+deb9u1	2:3.26.2-1.1+deb9u5
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.25.7	1.26.18
Low	GO-2025-4116	golang.org/x/crypto@v0.25.0	0.43.0
Low	UBUNTU-CVE-2026-58055	nghttp2@1.40.0-1build1	no fix listed
Low	GO-2026-4870	stdlib@go1.21.12	1.25.9
Low	UBUNTU-CVE-2026-39956	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	GO-2025-4009	stdlib@go1.21.12	1.24.8
Low	GO-2026-4947	stdlib@go1.21.12	1.25.9
Low	GHSA-fx83-v9x8-x52w	protobufjs@6.8.6	7.5.6
Low	UBUNTU-CVE-2021-20193	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.2
Low	GHSA-jggg-4jg4-v7c6	protobufjs@6.8.6	7.5.8
Low	GHSA-4mjr-xmp4-gh2g	qs@6.5.3	6.16.0
Low	GO-2025-4006	stdlib@go1.21.12	1.24.8
Low	UBUNTU-CVE-2026-33948	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	UBUNTU-CVE-2025-29088	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7
Low	GO-2026-5037	stdlib@go1.21.12	1.25.11
Low	UBUNTU-CVE-2026-40225	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.24+esm3
Low	UBUNTU-CVE-2026-43894	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	GO-2026-4971	stdlib@go1.21.12	1.25.10
Low	GHSA-g3ch-rx76-35fx	vue-template-compiler@2.6.14	no fix listed
Low	DLA-3029-1	cups@2.2.1-8+deb9u4	2.2.1-8+deb9u8
Low	DLA-2361-1	libx11@2:1.6.4-3+deb9u1	2:1.6.4-3+deb9u3
Low	UBUNTU-CVE-2026-43896	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	GO-2026-5972	stdlib@go1.21.12	1.25.13
Low	GO-2026-6088	stdlib@go1.21.12	1.25.13
Low	GO-2026-6089	stdlib@go1.21.12	1.25.13
Low	GO-2026-6090	stdlib@go1.21.12	1.25.13
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	UBUNTU-CVE-2026-50813	sqlite3@3.31.1-4ubuntu0.2	no fix listed
Low	GHSA-xx6v-rp6x-q39c	axios@1.6.5	1.15.1
Low	GO-2026-5038	stdlib@go1.21.12	1.25.11
Low	UBUNTU-CVE-2026-13757	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1
Low	GHSA-5mg8-w23w-74h3	guava@19.0	32.0.0-android
Low	UBUNTU-CVE-2024-23337	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm1
Low	GHSA-93f3-23rq-pjfp	npm@5.5.1	6.14.6
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.66.Final	4.1.135.Final
Low	GHSA-f88m-g3jw-g9cj	sharp@0.32.6	0.35.0
Low	GHSA-898c-q2cr-xwhg	axios@1.6.5	1.16.0
Low	GHSA-r7g4-qg5f-qqm2	nodemailer@6.9.7	8.0.8
Low	UBUNTU-CVE-2026-11850	krb5@1.17-6ubuntu4.1	no fix listed
Low	GO-2025-4012	stdlib@go1.21.12	1.24.8
Low	DLA-2830-1	tar@1.29b-1.1	1.29b-1.1+deb9u1
Low	GO-2025-3956	stdlib@go1.21.12	1.23.12
Low	UBUNTU-CVE-2025-8058	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.