cf-operator Helm chart

Name: cf-operator Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quarks

Scored 14 Sept 2026

A Helm chart for cf-operator, the k8s operator for deploying BOSH releases

Latest 2.3.0+0.g27a91cdf 6 years agodeploys tag v0.0.0-0.g70ae34b 0Artifact Hub

cf-operator 2.3.0+0.g27a91cdf deploys 2 container images: cfcontainerization/quarks-job and cfcontainerization/cf-operator. Across them, 964 findings — 0 critical, 18 high — 12 on CISA KEV. The highest contribution is GHSA-45x7-px36-x8w8 in golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586, fixed in 0.0.0-20231218163308-9d2ee975ef9f.

Radar Score

11,942018182764

964 findings over 2 of 2 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
cfcontainerization/quarks-job	v0.0.0-0.g70ae34b	0991382	5,971
cfcontainerization/cf-operator	v2.3.0-0.g27a91cdf	0991382	5,971

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

9 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20231218163308-9d2ee975ef9f
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.23.0
High	GHSA-ffhg-7mh4-33c4	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20200220183623-bac4c82f6975
High	GO-2022-0535KEV	stdlib@go1.13.3	1.12.16
High	openSUSE-SU-2024:10106-1KEV	bash@4.4-lp151.10.3.1	7.0-92.1
High	openSUSE-SU-2024:11127-1KEV	openssl-1_1@1.1.0i-lp151.8.3.1	1.1.1l-1.2
High	openSUSE-SU-2024:13294-1KEV	glibc@2.26-lp151.18.7	2.38-4.1
High	openSUSE-SU-2024:13336-1KEV	nghttp2@1.39.2-lp151.3.3.1	1.57.0-1.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.0+0.g27a91cdflatest	6 years ago	v0.0.0-0.g70ae34b	018182764	11,942

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quarks/cf-operator.svg)](https://charts.stackradar.io/charts/quarks/cf-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.