ceph-csi-cephfs Helm chart

Name: ceph-csi-cephfs Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ceph-csi

Scored 21 Oct 2026

Container Storage Interface (CSI) driver, provisioner, snapshotter, resizer and attacher for Ceph cephfs

Latest 3.18.1 4 days agoapp version 3.18.1 21Artifact Hub

ceph-csi-cephfs 3.18.1 deploys 6 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 2 more. Across them, 270 findings — 0 critical, 0 high. The highest contribution is RLSA-2026:25237 in openssl 1:3.5.5-2.el10_2, fixed in 1:3.5.5-4.el10_2.

Radar Score

3,0980039231

270 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/cephcsi/cephcsi×5	v3.18.1	001165	887
registry.k8s.io/sig-storage/csi-node-driver-registrar	v2.18.0	00316	227
registry.k8s.io/sig-storage/csi-provisioner	v6.3.0	00741	547
registry.k8s.io/sig-storage/csi-snapshotter	v8.6.0	00847	617
registry.k8s.io/sig-storage/csi-attacher	v4.13.0	00319	256
registry.k8s.io/sig-storage/csi-resizer	v2.2.1	00743	564

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

102 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RLSA-2026:25237	openssl@1:3.5.5-2.el10_2	1:3.5.5-4.el10_2
Medium	RLSA-2026:67154	openssl@1:3.5.5-2.el10_2	1:3.5.8-1.el10_2
Medium	RLSA-2026:20613	gnutls@3.8.10-3.el10_1	0:3.8.10-4.el10_2
Medium	GO-2026-5026	stdlib@go1.26.4	1.25.13
Medium	GO-2026-5026	golang.org/x/net@v0.54.0	0.55.0
Medium	RLSA-2026:67909	libevent@2.1.12-16.el10	0:2.1.13-1.el10_2
Medium	RLSA-2026:55855	libssh@0.12.0-2.el10	0:0.12.0-3.el10_2
Medium	GO-2026-6612	stdlib@go1.26.4	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.58.0	0.60.0
Medium	GO-2026-6604	stdlib@go1.26.4	1.26.9
Medium	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.8	3.5.33
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.79.3	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.79.3	1.83.1
Medium	RLSA-2026:69125	curl@8.12.1-4.el10	0:8.12.1-4.el10_2.6
Medium	RLSA-2026:22314	openssl@1:3.5.5-2.el10_2	1:3.5.5-3.el10_2
Low	RLSA-2026:52675	libarchive@3.7.7-8.el10_1	0:3.7.7-10.el10_2
Low	RLSA-2026:74001	expat@2.7.3-1.el10_2.3	0:2.7.3-1.el10_2.5
Low	RLSA-2026:57015	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.21
Low	RLSA-2026:28234	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.1
Low	RLSA-2026:28236	libsolv@0.7.33-2.el10	0:0.7.33-5.el10_2
Low	RLSA-2026:71586	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.4
Low	GO-2026-5037	stdlib@go1.26.3	1.25.11
Low	RLSA-2026:28235	libtasn1@4.20.0-1.el10	0:4.20.0-5.el10_2
Low	GO-2026-6603	stdlib@go1.26.4	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-5972	stdlib@go1.26.4	1.25.13
Low	GO-2026-6088	stdlib@go1.26.4	1.25.13
Low	GO-2026-6089	stdlib@go1.26.4	1.25.13
Low	GO-2026-6090	stdlib@go1.26.4	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6611	stdlib@go1.26.4	1.26.9
Low	GO-2026-5038	stdlib@go1.26.3	1.25.11
Low	GO-2026-6218	stdlib@go1.26.4	1.25.13
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	GO-2026-5942	stdlib@go1.26.4	1.26.6
Low	RLSA-2026:42063	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.14
Low	RLSA-2026:77020	python3.12@3.12.14-1.el10_2	0:3.12.15-1.el10_2
Low	RLSA-2026:81522	pcre2@10.44-1.el10.3	0:10.44-1.5.el10_2
Low	GO-2026-6355	golang.org/x/crypto@v0.55.0	0.56.0
Low	RLSA-2026:55432	curl@8.12.1-4.el10	0:8.12.1-4.el10_2.4
Low	GO-2026-5970	golang.org/x/text@v0.38.0	0.39.0
Low	RLSA-2026:80512	curl@8.12.1-4.el10	0:8.12.1-4.el10_2.7
Low	GO-2025-3521	k8s.io/kubernetes@v1.36.3	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	RLSA-2026:83561	rpcbind@1.2.7-3.el10	0:1.2.7-3.el10_2.1
Low	GO-2026-6354	golang.org/x/crypto@v0.55.0	0.56.0
Low	GO-2026-6617	stdlib@go1.26.4	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6608	stdlib@go1.26.4	1.26.9
Low	GO-2026-6607	stdlib@go1.26.4	1.26.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.18.1latest	4 days ago	3.18.1	0039231	3,098
3.18.0	20 days ago	3.18.0	0037204	2,698
3.17.1	1 month ago	3.17.1	01116426	6,323

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ceph-csi/ceph-csi-cephfs.svg)](https://charts.stackradar.io/charts/ceph-csi/ceph-csi-cephfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.