rke2-canal Helm chart

Name: rke2-canal Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rke2-charts

Scored 14 Sept 2026

Install Canal Network Plugin.

Latest 3.13.3 5 years agoapp version v3.13.3 1Artifact Hub

rke2-canal 3.13.3 deploys 2 container images: rancher/hardened-calico and rancher/hardened-flannel. Across them, 338 findings — 6 critical, 31 high — 4 on CISA KEV. The highest contribution is RHSA-2024:3588 in glibc 2.17-307.el7.1, fixed in 0:2.17-326.el7_9.3.

Radar Score

6,996631140161

338 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
rancher/hardened-calico×3	v3.13.3	2167995	3,818
rancher/hardened-flannel	v0.13.0-rancher1	4156166	3,178

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

89 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	RHSA-2022:5235	python@2.7.5-89.el7	0:2.7.5-92.el7_9
Medium	RHSA-2023:1095	zlib@1.2.7-18.el7	0:1.2.7-21.el7_9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0
Medium	GO-2022-0536	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.0.0-20190813141303-74dc4d7220e7
Medium	RHSA-2020:3916	curl@7.29.0-57.el7_8.1	0:7.29.0-59.el7
Medium	RHSA-2022:8640	krb5@1.15.1-46.el7	0:1.15.1-55.el7_9
Medium	GHSA-f5f7-6478-qm6p	k8s.io/kubernetes@v1.16.2	1.19.15
Medium	RHSA-2022:2191	gzip@1.5-10.el7	0:1.5-11.el7_9
Medium	RHSA-2022:5052	xz@5.2.2-1.el7	0:5.2.2-2.el7_9
Medium	RHSA-2020:3996	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7.5
Medium	RHSA-2025:8314	zlib@1.2.7-18.el7	0:1.2.7-21.el7_9.1
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023
Medium	RHSA-2020:3952	expat@2.1.0-11.el7	0:2.1.0-12.el7
Medium	RHSA-2026:58563	openssl@1:1.0.2k-19.el7	1:1.0.2k-26.el7_9.2
Medium	RHSA-2021:2147	glib2@2.56.1-5.el7	0:2.56.1-9.el7_9
Medium	RHSA-2022:0666	cyrus-sasl@2.1.26-23.el7	0:2.1.26-24.el7_9
Medium	RHSA-2020:5009	python@2.7.5-89.el7	0:2.7.5-90.el7
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v0.9.2	1.11.1
Medium	GHSA-wqv3-8cm6-h6wg	k8s.io/kubernetes@v1.16.2	1.16.11
Medium	GHSA-hq6q-c2x6-hmch	k8s.io/kubernetes@v1.16.2	1.25.16
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.31.0
Medium	GHSA-r48q-9g5r-8q2h	github.com/emicklei/go-restful@v1.1.4-0.20161212084525-09691a3b6378	2.16.0
Medium	GHSA-c3h9-896r-86jm	github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d	1.3.2
Medium	GHSA-q78c-gwqw-jcmc	k8s.io/kubernetes@v1.16.2	1.24.17
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.7.0
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/apimachinery@v0.0.0-20191028221656-72ed19daf4bb	0.16.13
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/kubernetes@v1.16.2	1.16.13
Medium	RHSA-2020:4076	nss-softokn@3.44.0-8.el7_7	0:3.53.1-6.el7_9
Medium	RHSA-2020:4076	nss-util@3.44.0-4.el7_7	0:3.53.1-1.el7_9
Medium	RHSA-2020:4076	nss@3.44.0-7.el7_7	0:3.53.1-3.el7_9
Medium	RHSA-2020:4076	nspr@4.21.0-1.el7	0:4.25.0-2.el7_9
Medium	RHSA-2020:4041	openldap@2.4.44-21.el7_6	0:2.4.44-22.el7
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20220314234659-1baeb1ce4c0b
Medium	RHSA-2021:1384	nss@3.44.0-7.el7_7	0:3.53.1-7.el7_9
Medium	GHSA-27wf-5967-98gx	k8s.io/kubernetes@v1.16.2	1.28.12
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0
Medium	GHSA-g42g-737j-qx6j	k8s.io/kubernetes@v1.16.2	1.18.18
Medium	RHSA-2021:0348	glibc@2.17-307.el7.1	0:2.17-322.el7_9
Medium	RHSA-2020:5566	openssl@1:1.0.2k-19.el7	1:1.0.2k-21.el7_9
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20201216223049-8b5274cf687f
Medium	GHSA-h62f-wm92-2cmw	github.com/docker/distribution@v2.4.0+incompatible	2.7.0-rc.0
Medium	RHSA-2020:5012	librepo@1.8.1-7.el7	0:1.8.1-8.el7_9
Medium	RHSA-2021:3810	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7_9.6
Medium	RHSA-2022:6160	systemd@219-73.el7_8.9	0:219-78.el7_9.7
Medium	RHSA-2022:6834	expat@2.1.0-11.el7	0:2.1.0-15.el7_9
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.19.0	1.79.3
Medium	GHSA-j9wf-vvm6-4r9w	k8s.io/kubernetes@v1.16.2	no fix listed
Medium	RHSA-2025:12240	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7_9.10
Medium	GHSA-cjjc-xp8v-855w	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20200124225646-8b5121be2f68

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.13.3latest	5 years ago	v3.13.3	631140161	6,996

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rke2-charts/rke2-canal.svg)](https://charts.stackradar.io/charts/rke2-charts/rke2-canal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.