cf-operator Helm chart
quarksScored 14 Sept 2026
A Helm chart for cf-operator, the k8s operator for deploying BOSH releases
Latest 2.3.0+0.g27a91cdf 6 years agodeploys tag v0.0.0-0.g70ae34b 0Artifact Hub
cf-operator 2.3.0+0.g27a91cdf deploys 2 container images: cfcontainerization/quarks-job and cfcontainerization/cf-operator. Across them, 964 findings — 0 critical, 18 high — 12 on CISA KEV. The highest contribution is GHSA-45x7-px36-x8w8 in golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586, fixed in 0.0.0-20231218163308-9d2ee975ef9f.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| cfcontainerization/ | v0.0.0-0.g70ae34b | 0991382 | 5,971 |
| cfcontainerization/ | v2.3.0-0.g27a91cdf | 0991382 | 5,971 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | openSUSE-SU-2026:10203-1 | libssh | 0.11.4-1.1 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | openSUSE-SU-2026:11193-1 | rpm | 4.20.1-8.1 |
| Low | openSUSE-SU-2026:11377-1 | libssh | 0.11.5-1.2 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | openSUSE-SU-2026:11266-1 | libpsl | 0.23.0-1.1 |
| Low | openSUSE-SU-2025:15222-1 | glibc | 2.41-3.1 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
| Low | openSUSE-SU-2025:15003-1 | perl | 5.40.2-1.1 |
| Low | openSUSE-SU-2020:0467-1 | glibc | 2.26-lp151.19.11.1 |
| Low | GHSA-qxp5-gwg8-xv66 | golang.org/ | 0.36.0 |
| Low | openSUSE-SU-2026:10984-1 | libzypp | 17.38.13-1.1 |
| Low | GO-2025-4012 | stdlib | 1.24.8 |
| Low | GO-2025-3956 | stdlib | 1.23.12 |
| Low | GO-2026-4440 | golang.org/ | 0.45.0 |
| Low | GO-2025-4011 | stdlib | 1.24.8 |
| Low | GO-2025-4015 | stdlib | 1.24.8 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | openSUSE-SU-2024:12562-1 | rpm | 4.18.0-1.1 |
| Low | openSUSE-SU-2025:14736-1 | krb5 | 1.21.3-2.1 |
| Low | openSUSE-SU-2020:0022-1 | libgcrypt | 1.8.2-lp151.9.7.1 |
| Low | openSUSE-SU-2025:14991-1 | sqlite3 | 3.49.1-3.1 |
| Low | openSUSE-SU-2025:15258-1 | perl | 5.40.2-3.1 |
| Low | openSUSE-SU-2026:10770-1 | glibc | 2.43-3.1 |
| Low | GO-2026-4441 | golang.org/ | 0.45.0 |
| Low | openSUSE-SU-2026:10085-1 | libxml2 | 2.14.5-2.1 |
| Low | openSUSE-SU-2024:13618-1 | coreutils | 9.4-3.1 |
| Low | GO-2025-3373 | stdlib | 1.22.11 |
| Low | GO-2026-5970 | golang.org/ | 0.39.0 |
| Low | openSUSE-SU-2024:11282-1 | util-linux | 2.36.2-3.2 |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | openSUSE-SU-2020:0208-1 | systemd | 234-lp151.26.7.1 |
| Low | openSUSE-SU-2026:10492-1 | xz | 5.8.3-1.1 |
| Low | GO-2024-2888 | stdlib | 1.21.11 |
| Low | openSUSE-SU-2025:15256-1 | pam | 1.7.1-1.1 |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | openSUSE-SU-2026:10288-1 | util-linux | 2.41.3-4.1 |
| Low | GO-2023-1840 | stdlib | 1.19.10 |
| Low | openSUSE-SU-2024:12881-1 | shadow | 4.13-6.1 |
| Low | openSUSE-SU-2024:11915-1 | util-linux | 2.37.4-1.1 |
| Low | openSUSE-SU-2024:12574-1 | sqlite3 | 3.40.0-2.1 |
| Low | openSUSE-SU-2019:2672-1 | permissions | 20181116-lp151.4.9.1 |
| Low | openSUSE-SU-2024:13366-1 | systemd | 254.5-3.1 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | openSUSE-SU-2020:0956-1 | openldap2 | 2.4.46-lp151.10.12.1 |
| Low | openSUSE-SU-2025:15545-1 | libssh | 0.11.3-1.1 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.3.0+0.g27a91cdflatest | 6 years ago | v0.0.0-0.g70ae34b | 018182764 | 11,942 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.