StackRadar

data-fair Helm chart

data354-helmVerified publisher

Scored 14 Sept 2026

A Helm chart for datafair project

Latest 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images
ImageTagVulnerabilitiesRadar Score
apsl/thumbor6.7.02053832,190
ghcr.io/data-fair/simple-directory4011721483,568
koumoul/openapi-viewer10453441,828
koumoul/capture104561012,520
ghcr.io/data-fair/metrics028631493,357
ghcr.io/data-fair/notify304321492,248
ghcr.io/data-fair/data-fair×2316731583,386
ghcr.io/data-fair/portals104271151,880
ghcr.io/data-fair/processings×2116541592,974
ghcr.io/data-fair/elasticsearch7.17.1111921138610,213
library/mongo4.448592514,087
prom/prometheuslatest0011195

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,424 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-v88g-cgmw-v5xwajv@5.2.36.12.3
MediumUBUNTU-CVE-2022-0529unzip@6.0-25ubuntu16.0-25ubuntu1.1
MediumUBUNTU-CVE-2026-5260gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm2
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.25.00.52.0
MediumUBUNTU-CVE-2023-4813glibc@2.31-0ubuntu9.22.31-0ubuntu9.14
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumALPINE-CVE-2025-0938python3@3.11.6-r03.11.12-r0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.25.00.35.0
MediumGHSA-qjx8-664m-686jjs-cookie@3.0.53.0.7
MediumDLA-2972-1libxml2@2.9.4+dfsg1-2.2+deb9u22.9.4+dfsg1-2.2+deb9u6
MediumGHSA-cpq7-6gpm-g9rccipher-base@1.0.41.0.5
MediumGHSA-8cj5-5rvv-wf4vtar-fs@2.1.12.1.3
MediumUBUNTU-CVE-2020-16156perl@5.30.0-9ubuntu0.25.30.0-9ubuntu0.3
MediumUBUNTU-CVE-2026-8927curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.25+esm4
MediumGHSA-fv2f-rw9f-v9cmsmtp-server@3.5.03.18.3
MediumUBUNTU-CVE-2022-3116heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.1
MediumALPINE-CVE-2023-27043python3@3.11.6-r03.11.10-r0
MediumUBUNTU-CVE-2026-42010gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm2
MediumGHSA-hjxc-462x-x77jyarn@1.3.21.19.0
MediumALPINE-CVE-2026-28388openssl@3.3.3-r03.3.7-r0
MediumUBUNTU-CVE-2026-28388openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.24+esm3
MediumGHSA-99f4-grh7-6pcq@grpc/grpc-js@1.13.11.13.5
MediumGHSA-m7jm-9gc2-mpf2fast-xml-parser@4.2.54.5.4
MediumUBUNTU-CVE-2023-28321curl@7.68.0-1ubuntu2.77.68.0-1ubuntu2.19
MediumALPINE-CVE-2025-69421openssl@3.3.3-r03.3.6-r0
MediumUBUNTU-CVE-2025-69421openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.24+esm2
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumGHSA-p92q-9vqr-4j8vaxios@1.6.51.16.0
MediumALPINE-CVE-2024-2466curl@8.5.0-r08.7.1-r0
MediumGHSA-pvrw-g6fx-mcx2is_js@0.9.0no fix listed
MediumGHSA-vj76-c3g6-qr5vtar-fs@2.1.12.1.4
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.66.Final4.1.135.Final
MediumUBUNTU-CVE-2023-1667libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.3
MediumGHSA-pfrx-2q88-qq97got@6.7.111.8.5
MediumUBUNTU-CVE-2022-0213vim@2:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.14
MediumALPINE-CVE-2026-28387openssl@3.3.3-r03.3.7-r0
MediumUBUNTU-CVE-2026-28387openssl@1.1.1f-1ubuntu2.101.1.1f-1ubuntu2.24+esm3
MediumGHSA-5pgg-2g8v-p4x9xlsx@0.18.5no fix listed
MediumGHSA-jmr7-xgp7-cmfjfast-xml-parser@4.2.54.5.4
MediumUBUNTU-CVE-2025-32988gnutls28@3.6.13-2ubuntu1.63.6.13-2ubuntu1.12+esm1
MediumGHSA-wqfc-cr59-h64pyarn@1.3.21.17.3
MediumUBUNTU-CVE-2021-3999glibc@2.31-0ubuntu9.22.31-0ubuntu9.7
MediumGHSA-325j-24f4-qv5xssri@4.1.65.2.2
MediumGHSA-g5ww-5jh7-63cxprotobuf-java@3.16.13.16.3
MediumUBUNTU-CVE-2022-0530unzip@6.0-25ubuntu16.0-25ubuntu1.1
MediumUBUNTU-CVE-2026-32316jq@1.6-1ubuntu0.20.04.11.6-1ubuntu0.20.04.1+esm2
MediumGHSA-hwqf-gcqm-7353nodemailer@5.0.06.6.1
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.20.11.20.3
MediumGHSA-3j8f-xvm3-ffx4parse-path@4.0.35.0.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.2latest3 years ago6.7.021747541,75438,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.