data-fair Helm chart

Name: data-fair Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Latest 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,568
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,357
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	1673158	3,386
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	1654159	2,974
ghcr.io/data-fair/elasticsearch	7.17.1	1119211386	10,213
library/mongo	4.4	4859251	4,087
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,424 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-ghfh-p92w-j4mg	elasticsearch@7.17.1	8.15.1
Low	GHSA-j452-xhg8-qg39	protocol-buffers-schema@3.6.0	3.6.1
Low	UBUNTU-CVE-2026-33412	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm3
Low	GHSA-w4pp-8pjf-rmxw	pacote@17.0.4	21.5.1
Low	UBUNTU-CVE-2022-4415	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20
Low	UBUNTU-CVE-2026-41411	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm6
Low	UBUNTU-CVE-2022-2980	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.13
Low	GHSA-gxpj-cx7g-858c	debug@2.6.8	2.6.9
Low	DLA-2425-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u5
Low	GHSA-phj3-59pf-cp83	thumbor@6.7.0	7.8.0
Low	GHSA-2328-f5f3-gj25	node-forge@1.3.1	1.4.0
Low	GHSA-h5c8-rqwp-cp95	jinja2@2.10.3	3.1.3
Low	GHSA-9ppj-qmqm-q256	tar@6.1.15	7.5.11
Low	GHSA-qwph-4952-7xr6	jsonwebtoken@8.5.1	9.0.0
Low	UBUNTU-CVE-2023-1170	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.12
Low	UBUNTU-CVE-2020-13776	systemd@245.4-4ubuntu3.15	no fix listed
Low	GHSA-mpwj-fcr6-x34c	yarn@1.3.2	1.22.13
Low	UBUNTU-CVE-2026-44656	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm5
Low	GO-2026-4341	stdlib@go1.21.12	1.24.12
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	DLA-2285-1	librsvg@2.40.16-1+b1	2.40.21-0+deb9u1
Low	GHSA-67mf-3cr5-8w23	bc-fips@1.0.2	1.0.2.6
Low	GHSA-2p49-hgcm-8545	svgo@1.3.2	2.8.3
Low	GHSA-968p-4wvh-cqc8	@babel/helpers@7.16.3	7.26.10
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.23.2	7.26.10
Low	GHSA-3p68-rc4w-qgx5	axios@1.6.5	1.15.0
Low	UBUNTU-CVE-2026-42012	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2023-1175	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.12
Low	DLA-2669-1	libxml2@2.9.4+dfsg1-2.2+deb9u2	2.9.4+dfsg1-2.2+deb9u5
Low	UBUNTU-CVE-2026-57432	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GHSA-jqh4-m9w3-8hp9	axios@1.8.4	1.18.0
Low	UBUNTU-CVE-2022-47024	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.12
Low	DLA-2694-1	tiff@4.0.8-2+deb9u4	4.0.8-2+deb9u6
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.66.Final	4.1.133.Final
Low	GHSA-wc9g-mqfw-jrwm	multer@1.4.4	2.3.0
Low	GHSA-7fh5-64p2-3v2j	postcss@7.0.39	8.4.31
Low	GHSA-hjfx-8p6c-g7gx	pillow@5.4.1	8.2.0
Low	GHSA-64mm-vxmg-q3vj	http-proxy-middleware@1.3.1	2.0.10
Low	UBUNTU-CVE-2024-26458	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GHSA-xwg4-73v4-xw9w	nanoid@3.3.6	3.3.12
Low	ALPINE-CVE-2025-26519	musl@1.2.4-r1	1.2.4-r3
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	UBUNTU-CVE-2016-2781	coreutils@8.30-3ubuntu2	no fix listed
Low	GHSA-535w-7cp7-47q4	multer@1.4.4	2.3.0
Low	GHSA-72gw-mp4g-v24j	multer@1.4.4	2.2.0
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.66.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.64	1.79
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.64	no fix listed
Low	UBUNTU-CVE-2026-52860	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.