openstack-manila-csi 2.36.2 Helm chart
cloud-provider-openstackScored 14 Sept 2026
Manila CSI Chart for OpenStack
Version 2.36.2 1 month agoapp version v1.36.0 1Artifact Hub
openstack-manila-csi 2.36.2 deploys 5 container images: registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/provider-os/manila-csi-plugin, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 1 more. Across them, 430 findings — 0 critical, 1 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| registry.k8s.io/ | v2.15.0 | 00163 | 466 |
| registry.k8s.io/ | v1.36.0 | 0127112 | 1,576 |
| registry.k8s.io/ | v5.3.0 | 00168 | 489 |
| registry.k8s.io/ | v8.4.0 | 00682 | 729 |
| registry.k8s.io/ | v1.14.0 | 00168 | 489 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | ALPINE-CVE-2026-40612 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2026-44777 | jq | 1.8.2-r0 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | ALPINE-CVE-2026-41256 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2026-43894 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2026-6042 | musl | 1.2.5-r22 |
| Low | ALPINE-CVE-2026-43896 | jq | 1.8.2-r0 |
| Low | GO-2026-6107 | go.etcd.io/ | 3.5.33 |
| Low | GHSA-gcjh-h69q-9w9g | github.com/ | 0.29.0 |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | ALPINE-CVE-2026-47770 | jq | 1.8.2-r0 |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | ALPINE-CVE-2026-22795 | openssl | 3.5.5-r0 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GO-2025-3749 | stdlib | 1.24.4 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | ALPINE-CVE-2026-42770 | openssl | 3.5.7-r0 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | ALPINE-CVE-2026-41257 | jq | 1.8.2-r0 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | GO-2025-3849 | stdlib | 1.23.12 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | GO-2026-5158 | go.opentelemetry.io/ | 1.42.0 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | GO-2026-6303 | golang.org/ | 0.55.0 |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | GO-2026-4982 | stdlib | 1.25.10 |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | GO-2025-3750 | stdlib | 1.23.10 |
| Low | GO-2026-4864 | stdlib | 1.25.9 |
| Low | GO-2026-4865 | stdlib | 1.25.9 |
| Low | GO-2026-4869 | stdlib | 1.25.9 |
| Low | GO-2026-4340 | stdlib | 1.24.12 |
| Low | GO-2025-4175 | stdlib | 1.24.11 |
| Low | ALPINE-CVE-2026-54679 | jq | 1.8.2-r0 |
| Low | ALPINE-CVE-2025-68160 | openssl | 3.5.5-r0 |
| Low | GO-2026-4403 | stdlib | 1.23.9 |
| Low | GO-2026-5025 | golang.org/ | 0.55.0 |
| Low | GO-2026-4970 | stdlib | 1.25.12 |
| Low | GO-2026-5027 | golang.org/ | 0.55.0 |
| Low | GO-2026-5029 | golang.org/ | 0.55.0 |
| Low | GO-2026-5030 | golang.org/ | 0.55.0 |
| Low | ALPINE-CVE-2026-43895 | jq | 1.8.2-r0 |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
| Low | ALPINE-CVE-2025-69418 | openssl | 3.5.5-r0 |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6061 | google.golang.org/ | 1.82.1 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.36.3latest | 6 days ago | v1.36.0 | 0136393 | 3,749 |
| 2.36.2 | 1 month ago | v1.36.0 | 0136393 | 3,749 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.