StackRadar

spark 1.0.4 Helm chart

microsoft

Scored 14 Sept 2026

Fast and general-purpose cluster computing system.

Version 1.0.4 6 years agodeploys tag 0.8 5Artifact Hub

spark 1.0.4 deploys 3 container images: dbanda/livy, dbanda/spark and dbanda/zeppelin. Across the 2 measured, 525 findings19 critical, 69 high 3 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3.

Radar Score

13,7381969288149

525 findings over 2 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
dbanda/livy0.81036169847,740
dbanda/spark×22.4.6933119655,998
dbanda/zeppelin0.9.0-preview1not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

299 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-269g-pwp5-87ppjunit@4.114.13.1
LowGHSA-j26w-f9rq-mr2qjetty-servlets@9.3.27.v201904189.4.54
LowALPINE-CVE-2020-14344libx11@1.6.7-r01.6.10-r0
LowGHSA-72m5-fvvv-55m6bcprov-jdk15on@1.511.61
LowGHSA-xxqh-mfjm-7mv9netty-codec-http@4.1.17.Final4.1.133.Final
LowGHSA-fjqm-246c-mwqgbcprov-jdk15on@1.511.56
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.17.Final4.1.137.Final
LowGHSA-hr8g-6v94-x4m9bcprov-jdk15on@1.51no fix listed
LowGHSA-q4f6-jm68-57wwnetty-codec-http@4.1.17.Final4.1.136.Final
LowALPINE-CVE-2020-28928musl@1.1.20-r51.1.20-r6
LowGHSA-6cqp-g7gg-8hr5netty-codec-http@4.1.17.Final4.1.136.Final
LowGHSA-fvxv-9xxr-h7wjpyspark@2.2.02.2.3
LowGHSA-m4cv-j2px-7723netty-codec-http@4.1.17.Final4.1.133.Final
LowGHSA-4xh5-x5gv-qwphpip@20.1.125.3
LowGHSA-h35f-9h28-mq5csetuptools@47.3.183.0.0
LowGHSA-4g9r-vxhx-9pgxcommons-compress@1.8.11.26.0
LowGHSA-84h7-rjj3-6jx4netty-codec-http@4.1.17.Final4.1.129.Final
LowPYSEC-2026-3721pip@20.1.126.2
LowGHSA-mq26-g339-26xfpip@20.1.123.3
LowGHSA-8wh2-6qhj-h7j9snappy@0.20.5
LowGHSA-38f8-5428-x5cvnetty-codec-http@4.1.17.Final4.1.133.Final
LowGHSA-xq3w-v528-46rvnetty-common@4.1.17.Final4.1.115.Final
LowGHSA-8c42-7qj2-3j46netty-codec-http@4.1.17.Final4.1.137.Final
LowGHSA-r7wm-3cxj-wff9jackson-core@2.7.82.18.8
LowGHSA-389x-839f-4rhxnetty-common@4.1.17.Final4.1.118.Final
LowGHSA-4mp9-239f-g9hgnetty-codec-http@4.1.17.Final4.1.136.Final
LowPYSEC-2025-184pyspark@2.2.03.4.4
LowGHSA-jfmj-5v4g-7637zipp@3.1.03.19.1
LowGHSA-hgj6-7826-r7m5jackson-databind@2.4.02.18.8
LowGHSA-6mqq-8r44-vmjcpyspark@2.2.02.2.2
LowGHSA-6mqq-8r44-vmjcspark-core_2.11@2.2.02.2.2
LowGHSA-5jmj-h7xm-6q6vjackson-databind@2.9.52.18.9
LowGHSA-qh8g-58pp-2wxhjetty-http@9.3.24.v2018060512.0.12
LowGHSA-gcjf-9mgh-3p7gnetty-codec-http@4.1.17.Final4.1.136.Final
LowGHSA-v8h7-rr48-vmmvnetty-codec-http@4.1.17.Final4.1.133.Final
LowGHSA-3gh6-v5v9-6v9jjetty-servlets@9.3.27.v201904189.4.52
LowGHSA-m6cp-vxjx-65j6jetty-server@9.3.24.v201806059.4.41
LowGHSA-7g45-4rm6-3mm3guava@27.0-jre32.0.0-android
LowGHSA-5mg8-w23w-74h3guava@27.0-jre32.0.0-android
LowGHSA-hvcg-qmg6-jm4cnetty-codec-http@4.1.17.Final4.1.135.Final
LowGHSA-wf8f-6423-gfxgjackson-core@2.7.82.13.0
LowGHSA-cj7v-27pg-wf7qjetty-http@9.3.24.v201806059.4.47
LowGHSA-jp4c-xjxw-mgf9pip@20.1.126.1
LowGHSA-p26g-97m4-6q7cjetty-server@9.3.24.v201806059.4.51.v20230217
LowGHSA-58qw-9mgm-455vpip@20.1.126.1
LowGHSA-f5fw-25gw-5m92hadoop-common@3.1.33.4.0
LowGHSA-58qw-p7qm-5rvhjetty-xml@9.3.24.v201806059.4.52.v20230823
LowGHSA-fghv-69vj-qj49netty-codec-http@4.1.17.Final4.1.125.Final
LowGHSA-6vgw-5pg2-w6jppip@20.1.126.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.4latest6 years ago0.8196928814913,738

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/microsoft/spark.svg)](https://charts.stackradar.io/charts/microsoft/spark)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.