rke2-canal-1.19-1.20 Helm chart

Name: rke2-canal-1.19-1.20 Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rke2-charts

Scored 14 Sept 2026

Install Canal Network Plugin.

Latest 3.13.3-build2021102202 4 years agoapp version v3.13.3 0Artifact Hub

rke2-canal-1.19-1.20 3.13.3-build2021102202 deploys 2 container images: rancher/hardened-calico and rancher/hardened-flannel. Across them, 299 findings — 4 critical, 29 high — 4 on CISA KEV. The highest contribution is RHSA-2024:3588 in glibc 2.17-325.el7_9, fixed in 0:2.17-326.el7_9.3.

Radar Score

5,942429109157

299 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
rancher/hardened-calico×3	v3.13.3-build20210223	2166590	3,409
rancher/hardened-flannel	v0.14.1-build20211022	2134467	2,533

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

68 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	RHSA-2022:5235	python@2.7.5-90.el7	0:2.7.5-92.el7_9
Medium	RHSA-2023:1095	zlib@1.2.7-19.el7_9	0:1.2.7-21.el7_9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	RHSA-2022:8640	krb5@1.15.1-50.el7	0:1.15.1-55.el7_9
Medium	GHSA-f5f7-6478-qm6p	k8s.io/kubernetes@v1.16.2	1.19.15
Medium	RHSA-2022:2191	gzip@1.5-10.el7	0:1.5-11.el7_9
Medium	RHSA-2022:5052	xz@5.2.2-1.el7	0:5.2.2-2.el7_9
Medium	RHSA-2025:8314	zlib@1.2.7-19.el7_9	0:1.2.7-21.el7_9.1
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210520170846-37e1c6afe023
Medium	RHSA-2026:58563	openssl@1:1.0.2k-22.el7_9	1:1.0.2k-26.el7_9.2
Medium	RHSA-2021:2147	glib2@2.56.1-8.el7	0:2.56.1-9.el7_9
Medium	RHSA-2022:0666	cyrus-sasl@2.1.26-23.el7	0:2.1.26-24.el7_9
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v0.0.0-20171005112915-5cec1d0429b0	1.11.1
Medium	GHSA-wqv3-8cm6-h6wg	k8s.io/kubernetes@v1.16.2	1.16.11
Medium	GHSA-hq6q-c2x6-hmch	k8s.io/kubernetes@v1.16.2	1.25.16
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
Medium	GHSA-c3h9-896r-86jm	github.com/gogo/protobuf@v1.3.1	1.3.2
Medium	GHSA-q78c-gwqw-jcmc	k8s.io/kubernetes@v1.16.2	1.24.17
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.7.0
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/apimachinery@v0.0.0-20191004115801-a2eda9f80ab8	0.16.13
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/kubernetes@v1.16.2	1.16.13
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b
Medium	RHSA-2021:1384	nss@3.53.1-3.el7_9	0:3.53.1-7.el7_9
Medium	GHSA-27wf-5967-98gx	k8s.io/kubernetes@v1.16.2	1.28.12
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.17.0
Medium	GHSA-g42g-737j-qx6j	k8s.io/kubernetes@v1.16.2	1.18.18
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20201216223049-8b5274cf687f
Medium	RHSA-2021:3810	libxml2@2.9.1-6.el7.5	0:2.9.1-6.el7_9.6
Medium	RHSA-2022:6160	systemd@219-78.el7_9.3	0:219-78.el7_9.7
Medium	RHSA-2022:6834	expat@2.1.0-12.el7	0:2.1.0-15.el7_9
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.27.0	1.79.3
Medium	GHSA-j9wf-vvm6-4r9w	k8s.io/kubernetes@v1.16.2	no fix listed
Medium	RHSA-2025:12240	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.10
Medium	GHSA-cjjc-xp8v-855w	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20200124225646-8b5121be2f68
Medium	RHSA-2021:1389	openldap@2.4.44-22.el7	0:2.4.44-23.el7_9
Medium	GHSA-x6mj-w4jf-jmgw	k8s.io/kubernetes@v1.16.2	1.16.9
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	GHSA-wxc4-f4m6-wwqv	gopkg.in/yaml.v2@v2.2.5	2.2.8
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.4.0
Medium	RHSA-2024:5076	krb5@1.15.1-50.el7	0:1.15.1-55.el7_9.2
Medium	RHSA-2022:0621	openldap@2.4.44-24.el7_9	0:2.4.44-25.el7_9
Medium	GHSA-5rcv-m4m3-hfh7	golang.org/x/text@v0.3.2	0.3.3
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210428140749-89ef3d95e781
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.3	0.3.8
Medium	RHSA-2025:2673	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.9
Medium	RHSA-2021:4788	krb5@1.15.1-50.el7	0:1.15.1-51.el7_9
Medium	GHSA-cgcv-5272-97pr	k8s.io/kubernetes@v1.16.2	1.24.15
Medium	GHSA-ppp9-7jff-5vj2	golang.org/x/text@v0.3.3	0.3.7
Medium	GHSA-xjqr-g762-pxwp	github.com/containernetworking/cni@v0.8.0	0.8.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.13.3-build2021102202latest	4 years ago	v3.13.3	429109157	5,942

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rke2-charts/rke2-canal-1.19-1.20.svg)](https://charts.stackradar.io/charts/rke2-charts/rke2-canal-1.19-1.20)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.