cf-operator Helm chart

Name: cf-operator Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quarks

Scored 14 Sept 2026

A Helm chart for cf-operator, the k8s operator for deploying BOSH releases

Latest 2.3.0+0.g27a91cdf 6 years agodeploys tag v0.0.0-0.g70ae34b 0Artifact Hub

cf-operator 2.3.0+0.g27a91cdf deploys 2 container images: cfcontainerization/quarks-job and cfcontainerization/cf-operator. Across them, 964 findings — 0 critical, 18 high — 12 on CISA KEV. The highest contribution is GHSA-45x7-px36-x8w8 in golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586, fixed in 0.0.0-20231218163308-9d2ee975ef9f.

Radar Score

11,942018182764

964 findings over 2 of 2 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
cfcontainerization/quarks-job	v0.0.0-0.g70ae34b	0991382	5,971
cfcontainerization/cf-operator	v2.3.0-0.g27a91cdf	0991382	5,971

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

382 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2023-1704	stdlib@go1.13.3	1.19.8
Low	openSUSE-SU-2024:12233-1	gnutls@3.6.7-lp151.2.3.1	3.7.7-1.1
Low	openSUSE-SU-2024:14111-1	krb5@1.16.3-lp151.2.6.1	1.21.3-1.1
Low	GO-2022-0289	stdlib@go1.13.3	1.16.12
Low	openSUSE-SU-2020:0677-1	file@5.32-lp151.7.22	5.32-lp151.8.3.1
Low	openSUSE-SU-2024:12316-1	glibc@2.26-lp151.18.7	2.36-3.1
Low	GO-2021-0223	stdlib@go1.13.3	1.13.13
Low	openSUSE-SU-2024:12735-1	curl@7.60.0-lp151.5.6.1	7.88.1-1.1
Low	GO-2022-0526	stdlib@go1.13.3	1.17.12
Low	openSUSE-SU-2024:13509-1	curl@7.60.0-lp151.5.6.1	8.5.0-1.1
Low	openSUSE-SU-2026:10112-1	gpg2@2.2.5-lp151.6.3.1	2.5.17-1.1
Low	GO-2023-1568	stdlib@go1.13.3	1.19.6
Low	openSUSE-SU-2024:13273-1	glibc@2.26-lp151.18.7	2.38-3.1
Low	GO-2022-1037	stdlib@go1.13.3	1.18.7
Low	openSUSE-SU-2024:12418-1	libksba@1.3.5-lp151.3.3	1.6.2-1.1
Low	openSUSE-SU-2024:12842-1	openssl-1_1@1.1.0i-lp151.8.3.1	1.1.1t-3.1
Low	openSUSE-SU-2024:13593-1	gnutls@3.6.7-lp151.2.3.1	3.8.3-1.1
Low	GO-2023-1987	stdlib@go1.13.3	1.19.12
Low	openSUSE-SU-2024:13613-1	zstd@1.4.2-lp151.3.3.1	1.5.5-5.1
Low	openSUSE-SU-2024:11378-1	shadow@4.6-lp151.2.3.2	4.9-1.1
Low	GO-2023-1752	stdlib@go1.13.3	1.19.9
Low	openSUSE-SU-2024:11731-1	systemd@234-lp151.25.7	249.7-3.1
Low	openSUSE-SU-2024:12595-1	libksba@1.3.5-lp151.3.3	1.6.3-1.1
Low	openSUSE-SU-2025:15243-1	libssh@0.8.7-lp151.2.3.1	0.11.2-1.1
Low	openSUSE-SU-2024:10733-1	elfutils@0.168-lp151.4.3.1	0.185-3.1
Low	openSUSE-SU-2025:15321-1	libxml2@2.9.7-lp151.5.3.1	2.13.8-2.1
Low	GO-2023-1705	stdlib@go1.13.3	1.19.8
Low	openSUSE-SU-2024:13527-1	krb5@1.16.3-lp151.2.6.1	1.21.2-1.1
Low	GO-2023-1878	stdlib@go1.13.3	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.52.0
Low	GO-2022-1039	stdlib@go1.13.3	1.18.7
Low	openSUSE-SU-2024:12540-1	libgcrypt@1.8.2-lp151.9.4.1	1.10.1-1.1
Low	openSUSE-SU-2024:13123-1	glibc@2.26-lp151.18.7	2.38-1.1
Low	openSUSE-SU-2024:11544-1	zstd@1.4.2-lp151.3.3.1	1.5.0-1.13
Low	openSUSE-SU-2024:12699-1	gnutls@3.6.7-lp151.2.3.1	3.7.9-1.2
Low	GO-2024-2963	stdlib@go1.13.3	1.21.12
Low	GO-2023-1702	stdlib@go1.13.3	1.19.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0
Low	openSUSE-SU-2025:15590-1	curl@7.60.0-lp151.5.6.1	8.16.0-1.1
Low	openSUSE-SU-2024:14575-1	curl@7.60.0-lp151.5.6.1	8.11.1-1.1
Low	openSUSE-SU-2025:15213-1	curl@7.60.0-lp151.5.6.1	8.14.1-4.1
Low	openSUSE-SU-2024:13676-1	libxml2@2.9.7-lp151.5.3.1	2.11.6-2.1
Low	GO-2022-0525	stdlib@go1.13.3	1.17.12
Low	GO-2022-0520	stdlib@go1.13.3	1.17.12
Low	openSUSE-SU-2026:10691-1	gnutls@3.6.7-lp151.2.3.1	3.8.13-1.1
Low	openSUSE-SU-2026:10177-1	gnutls@3.6.7-lp151.2.3.1	3.8.12-1.1
Low	openSUSE-SU-2024:12914-1	libssh@0.8.7-lp151.2.3.1	0.10.5-1.1
Low	openSUSE-SU-2024:13935-1	glibc@2.26-lp151.18.7	2.39-6.1
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.45.0
Low	openSUSE-SU-2025:14809-1	curl@7.60.0-lp151.5.6.1	8.12.1-1.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.0+0.g27a91cdflatest	6 years ago	v0.0.0-0.g70ae34b	018182764	11,942

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quarks/cf-operator.svg)](https://charts.stackradar.io/charts/quarks/cf-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.