StackRadar

fdi-dotstatsuite-sfs-solr 1.0.2 Helm chart

statcan

Scored 14 Sept 2026

fdi-dotstatsuite helm chart for the search service and solr

Version 1.0.2 1 year agodeploys tag 5.0.6 0Artifact Hub

fdi-dotstatsuite-sfs-solr 1.0.2 deploys 4 container images: artifactory.cloud.statcan.ca/docker/mongo, siscc/dotstatsuite-sdmx-faceted-search, artifactory.cloud.statcan.ca/docker/alpine and library/solr. Across the 2 measured, 302 findings — 8 critical, 22 high — 5 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.6, fixed in 1.10.0.

Radar Score

6,065822101171

302 findings over 2 of 4 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
artifactory.cloud.statcan.ca/docker/mongo5.0.6—unmeasured
siscc/dotstatsuite-sdmx-faceted-searchmaster001658919
artifactory.cloud.statcan.ca/docker/alpinelatest—unmeasured
library/solr8.11.1822851135,146

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

302 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumALPINE-CVE-2026-18798openssl@3.5.7-r03.5.8-r0
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.103.18.0
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-grv7-fg5c-xmjgbraces@2.3.23.0.3
MediumGHSA-rggv-cv7r-mw98http2-common@9.4.44.v202109279.4.54
MediumGHSA-xjp4-hw94-mvp5commons-configuration2@2.1.12.10.1
MediumALPINE-CVE-2026-63076openssl@3.5.7-r03.5.8-r0
MediumGHSA-78wr-2p64-hpwjcommons-io@2.8.02.14.0
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.68.Final4.1.135.Final
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.44.v202109279.4.60
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.4.44.v202109279.4.51.v20230217
MediumGHSA-9w38-p64v-xpmvcommons-configuration2@2.1.12.10.1
MediumGHSA-3x8x-79m2-3w2wjackson-databind@2.12.32.12.6
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.12.32.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.12.32.18.8
MediumGHSA-4p6w-m9wc-c9c9ant@1.8.21.9.15
MediumGHSA-jcxm-m3jx-f287simple-git@1.132.03.32.0
MediumGHSA-55g7-9cwv-5qfvsnappy-java@1.1.7.61.1.10.4
MediumGHSA-h46c-h94j-95f3jackson-core@2.12.32.15.0
MediumGHSA-rpjm-422r-95mhtika-core@1.271.28.2
MediumGHSA-q5r4-cfpx-h6fhant@1.8.21.9.16
MediumALPINE-CVE-2026-14457openssl@3.5.7-r03.5.8-r0
MediumDSA-5286-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u3
MediumGHSA-4v8g-86x5-3vrcopennlp-tools@1.9.22.5.9
MediumGHSA-3xgq-45jj-v275cross-spawn@5.1.06.0.6
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.68.Final4.1.135.Final
MediumGHSA-pfrx-2q88-qq97got@6.7.111.8.5
MediumGHSA-g5ww-5jh7-63cxprotobuf-java@3.11.03.16.3
MediumGHSA-pqr6-cmr2-h8hfsnappy-java@1.1.7.61.1.10.1
MediumGHSA-264p-99wq-f4j6ion-java@1.0.2no fix listed
MediumGHSA-25h7-pfq9-p65fflatted@2.0.23.4.0
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.20.5.0
LowGHSA-vxpw-j846-p89qundici@6.26.06.27.0
LowGHSA-qw3f-w4pf-jh5ftika-core@1.271.28.3
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.16.02.25.4
LowGHSA-2fvj-hgj9-j2grjetty-security@9.4.44.v202109279.4.63
LowALPINE-CVE-2026-14456openssl@3.5.7-r03.5.8-r0
LowGHSA-fjpj-2g6w-x25rsnappy-java@1.1.7.61.1.10.1
LowGHSA-4gg5-vx3j-xwc7protobuf-java@3.11.03.16.3
LowGHSA-ph9p-34f9-6g65tmp@0.0.330.2.6
LowDSA-5330-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u5
LowGHSA-qr3p-2xj2-q7hqsolr-core@8.11.19.10.1
LowGHSA-7g24-qg88-p43qjose4j@0.6.50.9.3
LowGHSA-rgw5-rvv9-x895brace-expansion@1.1.141.1.18
LowGHSA-3wrr-7qpf-2prhjackson-databind@2.12.32.14.0
LowALPINE-CVE-2026-63072openssl@3.5.7-r03.5.8-r0
LowGHSA-8wv5-x4w7-5gwwlibthrift@0.14.10.24.0
LowGHSA-659w-93r5-9j6mopennlp-tools@1.9.22.5.9
LowGHSA-mqvp-7rrg-9jxcpoi-scratchpad@4.1.25.2.1
LowDLA-3907-1sqlite3@3.34.1-33.34.1-3+deb11u1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.2latest1 year ago5.0.68221011716,065

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/statcan/fdi-dotstatsuite-sfs-solr.svg)](https://charts.stackradar.io/charts/statcan/fdi-dotstatsuite-sfs-solr)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.