ceph-csi-rbd 3.18.1 Helm chart

Name: ceph-csi-rbd Helm chart 3.18.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ceph-csi

Scored 3 Oct 2026

Container Storage Interface (CSI) driver, provisioner, snapshotter, resizer and attacher for Ceph RBD

Version 3.18.1 yesterdayapp version 3.18.1 21Artifact Hub

ceph-csi-rbd 3.18.1 deploys 6 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-resizer and 2 more. Across them, 144 findings — 0 critical, 0 high. The highest contribution is RLSA-2026:25237 in openssl 1:3.5.5-2.el10_2, fixed in 1:3.5.5-4.el10_2.

Radar Score

1,6080023121

144 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/cephcsi/cephcsi×5	v3.18.1	001038	562
registry.k8s.io/sig-storage/csi-node-driver-registrar	v2.18.0	0000	0
registry.k8s.io/sig-storage/csi-provisioner	v6.3.0	00424	310
registry.k8s.io/sig-storage/csi-resizer	v2.2.1	00426	327
registry.k8s.io/sig-storage/csi-snapshotter	v8.6.0	00530	380
registry.k8s.io/sig-storage/csi-attacher	v4.13.0	0003	29

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

73 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RLSA-2026:25237	openssl@1:3.5.5-2.el10_2	1:3.5.5-4.el10_2
Medium	RLSA-2026:67154	openssl@1:3.5.5-2.el10_2	1:3.5.8-1.el10_2
Medium	RLSA-2026:20613	gnutls@3.8.10-3.el10_1	0:3.8.10-4.el10_2
Medium	GO-2026-5026	golang.org/x/net@v0.54.0	0.55.0
Medium	GO-2026-5026	stdlib@go1.26.4	1.25.13
Medium	RLSA-2026:67909	libevent@2.1.12-16.el10	0:2.1.13-1.el10_2
Medium	RLSA-2026:55855	libssh@0.12.0-2.el10	0:0.12.0-3.el10_2
Medium	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.6.8	3.5.33
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.79.3	1.82.2
Medium	RLSA-2026:42063	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.14
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.79.3	1.83.1
Medium	RLSA-2026:69125	curl@8.12.1-4.el10	0:8.12.1-4.el10_2.6
Medium	RLSA-2026:57015	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.21
Medium	RLSA-2026:22314	openssl@1:3.5.5-2.el10_2	1:3.5.5-3.el10_2
Low	RLSA-2026:74001	expat@2.7.3-1.el10_2.3	0:2.7.3-1.el10_2.5
Low	RLSA-2026:52675	libarchive@3.7.7-8.el10_1	0:3.7.7-10.el10_2
Low	RLSA-2026:28234	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.1
Low	RLSA-2026:28236	libsolv@0.7.33-2.el10	0:0.7.33-5.el10_2
Low	RLSA-2026:71586	libxml2@2.12.5-10.el10	0:2.12.5-10.el10_2.4
Low	GO-2026-5942	stdlib@go1.26.4	1.26.6
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	GO-2026-5037	stdlib@go1.26.3	1.25.11
Low	GO-2026-5972	stdlib@go1.26.4	1.25.13
Low	GO-2026-6088	stdlib@go1.26.4	1.25.13
Low	GO-2026-6089	stdlib@go1.26.4	1.25.13
Low	GO-2026-6090	stdlib@go1.26.4	1.25.13
Low	GO-2026-5038	stdlib@go1.26.3	1.25.11
Low	RLSA-2026:28235	libtasn1@4.20.0-1.el10	0:4.20.0-5.el10_2
Low	GO-2026-6218	stdlib@go1.26.4	1.25.13
Low	GO-2026-6355	golang.org/x/crypto@v0.55.0	0.56.0
Low	RLSA-2026:55432	curl@8.12.1-4.el10	0:8.12.1-4.el10_2.4
Low	GO-2026-5970	golang.org/x/text@v0.38.0	0.39.0
Low	GO-2025-3521	k8s.io/kubernetes@v1.36.3	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.55.0	0.56.0
Low	RLSA-2026:58927	sqlite@3.46.1-5.el10_1	0:3.46.1-6.el10_2
Low	RLSA-2026:42694	glibc@2.39-121.el10_2	0:2.39-128.el10_2
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.54.0	0.55.0
Low	RLSA-2026:61625	gzip@1.13-3.el10	0:1.13-4.el10_2
Low	GO-2026-4970	stdlib@go1.26.4	1.25.12
Low	RLSA-2026:64799	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.22
Low	RLSA-2026:20594	glibc@2.39-121.el10_2	0:2.39-124.el10_2
Low	RLSA-2026:33092	glibc@2.39-121.el10_2	0:2.39-126.el10_2
Low	RLSA-2026:64787	xz@1:5.6.2-4.el10_0	1:5.6.2-4.el10_2.1
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.40.0	1.43.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.79.3	1.83.1
Low	GO-2026-5025	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-6091	stdlib@go1.26.4	1.25.13
Low	RLSA-2026:73429	gawk@5.3.0-6.el10	0:5.3.0-6.el10_2.1
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.79.3	1.82.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.18.1latest	yesterday	3.18.1	0023121	1,608
3.18.0	2 days ago	3.18.0	0022121	1,533
3.17.1	14 days ago	3.17.1	01101341	5,137

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ceph-csi/ceph-csi-rbd.svg)](https://charts.stackradar.io/charts/ceph-csi/ceph-csi-rbd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.