StackRadar

fdi-dotstatsuite-sfs-solr Helm chart

statcan

Scored 14 Sept 2026

fdi-dotstatsuite helm chart for the search service and solr

Latest 1.0.2 1 year agodeploys tag 5.0.6 0Artifact Hub

fdi-dotstatsuite-sfs-solr 1.0.2 deploys 4 container images: artifactory.cloud.statcan.ca/docker/mongo, siscc/dotstatsuite-sdmx-faceted-search, artifactory.cloud.statcan.ca/docker/alpine and library/solr. Across the 2 measured, 302 findings8 critical, 22 high 5 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.6, fixed in 1.10.0.

Radar Score

6,065822101171

302 findings over 2 of 4 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
artifactory.cloud.statcan.ca/docker/mongo5.0.6unmeasured
siscc/dotstatsuite-sdmx-faceted-searchmaster001658919
artifactory.cloud.statcan.ca/docker/alpinelatestunmeasured
library/solr8.11.1822851135,146

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

101 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.4.02.9.10.4
MediumGHSA-wgh7-54f2-x98rhttp2-hpack@9.4.44.v202109279.4.53
MediumGHSA-9p95-fxvg-qgq2simple-git@1.132.03.15.0
MediumGHSA-mmxm-8w33-wc4hhttp2-common@9.4.44.v202109279.4.58
MediumGHSA-3hwc-rqwp-v36qsolr-core@8.11.18.11.3
MediumGHSA-7286-pgfv-vxvhzookeeper@3.6.23.7.2
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.12.32.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.12.32.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.11.03.25.5
MediumDSA-5218-1zlib@1:1.2.11.dfsg-2+deb11u11:1.2.11.dfsg-2+deb11u2
MediumGHSA-wgmr-mf83-7x4jhttp2-server@9.4.44.v202109279.4.47
MediumGHSA-68r2-fwcg-qpm8solr-core@8.11.19.8.0
MediumALPINE-CVE-2026-63073openssl@3.5.7-r03.5.8-r0
MediumGHSA-hffm-xvc3-vprcsimple-git@1.132.03.36.0
MediumGHSA-qcwq-55hx-v3vhsnappy-java@1.1.7.61.1.10.1
MediumGHSA-wrvw-hg22-4m67protobuf-java@3.11.03.16.1
MediumGHSA-6mjq-h674-j845netty-handler@4.1.68.Final4.1.94.Final
MediumGHSA-cx4m-2p55-rw7jopennlp-tools@1.9.21.9.5
MediumGHSA-xrj7-x7gp-wwqrsolr-solrj@8.11.18.11.3
MediumGHSA-rf6f-7fwh-wjghflatted@2.0.23.4.2
MediumALPINE-CVE-2026-18798openssl@3.5.7-r03.5.8-r0
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.103.18.0
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-grv7-fg5c-xmjgbraces@2.3.23.0.3
MediumGHSA-rggv-cv7r-mw98http2-common@9.4.44.v202109279.4.54
MediumGHSA-xjp4-hw94-mvp5commons-configuration2@2.1.12.10.1
MediumALPINE-CVE-2026-63076openssl@3.5.7-r03.5.8-r0
MediumGHSA-78wr-2p64-hpwjcommons-io@2.8.02.14.0
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.68.Final4.1.135.Final
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.44.v202109279.4.60
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.4.44.v202109279.4.51.v20230217
MediumGHSA-9w38-p64v-xpmvcommons-configuration2@2.1.12.10.1
MediumGHSA-3x8x-79m2-3w2wjackson-databind@2.12.32.12.6
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.12.32.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.12.32.18.8
MediumGHSA-4p6w-m9wc-c9c9ant@1.8.21.9.15
MediumGHSA-jcxm-m3jx-f287simple-git@1.132.03.32.0
MediumGHSA-55g7-9cwv-5qfvsnappy-java@1.1.7.61.1.10.4
MediumGHSA-h46c-h94j-95f3jackson-core@2.12.32.15.0
MediumGHSA-rpjm-422r-95mhtika-core@1.271.28.2
MediumGHSA-q5r4-cfpx-h6fhant@1.8.21.9.16
MediumALPINE-CVE-2026-14457openssl@3.5.7-r03.5.8-r0
MediumDSA-5286-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u3
MediumGHSA-4v8g-86x5-3vrcopennlp-tools@1.9.22.5.9
MediumGHSA-3xgq-45jj-v275cross-spawn@5.1.06.0.6
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.68.Final4.1.135.Final
MediumGHSA-pfrx-2q88-qq97got@6.7.111.8.5
MediumGHSA-g5ww-5jh7-63cxprotobuf-java@3.11.03.16.3
MediumGHSA-pqr6-cmr2-h8hfsnappy-java@1.1.7.61.1.10.1
MediumGHSA-264p-99wq-f4j6ion-java@1.0.2no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.2latest1 year ago5.0.68221011716,065

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/statcan/fdi-dotstatsuite-sfs-solr.svg)](https://charts.stackradar.io/charts/statcan/fdi-dotstatsuite-sfs-solr)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.