spiderpool Helm chart

Name: spiderpool Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubeblocks

Scored 14 Sept 2026

underlay CNI solution for kubernetes

Latest 1.2.0 14 days agoapp version 1.2.0 0Artifact Hub

spiderpool 1.2.0 deploys 4 container images: ghcr.io/spidernet-io/spiderpool/spiderpool-plugins, ghcr.io/k8snetworkplumbingwg/multus-cni, ghcr.io/spidernet-io/spiderpool/spiderpool-agent and ghcr.io/spidernet-io/spiderpool/spiderpool-controller. Across them, 720 findings — 6 critical, 16 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16. Chart.yaml declares kubeVersion >= 1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

8,378616111587

720 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins	19f19457ae7cec86457b0411543a3cf21dd9f95a	001166	716
ghcr.io/k8snetworkplumbingwg/multus-cni	v4.1.4	00384	644
ghcr.io/spidernet-io/spiderpool/spiderpool-agent×2	v1.2.0	3849221	3,532
ghcr.io/spidernet-io/spiderpool/spiderpool-controller×3	v1.2.0	3848216	3,486

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

338 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.42.0	0.55.0
Low	GHSA-wh78-7948-358j	github.com/cilium/cilium@v1.14.1	1.14.12
Low	GHSA-jgfp-53c3-624w	k8s.io/kubernetes@v1.29.0	1.29.14
Low	UBUNTU-CVE-2026-7017	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GHSA-pwqm-x5x6-5586	github.com/cilium/cilium@v1.14.1	1.14.9
Low	UBUNTU-CVE-2025-0395	glibc@2.31-0ubuntu9.16	2.31-0ubuntu9.17
Low	UBUNTU-CVE-2023-4039	gcc-10@10.5.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	UBUNTU-CVE-2026-76642	util-linux@2.34-0.1ubuntu9.6	no fix listed
Low	UBUNTU-CVE-2025-1352	elfutils@0.176-1.1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.24	245.4-4ubuntu3.24+esm1
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.23.0	0.38.0
Low	GHSA-gj2r-phwg-6rww	github.com/cilium/cilium@v1.14.1	1.14.2
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.58.3	1.83.1
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-r6j8-c6r2-37rr	k8s.io/kubernetes@v1.29.0	1.32.10
Low	GHSA-82m2-cv7p-4m75	k8s.io/kubernetes@v1.29.0	1.29.7
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.19-3ubuntu2.5	2.2.19-3ubuntu2.5+esm1
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.58.3	1.82.1
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.4-1ubuntu1.1	5.2.4-1ubuntu1.1+esm1
Low	UBUNTU-CVE-2026-54411	pam@1.3.1-5ubuntu4.7	no fix listed
Low	GHSA-9m5p-c77c-f9j7	github.com/cilium/cilium@v1.14.1	1.14.18
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.13.1	1.17.7
Low	UBUNTU-CVE-2026-19487	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm4
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.32-1ubuntu0.2	1:2.32-1ubuntu0.2+esm1
Low	GHSA-j89h-qrvr-xc36	github.com/cilium/cilium@v1.14.1	1.14.8
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	DLA-4490-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u5
Low	GO-2024-3333	golang.org/x/net@v0.23.0	0.33.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.24.0	1.40.0
Low	UBUNTU-CVE-2026-33947	jq@1.6-1ubuntu0.20.04.1	1.6-1ubuntu0.20.04.1+esm2
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.6	no fix listed
Low	UBUNTU-CVE-2026-54369	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2026-49839	jq@1.6-1ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.6	no fix listed
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
Low	GO-2026-4981	stdlib@go1.25.7	1.25.10
Low	GO-2025-3563	stdlib@go1.23.4	1.23.8
Low	GO-2026-4977	stdlib@go1.25.7	1.25.10
Low	GO-2026-4986	stdlib@go1.25.7	1.25.10
Low	UBUNTU-CVE-2026-5704	tar@1.30+dfsg-7ubuntu0.20.04.4	1.30+dfsg-7ubuntu0.20.04.4+esm3
Low	GO-2026-4918	golang.org/x/net@v0.42.0	0.53.0
Low	GO-2026-4918	stdlib@go1.25.7	1.25.10
Low	GO-2026-4337	stdlib@go1.24.5	1.24.13
Low	GO-2026-4601	stdlib@go1.25.7	1.25.8
Low	UBUNTU-CVE-2026-78410	util-linux@2.34-0.1ubuntu9.6	no fix listed
Low	GHSA-x989-52fc-4vr4	github.com/cilium/cilium@v1.14.1	1.14.7
Low	GO-2026-5026	stdlib@go1.25.7	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.42.0	0.55.0
Low	UBUNTU-CVE-2025-14104	util-linux@2.34-0.1ubuntu9.6	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	14 days ago	1.2.0	616111587	8,378

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubeblocks/spiderpool.svg)](https://charts.stackradar.io/charts/kubeblocks/spiderpool)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.