ceph-csi-cephfs 3.18.1 Helm chart

Name: ceph-csi-cephfs Helm chart 3.18.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ceph-csi

Scored 3 Oct 2026

Container Storage Interface (CSI) driver, provisioner, snapshotter, resizer and attacher for Ceph cephfs

Version 3.18.1 yesterdayapp version 3.18.1 21Artifact Hub

ceph-csi-cephfs 3.18.1 deploys 6 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 2 more. Across them, 144 findings — 0 critical, 0 high. The highest contribution is RLSA-2026:25237 in openssl 1:3.5.5-2.el10_2, fixed in 1:3.5.5-4.el10_2.

Radar Score

1,6080023121

144 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/cephcsi/cephcsi×5	v3.18.1	001038	562
registry.k8s.io/sig-storage/csi-node-driver-registrar	v2.18.0	0000	0
registry.k8s.io/sig-storage/csi-provisioner	v6.3.0	00424	310
registry.k8s.io/sig-storage/csi-snapshotter	v8.6.0	00530	380
registry.k8s.io/sig-storage/csi-attacher	v4.13.0	0003	29
registry.k8s.io/sig-storage/csi-resizer	v2.2.1	00426	327

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

59 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RLSA-2026:60394	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.3
Low	RLSA-2026:69553	libarchive@3.7.7-8.el10_1	0:3.7.7-11.el10_2
Low	GO-2025-3547	k8s.io/kubernetes@v1.36.3	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed
Low	RLSA-2026:39304	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.2
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.40.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.40.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.18.1latest	yesterday	3.18.1	0023121	1,608
3.18.0	2 days ago	3.18.0	0022121	1,533
3.17.1	14 days ago	3.17.1	01101341	5,137

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ceph-csi/ceph-csi-cephfs.svg)](https://charts.stackradar.io/charts/ceph-csi/ceph-csi-cephfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.