ceph-csi-cephfs Helm chart

Name: ceph-csi-cephfs Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ceph-csi

Scored 21 Oct 2026

Container Storage Interface (CSI) driver, provisioner, snapshotter, resizer and attacher for Ceph cephfs

Latest 3.18.1 4 days agoapp version 3.18.1 21Artifact Hub

ceph-csi-cephfs 3.18.1 deploys 6 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 2 more. Across them, 270 findings — 0 critical, 0 high. The highest contribution is RLSA-2026:25237 in openssl 1:3.5.5-2.el10_2, fixed in 1:3.5.5-4.el10_2.

Radar Score

3,0980039231

270 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/cephcsi/cephcsi×5	v3.18.1	001165	887
registry.k8s.io/sig-storage/csi-node-driver-registrar	v2.18.0	00316	227
registry.k8s.io/sig-storage/csi-provisioner	v6.3.0	00741	547
registry.k8s.io/sig-storage/csi-snapshotter	v8.6.0	00847	617
registry.k8s.io/sig-storage/csi-attacher	v4.13.0	00319	256
registry.k8s.io/sig-storage/csi-resizer	v2.2.1	00743	564

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

102 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-6609	stdlib@go1.26.4	1.26.9
Low	RLSA-2026:76918	openssl@1:3.5.5-2.el10_2	1:3.5.8-2.el10_2
Low	GO-2026-6629	golang.org/x/text@v0.38.0	0.41.0
Low	RLSA-2026:58927	sqlite@3.46.1-5.el10_1	0:3.46.1-6.el10_2
Low	RLSA-2026:42694	glibc@2.39-121.el10_2	0:2.39-128.el10_2
Low	RLSA-2026:61625	gzip@1.13-3.el10	0:1.13-4.el10_2
Low	GO-2026-6613	stdlib@go1.26.4	1.26.9
Low	GO-2026-6605	stdlib@go1.26.4	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6610	stdlib@go1.26.4	1.26.9
Low	RLSA-2026:76734	rust-rpm-sequoia@1.10.1.1-2.el10	0:1.10.2.1-1.el10_2
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.54.0	0.55.0
Low	RLSA-2026:84795	librabbitmq@0.14.0-3.el10	0:0.14.0-3.el10_2.1
Low	GO-2026-4970	stdlib@go1.26.4	1.25.12
Low	RLSA-2026:64799	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.22
Low	RLSA-2026:20594	glibc@2.39-121.el10_2	0:2.39-124.el10_2
Low	RLSA-2026:76781	glibc@2.39-121.el10_2	0:2.39-142.el10_2
Low	RLSA-2026:33092	glibc@2.39-121.el10_2	0:2.39-126.el10_2
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.40.0	1.43.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	RLSA-2026:64787	xz@1:5.6.2-4.el10_0	1:5.6.2-4.el10_2.1
Low	GO-2026-5025	golang.org/x/net@v0.54.0	0.55.0
Low	RLSA-2026:84753	glibc@2.39-121.el10_2	0:2.39-145.el10_2
Low	GO-2026-6091	stdlib@go1.26.4	1.25.13
Low	RLSA-2026:73429	gawk@5.3.0-6.el10	0:5.3.0-6.el10_2.1
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.79.3	1.82.1
Low	GO-2026-5039	stdlib@go1.26.3	1.25.11
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GO-2026-5856	stdlib@go1.26.4	1.25.12
Low	RLSA-2026:59379	pam@1.6.1-9.el10	0:1.6.1-9.el10_2.1
Low	RLSA-2026:42739	acl@2.3.2-4.el10	0:2.4.0-1.el10_2
Low	GO-2026-5027	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.41.0	1.42.0
Low	GO-2026-6599	stdlib@go1.26.4	1.26.9
Low	GO-2026-6600	stdlib@go1.26.4	1.26.9
Low	RLSA-2026:67886	coreutils@9.5-7.el10	0:9.5-8.el10_2.1
Low	RLSA-2026:54650	nghttp2@1.68.0-3.el10_2.1	0:1.68.0-3.el10_2.2
Low	RLSA-2026:49668	p11-kit@0.26.2-1.el10	0:0.26.4-1.el10_2
Low	RLSA-2026:33124	coreutils@9.5-7.el10	0:9.5-8.el10_2
Low	GHSA-gcjh-h69q-9w9g	github.com/google/cel-go@v0.26.1	0.29.0
Low	RLSA-2026:60394	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.3
Low	RLSA-2026:69553	libarchive@3.7.7-8.el10_1	0:3.7.7-11.el10_2
Low	GO-2025-3547	k8s.io/kubernetes@v1.36.3	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed
Low	GO-2026-6809	stdlib@go1.26.4	1.26.10
Low	RLSA-2026:39304	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.2
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.55.8	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.40.0	1.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.18.1latest	4 days ago	3.18.1	0039231	3,098
3.18.0	20 days ago	3.18.0	0037204	2,698
3.17.1	1 month ago	3.17.1	01116426	6,323

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ceph-csi/ceph-csi-cephfs.svg)](https://charts.stackradar.io/charts/ceph-csi/ceph-csi-cephfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.