spark-shuffle 0.2.0 Helm chart

Name: spark-shuffle Helm chart 0.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

duyet

Scored 14 Sept 2026

A Helm chart to deploy Spark shuffle service daemon set for Kubernetes

Version 0.2.0 1 month agodeploys tag v2.2.0-kubernetes-0.5.1 0Artifact Hub

spark-shuffle 0.2.0 deploys 1 container image: snappydatainc/spark-shuffle. Across them, 195 findings — 8 critical, 28 high. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed.

Radar Score

5,63982812336

195 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
snappydatainc/spark-shuffle	v2.2.0-kubernetes-0.5.1	82812336	5,639

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

195 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2018-5710	krb5@1.15.2-r1	1.15.3-r0
Medium	GHSA-qw69-rqj8-6qw8	jetty-server@9.3.11.v20160721	9.4.51.v20230217
Medium	ALPINE-CVE-2019-5094	e2fsprogs@1.43.7-r0	1.43.7-r1
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.4.0	2.15.0
Medium	GHSA-hxp5-8pgq-mgv9	calcite-core@1.2.0-incubating	1.26.0
Medium	GHSA-w37g-rhq8-7m4j	snakeyaml@1.15	1.32
Medium	GHSA-5mcr-gq6c-3hq2	netty@3.9.9.Final	no fix listed
Medium	GHSA-c8xf-m4ff-jcxj	bcprov-jdk15on@1.54	1.56
Medium	GHSA-3cqm-mf7h-prrj	okhttp@3.8.1	4.9.2
Low	ALPINE-CVE-2018-1000654	libtasn1@4.12-r2	4.12-r4
Low	GHSA-77pm-w3hx-f8mj	spark-hive-thriftserver_2.11@2.2.0-k8s-0.5.0	no fix listed
Low	GHSA-w33c-445m-f8w7	okio@1.13.0	1.17.6
Low	GHSA-8wv5-x4w7-5gww	libthrift@0.9.3	0.24.0
Low	GHSA-43xg-8wmj-cw8h	spark-core_2.11@2.2.0-k8s-0.5.0	no fix listed
Low	GHSA-7pwc-h2j2-rjgj	libthrift@0.9.3	0.23.0
Low	ALPINE-CVE-2018-20217	krb5@1.15.2-r1	1.15.4-r0
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@2.5.0	3.16.3
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.15	1.31
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.54	1.66
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.54	1.78
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.54	1.78
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.54	1.84
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.3.11.v20160721	9.4.52
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.54	no fix listed
Low	GHSA-j26w-f9rq-mr2q	jetty-servlets@9.3.11.v20160721	9.4.54
Low	GHSA-72m5-fvvv-55m6	bcprov-jdk15on@1.54	1.61
Low	GHSA-fjqm-246c-mwqg	bcprov-jdk15on@1.54	1.56
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.54	1.79
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.54	no fix listed
Low	ALPINE-CVE-2018-0495	libressl@2.6.3-r0	2.6.5-r0
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.4.1	1.26.0
Low	GHSA-8wh2-6qhj-h7j9	snappy@0.2	0.5
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.4.0	2.18.8
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.6.5	2.18.8
Low	GHSA-6mqq-8r44-vmjc	spark-core_2.11@2.2.0-k8s-0.5.0	2.2.2
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.3.11.v20160721	12.0.12
Low	GHSA-3gh6-v5v9-6v9j	jetty-servlets@9.3.11.v20160721	9.4.52
Low	GHSA-m6cp-vxjx-65j6	jetty-server@9.3.11.v20160721	9.4.41
Low	GHSA-7g45-4rm6-3mm3	guava@14.0.1	32.0.0-android
Low	GHSA-5mg8-w23w-74h3	guava@14.0.1	32.0.0-android
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.4.0	2.13.0
Low	GHSA-cj7v-27pg-wf7q	jetty-http@9.3.11.v20160721	9.4.47
Low	GHSA-p26g-97m4-6q7c	jetty-server@9.3.11.v20160721	9.4.51.v20230217
Low	GHSA-f5fw-25gw-5m92	hadoop-common@2.7.3	3.4.0
Low	ALPINE-CVE-2018-10754	ncurses@6.0_p20171125-r0	6.0_p20171125-r1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	1 month ago	v2.2.0-kubernetes-0.5.1	82812336	5,639

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/duyet/spark-shuffle.svg)](https://charts.stackradar.io/charts/duyet/spark-shuffle)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.