data-fair Helm chart

Name: data-fair Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

data354-helm

Scored 14 Sept 2026

A Helm chart for datafair project

Latest 1.1.2 3 years agodeploys tag 6.7.0 1Artifact Hub

data-fair 1.1.2 deploys 12 container images: apsl/thumbor, ghcr.io/data-fair/simple-directory, koumoul/openapi-viewer, koumoul/capture and 8 more. Across them, 2,603 findings — 21 critical, 74 high — 5 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

38,34621747541,754

2,603 findings over 12 of 12 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
apsl/thumbor	6.7.0	205383	2,190
ghcr.io/data-fair/simple-directory	4	01172148	3,569
koumoul/openapi-viewer	1	045344	1,828
koumoul/capture	1	0456101	2,520
ghcr.io/data-fair/metrics	0	2863149	3,358
ghcr.io/data-fair/notify	3	0432149	2,248
ghcr.io/data-fair/data-fair×2	3	0773158	3,385
ghcr.io/data-fair/portals	1	0427115	1,880
ghcr.io/data-fair/processings×2	1	0754159	2,973
ghcr.io/data-fair/elasticsearch	7.17.1	1020211393	10,253
library/mongo	4.4	3959258	4,125
prom/prometheus	latest	00111	95

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,431 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DLA-2290-1	e2fsprogs@1.43.4-2+deb9u1	1.43.4-2+deb9u2
Low	GHSA-jxwj-j7wr-gfrw	sanitize-html@2.11.0	2.17.6
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.6	3.3.18
Low	GHSA-389x-839f-4rhx	netty-common@4.1.66.Final	4.1.118.Final
Low	UBUNTU-CVE-2026-59858	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm10
Low	GHSA-2pr8-phx7-x9h3	protobufjs@6.8.6	7.5.6
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.16.0	1.17.7
Low	UBUNTU-CVE-2026-25749	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm2
Low	GHSA-58qx-3vcg-4xpx	ws@8.14.2	8.20.1
Low	GHSA-4vpr-x523-8j87	svgo@1.3.2	2.8.4
Low	GHSA-2hjr-vmf3-xwvp	elasticsearch@7.17.1	7.17.16
Low	ALPINE-CVE-2024-6874	curl@8.5.0-r0	8.9.0-r0
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.66.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-19487	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm4
Low	UBUNTU-CVE-2026-51401	vim@2:8.1.2269-1ubuntu5.7	no fix listed
Low	ALPINE-CVE-2023-52426	expat@2.5.0-r1	2.6.0-r0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.25.0	0.52.0
Low	GHSA-fc9h-whq2-v747	elliptic@6.5.4	6.6.0
Low	GHSA-qhxp-v273-g94h	sanitize-html@1.27.5	2.0.0-beta
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.1	2.3.2
Low	UBUNTU-CVE-2023-46246	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-qw6h-vgh9-j6wx	express@4.18.2	4.20.0
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	UBUNTU-CVE-2026-89158	pcre2@10.34-7	no fix listed
Low	GHSA-m9gh-789g-q5pv	elasticsearch@7.17.1	8.19.8
Low	UBUNTU-CVE-2023-48233	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	UBUNTU-CVE-2023-48234	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	UBUNTU-CVE-2023-48235	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	UBUNTU-CVE-2023-48237	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-f38q-mgvj-vph7	protobufjs@6.8.6	7.6.3
Low	GHSA-7q8q-rj6j-mhjq	axios@1.6.5	1.18.0
Low	UBUNTU-CVE-2026-55693	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm9
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b
Low	GHSA-fxwf-4rqh-v8g3	socket.io@2.2.0	2.4.0
Low	ALPINE-CVE-2023-39742	giflib@5.2.1-r4	5.2.2-r0
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	GHSA-6v5v-wf23-fmfq	markdown-it@8.4.2	14.2.0
Low	UBUNTU-CVE-2026-57455	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.32+esm9
Low	UBUNTU-CVE-2026-33947	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	UBUNTU-CVE-2023-48236	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.21
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.10.4	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2024-41957	vim@2:8.1.2269-1ubuntu5.7	2:8.1.2269-1ubuntu5.24
Low	PYSEC-2025-265	tornado@5.1.1	6.5.3
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	ALPINE-CVE-2024-11053	curl@8.5.0-r0	8.11.1-r0
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25
Low	GHSA-gh4j-gqv2-49f6	fast-xml-parser@4.2.5	5.7.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	3 years ago	6.7.0	21747541,754	38,346

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/data354-helm/data-fair.svg)](https://charts.stackradar.io/charts/data354-helm/data-fair)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.