StackRadar

cf-operator Helm chart

quarks

Scored 14 Sept 2026

A Helm chart for cf-operator, the k8s operator for deploying BOSH releases

Latest 2.3.0+0.g27a91cdf 6 years agodeploys tag v0.0.0-0.g70ae34b 0Artifact Hub

cf-operator 2.3.0+0.g27a91cdf deploys 2 container images: cfcontainerization/quarks-job and cfcontainerization/cf-operator. Across them, 964 findings — 0 critical, 18 high — 12 on CISA KEV. The highest contribution is GHSA-45x7-px36-x8w8 in golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586, fixed in 0.0.0-20231218163308-9d2ee975ef9f.

Radar Score

11,942018182764

964 findings over 2 of 2 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
cfcontainerization/quarks-jobv0.0.0-0.g70ae34b09913825,971
cfcontainerization/cf-operatorv2.3.0-0.g27a91cdf09913825,971

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

91 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumopenSUSE-SU-2024:12159-1openssl-1_1@1.1.0i-lp151.8.3.11.1.1p-1.1
MediumopenSUSE-SU-2020:1701-1sysuser-tools@2.0-lp151.3.702.0-lp151.4.3.1
MediumopenSUSE-SU-2024:13638-1libssh@0.8.7-lp151.2.3.10.10.6-1.1
MediumGO-2024-2687stdlib@go1.13.31.21.9
MediumopenSUSE-SU-2024:10998-1libssh@0.8.7-lp151.2.3.10.9.6-1.2
MediumopenSUSE-SU-2024:13877-1glibc@2.26-lp151.18.72.39-5.1
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.0.0-20190820162420-60c769a6c5860.52.0
MediumopenSUSE-SU-2024:14017-1xz@5.2.3-lp151.4.3.15.6.2-1.1
MediumopenSUSE-SU-2024:13825-1nghttp2@1.39.2-lp151.3.3.11.61.0-1.1
MediumopenSUSE-SU-2024:12138-1openssl-1_1@1.1.0i-lp151.8.3.11.1.1o-1.1
MediumopenSUSE-SU-2024:13325-1curl@7.60.0-lp151.5.6.18.4.0-1.1
MediumopenSUSE-SU-2025:15368-1sqlite3@3.28.0-lp151.2.3.13.50.3-1.1
MediumopenSUSE-SU-2024:12972-1openssl-1_1@1.1.0i-lp151.8.3.11.1.1u-1.1
MediumopenSUSE-SU-2024:11933-1openssl-1_1@1.1.0i-lp151.8.3.11.1.1n-1.1
MediumopenSUSE-SU-2024:10582-1curl@7.60.0-lp151.5.6.17.79.1-1.1
MediumopenSUSE-SU-2024:11091-1nghttp2@1.39.2-lp151.3.3.11.43.0-1.6
MediumopenSUSE-SU-2024:12688-1openssl-1_1@1.1.0i-lp151.8.3.11.1.1t-1.1
MediumopenSUSE-SU-2024:10801-1gnutls@3.6.7-lp151.2.3.13.7.2-1.2
MediumopenSUSE-SU-2024:13230-1curl@7.60.0-lp151.5.6.18.3.0-1.1
MediumopenSUSE-SU-2024:11420-1systemd@234-lp151.25.7249.4-2.2
MediumopenSUSE-SU-2024:13937-1openssl-1_1@1.1.0i-lp151.8.3.11.1.1w-9.1
MediumGHSA-83g2-8m93-v3w7golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e70.0.0-20210520170846-37e1c6afe023
MediumGHSA-jphg-qwrw-7w9gjson@2.1.02.3.0
MediumGHSA-cg3q-j54f-5p7pgithub.com/prometheus/client_golang@v0.9.41.11.1
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.0.0-20190820162420-60c769a6c5860.31.0
MediumopenSUSE-SU-2024:13805-1curl@7.60.0-lp151.5.6.18.7.1-1.1
MediumGHSA-v5h6-c2hv-hv3rstringio@0.0.13.0.1.1
MediumGHSA-c3h9-896r-86jmgithub.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d1.3.2
MediumopenSUSE-SU-2024:12214-1curl@7.60.0-lp151.5.6.17.84.0-1.1
MediumGHSA-vvpx-j8f3-3w6hgolang.org/x/net@v0.0.0-20190813141303-74dc4d7220e70.7.0
MediumGHSA-33c5-9fx5-fvjmk8s.io/apimachinery@v0.0.0-20190913080033-27d36303b6550.16.13
MediumopenSUSE-SU-2024:10899-1krb5@1.16.3-lp151.2.6.11.19.2-2.2
MediumopenSUSE-SU-2020:0395-1ruby2.5@2.5.5-lp151.4.3.12.5.7-lp151.4.6.1
MediumGHSA-8c26-wmh5-6g9vgolang.org/x/crypto@v0.0.0-20190820162420-60c769a6c5860.0.0-20220314234659-1baeb1ce4c0b
MediumGHSA-gwfg-cqmg-cf8fwebrick@1.4.21.4.4
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e70.17.0
MediumopenSUSE-SU-2024:11905-1openssl-1_1@1.1.0i-lp151.8.3.11.1.1m-4.1
MediumopenSUSE-SU-2024:12419-1libxml2@2.9.7-lp151.5.3.12.10.3-1.1
MediumGHSA-69cg-p879-7622golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e70.0.0-20220906165146-f3363e06e74c
MediumGHSA-3vm4-22fp-5rfmgolang.org/x/crypto@v0.0.0-20190820162420-60c769a6c5860.0.0-20201216223049-8b5274cf687f
MediumopenSUSE-SU-2024:12210-1sqlite3@3.28.0-lp151.2.3.13.39.2-1.1
MediumGHSA-qg54-694p-wgppdate@1.0.02.0.1
MediumopenSUSE-SU-2020:0790-1gnutls@3.6.7-lp151.2.3.13.6.7-lp151.2.18.1
MediumGHSA-cjjc-xp8v-855wgolang.org/x/crypto@v0.0.0-20190820162420-60c769a6c5860.0.0-20200124225646-8b5121be2f68
MediumopenSUSE-SU-2024:14261-1curl@7.60.0-lp151.5.6.18.9.1-1.1
MediumopenSUSE-SU-2024:12583-1curl@7.60.0-lp151.5.6.17.87.0-1.1
MediumopenSUSE-SU-2024:10667-1bzip2@1.0.6-lp151.5.9.11.0.8-3.2
MediumopenSUSE-SU-2020:0062-1openssl-1_1@1.1.0i-lp151.8.3.11.1.0i-lp151.8.6.1
MediumopenSUSE-SU-2024:10792-1glibc@2.26-lp151.18.72.34-1.2
MediumGHSA-xrjj-mj9h-534mgolang.org/x/net@v0.0.0-20190813141303-74dc4d7220e70.4.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.3.0+0.g27a91cdflatest6 years agov0.0.0-0.g70ae34b01818276411,942

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/quarks/cf-operator.svg)](https://charts.stackradar.io/charts/quarks/cf-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.