fpga-operator Helm chart

Name: fpga-operator Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere-stable

Scored 14 Sept 2026

Simplifying FPGA management in Kubernetes

Latest 2.7.4 4 years agoapp version 2.1 0Artifact Hub

fpga-operator 2.7.4 deploys 7 container images: k8s.gcr.io/nfd/node-feature-discovery, inaccel/driver, inaccel/mkrt, inaccel/coral and 3 more. Across the 6 measured, 469 findings — 3 critical, 18 high — 1 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 9.0.83, fixed in 9.0.99. Chart.yaml declares kubeVersion >= 1.18.0-0; rendered for Kubernetes 1.18.0.

Radar Score

5,75931871377

469 findings over 6 of 7 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
k8s.gcr.io/nfd/node-feature-discovery×2	v0.10.0-minimal	—	unmeasured
inaccel/driver	latest	02511	311
inaccel/mkrt	latest	031080	990
inaccel/coral	2.1	373060	1,860
inaccel/daemon	latest	0311117	1,281
inaccel/monitor	2.1	02511	311
inaccel/reef×2	latest	011098	1,006

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

263 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.83	9.0.99
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.83	9.0.98
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@9.0.83	9.0.104
High	ALPINE-CVE-2025-15467	openssl@3.0.12-r1	3.0.19-r0
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.31	6.0.0
High	ALPINE-CVE-2024-6119	openssl@3.0.12-r1	3.0.15-r0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.83	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.83	9.0.106
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.31	no fix listed
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.16.0	0.17.0
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v25.0.2+incompatible	25.0.6
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.19.0	0.23.0
High	ALPINE-CVE-2024-2511	openssl@3.0.12-r1	3.0.12-r5
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.83	9.0.86
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.83	9.0.109
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.83	9.0.98
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.31	no fix listed
Medium	GO-2024-2687	stdlib@go1.21.5	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.16.0	0.52.0
Medium	ALPINE-CVE-2024-5535	openssl@3.0.12-r1	3.0.14-r0
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.16.0	0.31.0
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.31	5.3.32
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.83	9.0.90
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.83	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.83	9.0.118
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.31	5.3.33
Medium	GHSA-ff77-26x5-69cr	tomcat-embed-core@9.0.83	9.0.104
Medium	ALPINE-CVE-2024-4741	openssl@3.0.12-r1	3.0.14-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.61.0	1.79.3
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.25.3	3.25.5
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.83	9.0.118
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.83	9.0.90
Medium	GHSA-fg2v-w576-w4v3	json-smart@1.3.2	1.3.3
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.83	9.0.106
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.83	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.83	9.0.118
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.83	9.0.107
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.83	9.0.107
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.83	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.83	9.0.121
Medium	ALPINE-CVE-2025-9230	openssl@3.0.12-r1	3.0.19-r0
Medium	ALPINE-CVE-2023-6129	openssl@3.0.12-r1	3.0.12-r2
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@5.3.31	5.3.34
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.14.0	3.18.0
Medium	GO-2026-4887	github.com/docker/docker@v25.0.2+incompatible	no fix listed
Medium	GHSA-v682-8vv8-vpwr	tomcat-embed-websocket@9.0.83	9.0.86
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.31.0	1.33.0
Medium	ALPINE-CVE-2024-0727	openssl@3.0.12-r1	3.0.12-r4
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.16.0	0.52.0
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@9.0.83	9.0.121

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.7.4latest	4 years ago	2.1	31871377	5,759

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere-stable/fpga-operator.svg)](https://charts.stackradar.io/charts/kubesphere-stable/fpga-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.