rke2-canal 3.13.3 Helm chart

Name: rke2-canal Helm chart 3.13.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rke2-charts

Scored 14 Sept 2026

Install Canal Network Plugin.

Version 3.13.3 5 years agoapp version v3.13.3 1Artifact Hub

rke2-canal 3.13.3 deploys 2 container images: rancher/hardened-calico and rancher/hardened-flannel. Across them, 338 findings — 6 critical, 31 high — 4 on CISA KEV. The highest contribution is RHSA-2024:3588 in glibc 2.17-307.el7.1, fixed in 0:2.17-326.el7_9.3.

Radar Score

6,996631140161

338 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
rancher/hardened-calico×3	v3.13.3	2167995	3,818
rancher/hardened-flannel	v0.13.0-rancher1	4156166	3,178

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

218 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2024:3588	glibc@2.17-307.el7.1	0:2.17-326.el7_9.3
Critical	GHSA-39qc-96h7-956f	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.0.0-20190813141303-74dc4d7220e7
Critical	GHSA-hgr8-6h9x-f7q9	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.0.0-20190813141303-74dc4d7220e7
Critical	RHSA-2025:12349	sqlite@3.7.17-8.el7_7.1	0:3.7.17-9.el7_9.1
High	RHSA-2022:1069	expat@2.1.0-11.el7	0:2.1.0-14.el7_9
High	RHSA-2022:1066	openssl@1:1.0.2k-19.el7	1:1.0.2k-25.el7_9
High	GHSA-2rmp-fw5r-j5qv	github.com/influxdata/influxdb@v0.0.0-20190102202943-dd481f35df2c	1.7.6
High	RHSA-2022:2213	zlib@1.2.7-18.el7	0:1.2.7-20.el7_9
High	RHSA-2023:1335	openssl@1:1.0.2k-19.el7	1:1.0.2k-26.el7_9
High	RHSA-2025:1601KEV	gcc@4.8.5-39.el7	0:4.8.5-45.el7_9
High	RHSA-2021:3798	openssl@1:1.0.2k-19.el7	1:1.0.2k-22.el7_9
High	RHSA-2022:0064	openssl@1:1.0.2k-19.el7	1:1.0.2k-23.el7_9
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20231218163308-9d2ee975ef9f
High	RHSA-2021:4904	nss@3.44.0-7.el7_7	0:3.67.0-4.el7_9
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.23.0
High	RHSA-2024:8788	krb5@1.15.1-46.el7	0:1.15.1-55.el7_9.3
High	GHSA-7fxm-f474-hf8w	k8s.io/kubernetes@v1.16.2	1.24.17
High	GHSA-ffhg-7mh4-33c4	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20200220183623-bac4c82f6975
High	RHSA-2023:3555	python@2.7.5-89.el7	0:2.7.5-93.el7_9
High	RHSA-2021:4033	binutils@2.27-43.base.el7_8.1	0:2.27-44.base.el7_9.1
Medium	RHSA-2022:5235	python@2.7.5-89.el7	0:2.7.5-92.el7_9
Medium	RHSA-2023:1095	zlib@1.2.7-18.el7	0:1.2.7-21.el7_9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0
Medium	GO-2022-0536	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.0.0-20190813141303-74dc4d7220e7
Medium	RHSA-2020:3916	curl@7.29.0-57.el7_8.1	0:7.29.0-59.el7
Medium	RHSA-2022:8640	krb5@1.15.1-46.el7	0:1.15.1-55.el7_9
Medium	GHSA-f5f7-6478-qm6p	k8s.io/kubernetes@v1.16.2	1.19.15
Medium	RHSA-2022:2191	gzip@1.5-10.el7	0:1.5-11.el7_9
Medium	RHSA-2022:5052	xz@5.2.2-1.el7	0:5.2.2-2.el7_9
Medium	RHSA-2020:3996	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7.5
Medium	RHSA-2025:8314	zlib@1.2.7-18.el7	0:1.2.7-21.el7_9.1
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023
Medium	RHSA-2020:3952	expat@2.1.0-11.el7	0:2.1.0-12.el7
Medium	RHSA-2026:58563	openssl@1:1.0.2k-19.el7	1:1.0.2k-26.el7_9.2
Medium	RHSA-2021:2147	glib2@2.56.1-5.el7	0:2.56.1-9.el7_9
Medium	RHSA-2022:0666	cyrus-sasl@2.1.26-23.el7	0:2.1.26-24.el7_9
Medium	RHSA-2020:5009	python@2.7.5-89.el7	0:2.7.5-90.el7
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v0.9.2	1.11.1
Medium	GHSA-wqv3-8cm6-h6wg	k8s.io/kubernetes@v1.16.2	1.16.11
Medium	GHSA-hq6q-c2x6-hmch	k8s.io/kubernetes@v1.16.2	1.25.16
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.31.0
Medium	GHSA-r48q-9g5r-8q2h	github.com/emicklei/go-restful@v1.1.4-0.20161212084525-09691a3b6378	2.16.0
Medium	GHSA-c3h9-896r-86jm	github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d	1.3.2
Medium	GHSA-q78c-gwqw-jcmc	k8s.io/kubernetes@v1.16.2	1.24.17
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.7.0
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/apimachinery@v0.0.0-20191028221656-72ed19daf4bb	0.16.13
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/kubernetes@v1.16.2	1.16.13
Medium	RHSA-2020:4076	nss-util@3.44.0-4.el7_7	0:3.53.1-1.el7_9
Medium	RHSA-2020:4076	nspr@4.21.0-1.el7	0:4.25.0-2.el7_9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.13.3latest	5 years ago	v3.13.3	631140161	6,996

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rke2-charts/rke2-canal.svg)](https://charts.stackradar.io/charts/rke2-charts/rke2-canal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.