StackRadar

firefly 0.3.7 Helm chart

lsst-sqre

Scored 14 Sept 2026

SUIT: the Rubin Science Platform portal aspect

Version 0.3.7 4 years agoapp version suit-233-7-dev 0Artifact Hub

firefly 0.3.7 deploys 2 container images: ipac/suit and library/redis. Across the 1 measured, 169 findings0 critical, 2 high 1 on CISA KEV. The highest contribution is GHSA-xr7r-f8xq-vfvv in github.com/opencontainers/runc v1.0.1, fixed in 1.1.12.

Radar Score

1,7310213154

169 findings over 1 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
ipac/suitsuit-233-7-devunmeasured
library/redis502131541,731

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

13 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDLA-3859-1systemd@247.3-7+deb11u1247.3-7+deb11u6
MediumGO-2024-2687stdlib@go1.16.71.21.9
MediumDSA-5673-1glibc@2.31-13+deb11u52.31-13+deb11u9
MediumDSA-5417-1openssl@1.1.1n-0+deb11u31.1.1n-0+deb11u5
MediumDSA-5343-1openssl@1.1.1n-0+deb11u31.1.1n-0+deb11u4
MediumDLA-3942-1openssl@1.1.1n-0+deb11u31.1.1n-0+deb11u6
MediumDLA-3942-2openssl@1.1.1n-0+deb11u31.1.1w-0+deb11u2
MediumGO-2022-0433stdlib@go1.16.71.17.9
MediumGO-2022-0273stdlib@go1.16.71.16.8
MediumGHSA-p782-xgp4-8hr8golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b70.0.0-20220412211240-33da011f77ad
MediumDSA-5286-1krb5@1.18.3-6+deb11u21.18.3-6+deb11u3
MediumGHSA-v95c-p5hm-xq8fgithub.com/opencontainers/runc@v1.0.11.0.3
MediumGO-2022-1144stdlib@go1.16.71.18.9

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.7latest4 years agosuit-233-7-dev02131541,731

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/lsst-sqre/firefly.svg)](https://charts.stackradar.io/charts/lsst-sqre/firefly)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.