openstack-manila-csi Helm chart

Name: openstack-manila-csi Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloud-provider-openstack

Scored 14 Sept 2026

Manila CSI Chart for OpenStack

Latest 2.36.3 6 days agoapp version v1.36.0 1Artifact Hub

openstack-manila-csi 2.36.3 deploys 5 container images: registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/provider-os/manila-csi-plugin, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 1 more. Across them, 430 findings — 0 critical, 1 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

3,7490136393

430 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
registry.k8s.io/sig-storage/csi-node-driver-registrar	v2.15.0	00163	466
registry.k8s.io/provider-os/manila-csi-plugin×2	v1.36.0	0127112	1,576
registry.k8s.io/sig-storage/csi-provisioner	v5.3.0	00168	489
registry.k8s.io/sig-storage/csi-snapshotter	v8.4.0	00682	729
registry.k8s.io/sig-storage/csi-resizer	v1.14.0	00168	489

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

33 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.37.0	0.52.0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.4-r0	3.5.7-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.72.1	1.79.3
Medium	ALPINE-CVE-2026-19931	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2025-11187	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-9079	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-10536	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-18924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-11856	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8925	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.4-r0	3.5.8-r0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.37.0	0.52.0
Medium	ALPINE-CVE-2026-42764	openssl@3.5.4-r0	3.5.7-r0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.37.0	0.52.0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.4-r0	3.5.7-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.37.0	0.52.0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-8924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.4-r0	3.5.8-r0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.37.0	0.52.0
Medium	ALPINE-CVE-2026-80231	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-80229	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-28389	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.5.4-r0	3.5.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.36.3latest	6 days ago	v1.36.0	0136393	3,749
2.36.2	1 month ago	v1.36.0	0136393	3,749

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloud-provider-openstack/openstack-manila-csi.svg)](https://charts.stackradar.io/charts/cloud-provider-openstack/openstack-manila-csi)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.