data-fair Helm chart

Name: data-fair Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Latest 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

910 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	UBUNTU-CVE-2022-1771	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-v39h-62p7-jpjc	fast-uri@2.2.0	2.4.1
Low	ALPINE-CVE-2024-8096	curl@8.5.0-r0	8.10.0-r0
Low	UBUNTU-CVE-2024-8096	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-23c5-xmqv-rm74	minimatch@5.1.6	5.1.8
Low	GHSA-ppp5-5v6c-4jwp	node-forge@1.3.1	1.4.0
Low	GHSA-gmg8-593g-7mv3	poi-ooxml@4.1.2	5.4.0
Low	UBUNTU-CVE-2023-47039	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.66.Final	4.1.125.Final
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	UBUNTU-CVE-2025-15281	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1
Low	GHSA-8g77-54rh-46hx	parse-git-config@3.0.0	no fix listed
Low	ALPINE-CVE-2023-1255	openssl@3.0.8-r3	3.0.8-r4
Low	UBUNTU-CVE-2025-6297	dpkg@1.19.7ubuntu3	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.66.Final	4.1.133.Final
Low	GHSA-wcpc-wj8m-hjx6	protobufjs@6.8.6	7.6.1
Low	UBUNTU-CVE-2026-42011	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.66.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-12243	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12
Low	GHSA-73rr-hh4g-fpgx	diff@5.1.0	5.2.2
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.17.1	2.25.3
Low	UBUNTU-CVE-2022-41916	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2
Low	ALPINE-CVE-2026-33630	c-ares@1.34.5-r0	1.34.8-r0
Low	UBUNTU-CVE-2026-9538	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2022-3591	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.18
Low	GHSA-66ff-xgx4-vchm	protobufjs@6.8.6	7.5.6
Low	UBUNTU-CVE-2025-6395	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm1
Low	GHSA-3xv8-3j54-hgrp	pillow@5.4.1	7.1.0
Low	GHSA-w27v-7q3p-w38r	svgo@1.3.2	2.8.4
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.66.Final	4.1.136.Final
Low	GHSA-73wf-gq98-2v4g	browserslist@4.17.6	4.28.7
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.64	1.78
Low	UBUNTU-CVE-2025-24528	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.0.6	3.1.4
Low	GHSA-8x88-c5mf-7j5w	tar@6.1.15	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@2.2.0	5.0.2
Low	ALPINE-CVE-2024-6923	python3@3.11.6-r0	3.11.10-r0
Low	DLA-2481-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u6
Low	GHSA-vj54-72f3-p5jv	devalue@2.0.1	5.3.2
Low	GHSA-jchw-25xp-jwwc	follow-redirects@1.5.10	1.15.4
Low	DLA-2566-1	libbsd@0.8.3-1	0.8.3-1+deb9u1
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu1.2	no fix listed
Low	GHSA-pqw5-jmp5-px4v	parse-url@6.0.0	8.1.0
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.66.Final	4.1.136.Final
Low	GHSA-rv95-896h-c2vc	express@4.18.2	4.19.2
Low	GHSA-45hq-cxwh-f6vc	pillow@5.4.1	12.3.0
Low	GHSA-76p7-773f-r4q5	serialize-javascript@6.0.1	6.0.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.