ceph-csi-cephfs 3.18.1 Helm chart

Name: ceph-csi-cephfs Helm chart 3.18.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ceph-csi

Scored 3 Oct 2026

Container Storage Interface (CSI) driver, provisioner, snapshotter, resizer and attacher for Ceph cephfs

Version 3.18.1 yesterdayapp version 3.18.1 21Artifact Hub

ceph-csi-cephfs 3.18.1 deploys 6 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 2 more. Across them, 144 findings — 0 critical, 0 high. The highest contribution is RLSA-2026:25237 in openssl 1:3.5.5-2.el10_2, fixed in 1:3.5.5-4.el10_2.

Radar Score

1,6080023121

144 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/cephcsi/cephcsi×5	v3.18.1	001038	562
registry.k8s.io/sig-storage/csi-node-driver-registrar	v2.18.0	0000	0
registry.k8s.io/sig-storage/csi-provisioner	v6.3.0	00424	310
registry.k8s.io/sig-storage/csi-snapshotter	v8.6.0	00530	380
registry.k8s.io/sig-storage/csi-attacher	v4.13.0	0003	29
registry.k8s.io/sig-storage/csi-resizer	v2.2.1	00426	327

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

59 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RLSA-2026:74001	expat@2.7.3-1.el10_2.3	0:2.7.3-1.el10_2.5
Low	RLSA-2026:52675	libarchive@3.7.7-8.el10_1	0:3.7.7-10.el10_2
Low	RLSA-2026:28234	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.1
Low	RLSA-2026:28236	libsolv@0.7.33-2.el10	0:0.7.33-5.el10_2
Low	RLSA-2026:71586	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.4
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	GO-2026-5942	stdlib@go1.26.4	1.26.6
Low	GO-2026-5037	stdlib@go1.26.3	1.25.11
Low	GO-2026-5972	stdlib@go1.26.4	1.25.13
Low	GO-2026-6088	stdlib@go1.26.4	1.25.13
Low	GO-2026-6089	stdlib@go1.26.4	1.25.13
Low	GO-2026-6090	stdlib@go1.26.4	1.25.13
Low	GO-2026-5038	stdlib@go1.26.3	1.25.11
Low	RLSA-2026:28235	libtasn1@4.20.0-1.el10	0:4.20.0-5.el10_2
Low	GO-2026-6218	stdlib@go1.26.4	1.25.13
Low	GO-2026-6355	golang.org/x/crypto@v0.55.0	0.56.0
Low	RLSA-2026:55432	curl@8.12.1-4.el10	0:8.12.1-4.el10_2.4
Low	GO-2026-5970	golang.org/x/text@v0.38.0	0.39.0
Low	GO-2025-3521	k8s.io/kubernetes@v1.36.3	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.55.0	0.56.0
Low	RLSA-2026:58927	sqlite@3.46.1-5.el10_1	0:3.46.1-6.el10_2
Low	RLSA-2026:42694	glibc@2.39-121.el10_2	0:2.39-128.el10_2
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.54.0	0.55.0
Low	RLSA-2026:61625	gzip@1.13-3.el10	0:1.13-4.el10_2
Low	GO-2026-4970	stdlib@go1.26.4	1.25.12
Low	RLSA-2026:64799	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.22
Low	RLSA-2026:20594	glibc@2.39-121.el10_2	0:2.39-124.el10_2
Low	RLSA-2026:33092	glibc@2.39-121.el10_2	0:2.39-126.el10_2
Low	RLSA-2026:64787	xz@1:5.6.2-4.el10_0	1:5.6.2-4.el10_2.1
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.40.0	1.43.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	GO-2026-5025	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-6091	stdlib@go1.26.4	1.25.13
Low	RLSA-2026:73429	gawk@5.3.0-6.el10	0:5.3.0-6.el10_2.1
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.79.3	1.82.1
Low	GO-2026-5039	stdlib@go1.26.3	1.25.11
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-5856	stdlib@go1.26.4	1.25.12
Low	RLSA-2026:59379	pam@1.6.1-9.el10	0:1.6.1-9.el10_2.1
Low	RLSA-2026:42739	acl@2.3.2-4.el10	0:2.4.0-1.el10_2
Low	GO-2026-5027	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.54.0	0.55.0
Low	RLSA-2026:54650	nghttp2@1.68.0-3.el10_2.1	0:1.68.0-3.el10_2.2
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.41.0	1.42.0
Low	RLSA-2026:49668	p11-kit@0.26.2-1.el10	0:0.26.4-1.el10_2
Low	RLSA-2026:67886	coreutils@9.5-7.el10	0:9.5-8.el10_2.1
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.26.1	0.29.0
Low	RLSA-2026:33124	coreutils@9.5-7.el10	0:9.5-8.el10_2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.18.1latest	yesterday	3.18.1	0023121	1,608
3.18.0	2 days ago	3.18.0	0022121	1,533
3.17.1	14 days ago	3.17.1	01101341	5,137

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ceph-csi/ceph-csi-cephfs.svg)](https://charts.stackradar.io/charts/ceph-csi/ceph-csi-cephfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.