rke2-canal-1.19-1.20 Helm chart

Name: rke2-canal-1.19-1.20 Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rke2-charts

Scored 14 Sept 2026

Install Canal Network Plugin.

Latest 3.13.3-build2021102202 4 years agoapp version v3.13.3 0Artifact Hub

rke2-canal-1.19-1.20 3.13.3-build2021102202 deploys 2 container images: rancher/hardened-calico and rancher/hardened-flannel. Across them, 299 findings — 4 critical, 29 high — 4 on CISA KEV. The highest contribution is RHSA-2024:3588 in glibc 2.17-325.el7_9, fixed in 0:2.17-326.el7_9.3.

Radar Score

5,942429109157

299 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
rancher/hardened-calico×3	v3.13.3-build20210223	2166590	3,409
rancher/hardened-flannel	v0.14.1-build20211022	2134467	2,533

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

184 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.27.0	1.79.3
Medium	GHSA-j9wf-vvm6-4r9w	k8s.io/kubernetes@v1.16.2	no fix listed
Medium	RHSA-2025:12240	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.10
Medium	GHSA-cjjc-xp8v-855w	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20200124225646-8b5121be2f68
Medium	RHSA-2021:1389	openldap@2.4.44-22.el7	0:2.4.44-23.el7_9
Medium	GHSA-x6mj-w4jf-jmgw	k8s.io/kubernetes@v1.16.2	1.16.9
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	GHSA-wxc4-f4m6-wwqv	gopkg.in/yaml.v2@v2.2.5	2.2.8
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.4.0
Medium	RHSA-2024:5076	krb5@1.15.1-50.el7	0:1.15.1-55.el7_9.2
Medium	RHSA-2022:0621	openldap@2.4.44-24.el7_9	0:2.4.44-25.el7_9
Medium	GHSA-5rcv-m4m3-hfh7	golang.org/x/text@v0.3.2	0.3.3
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210428140749-89ef3d95e781
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.3	0.3.8
Medium	RHSA-2025:2673	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.9
Medium	RHSA-2021:4788	krb5@1.15.1-50.el7	0:1.15.1-51.el7_9
Medium	GHSA-cgcv-5272-97pr	k8s.io/kubernetes@v1.16.2	1.24.15
Medium	GHSA-ppp9-7jff-5vj2	golang.org/x/text@v0.3.3	0.3.7
Medium	GHSA-xjqr-g762-pxwp	github.com/containernetworking/cni@v0.8.0	0.8.1
Medium	RHSA-2023:1332	nss@3.67.0-3.el7_9	0:3.79.0-5.el7_9
Medium	RHSA-2026:62269	dracut@033-572.el7	0:033-577.el7_9
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.24.0	1.33.0
Medium	GHSA-fx6x-h9g4-56f8	github.com/containernetworking/plugins@v0.0.0-20180925020009-646dbbace1b1	0.8.6
Medium	RHSA-2023:7743	curl@7.29.0-59.el7_9.1	0:7.29.0-59.el7_9.2
Medium	RHSA-2023:6885	python@2.7.5-90.el7	0:2.7.5-94.el7_9
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	GHSA-jmrx-5g74-6v2f	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	RHSA-2023:5615	libssh2@1.8.0-4.el7	0:1.8.0-4.el7_9.1
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd	0.0.0-20220412211240-33da011f77ad
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.4.2	1.8.3
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6	0.27.0
Medium	RHSA-2026:61752	libssh2@1.8.0-4.el7	0:1.8.0-4.el7_9.2
Low	RHSA-2026:1537	python@2.7.5-90.el7	0:2.7.5-94.el7_9.2
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	GHSA-qc2g-gmh6-95p4	k8s.io/kubernetes@v1.16.2	1.24.15
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	RHSA-2022:7186	device-mapper-multipath@0.4.9-135.el7_9	0:0.4.9-136.el7_9
Low	GHSA-vv39-3w5q-974q	k8s.io/kubernetes@v1.16.2	1.29.13
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.27.0	1.83.1
Low	RHSA-2026:1720	openssl@1:1.0.2k-22.el7_9	1:1.0.2k-26.el7_9.1
Low	GHSA-h7wq-jj8r-qm7p	k8s.io/kubernetes@v1.16.2	1.27.0-alpha.1
Low	RHSA-2025:13789	libxml2@2.9.1-6.el7_9.6	0:2.9.1-6.el7_9.13
Low	RHSA-2024:7705	systemd@219-78.el7_9.3	0:219-78.el7_9.11
Low	RHSA-2026:65773	glib2@2.56.1-9.el7_9	0:2.56.1-13.el7_9.1
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20211209124913-491a49abca63

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.13.3-build2021102202latest	4 years ago	v3.13.3	429109157	5,942

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rke2-charts/rke2-canal-1.19-1.20.svg)](https://charts.stackradar.io/charts/rke2-charts/rke2-canal-1.19-1.20)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.