rke2-canal Helm chart

Name: rke2-canal Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rke2-charts

Scored 14 Sept 2026

Install Canal Network Plugin.

Latest 3.13.3 5 years agoapp version v3.13.3 1Artifact Hub

rke2-canal 3.13.3 deploys 2 container images: rancher/hardened-calico and rancher/hardened-flannel. Across them, 338 findings — 6 critical, 31 high — 4 on CISA KEV. The highest contribution is RHSA-2024:3588 in glibc 2.17-307.el7.1, fixed in 0:2.17-326.el7_9.3.

Radar Score

6,996631140161

338 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
rancher/hardened-calico×3	v3.13.3	2167995	3,818
rancher/hardened-flannel	v0.13.0-rancher1	4156166	3,178

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

218 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RHSA-2020:4076	nss-softokn@3.44.0-8.el7_7	0:3.53.1-6.el7_9
Medium	RHSA-2020:4076	nspr@4.21.0-1.el7	0:4.25.0-2.el7_9
Medium	RHSA-2020:4041	openldap@2.4.44-21.el7_6	0:2.4.44-22.el7
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20220314234659-1baeb1ce4c0b
Medium	RHSA-2021:1384	nss@3.44.0-7.el7_7	0:3.53.1-7.el7_9
Medium	GHSA-27wf-5967-98gx	k8s.io/kubernetes@v1.16.2	1.28.12
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0
Medium	GHSA-g42g-737j-qx6j	k8s.io/kubernetes@v1.16.2	1.18.18
Medium	RHSA-2021:0348	glibc@2.17-307.el7.1	0:2.17-322.el7_9
Medium	RHSA-2020:5566	openssl@1:1.0.2k-19.el7	1:1.0.2k-21.el7_9
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20201216223049-8b5274cf687f
Medium	GHSA-h62f-wm92-2cmw	github.com/docker/distribution@v2.4.0+incompatible	2.7.0-rc.0
Medium	RHSA-2020:5012	librepo@1.8.1-7.el7	0:1.8.1-8.el7_9
Medium	RHSA-2021:3810	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7_9.6
Medium	RHSA-2022:6160	systemd@219-73.el7_8.9	0:219-78.el7_9.7
Medium	RHSA-2022:6834	expat@2.1.0-11.el7	0:2.1.0-15.el7_9
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.19.0	1.79.3
Medium	GHSA-j9wf-vvm6-4r9w	k8s.io/kubernetes@v1.16.2	no fix listed
Medium	RHSA-2025:12240	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7_9.10
Medium	GHSA-cjjc-xp8v-855w	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20200124225646-8b5121be2f68
Medium	RHSA-2020:3915	libssh2@1.8.0-3.el7	0:1.8.0-4.el7
Medium	RHSA-2021:1389	openldap@2.4.44-21.el7_6	0:2.4.44-23.el7_9
Medium	GHSA-x6mj-w4jf-jmgw	k8s.io/kubernetes@v1.16.2	1.16.9
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	GHSA-wxc4-f4m6-wwqv	gopkg.in/yaml.v2@v2.2.5	2.2.8
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.4.0
Medium	RHSA-2024:5076	krb5@1.15.1-46.el7	0:1.15.1-55.el7_9.2
Medium	RHSA-2022:0621	openldap@2.4.44-21.el7_6	0:2.4.44-25.el7_9
Medium	GHSA-5rcv-m4m3-hfh7	golang.org/x/text@v0.3.2	0.3.3
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210428140749-89ef3d95e781
Medium	RHSA-2020:3978	glib2@2.56.1-5.el7	0:2.56.1-7.el7
Medium	GHSA-6q6q-88xp-6f2r	gopkg.in/yaml.v2@v2.0.0-20170712054546-1be3d31502d6	2.2.4
Medium	GHSA-r5c5-pr8j-pfp7	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20190320223903-b7391e95e576
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.2	0.3.8
Medium	RHSA-2025:2673	libxml2@2.9.1-6.el7.4	0:2.9.1-6.el7_9.9
Medium	RHSA-2021:4788	krb5@1.15.1-46.el7	0:1.15.1-51.el7_9
Medium	GHSA-cgcv-5272-97pr	k8s.io/kubernetes@v1.16.2	1.24.15
Medium	GHSA-ppp9-7jff-5vj2	golang.org/x/text@v0.3.2	0.3.7
Medium	GHSA-xjqr-g762-pxwp	github.com/containernetworking/cni@v0.8.0	0.8.1
Medium	RHSA-2023:1332	nss@3.44.0-7.el7_7	0:3.79.0-5.el7_9
Medium	RHSA-2026:62269	dracut@033-568.el7	0:033-577.el7_9
Medium	GHSA-fx6x-h9g4-56f8	github.com/containernetworking/plugins@v0.0.0-20180925020009-646dbbace1b1	0.8.6
Medium	RHSA-2023:7743	curl@7.29.0-57.el7_8.1	0:7.29.0-59.el7_9.2
Medium	RHSA-2023:6885	python@2.7.5-89.el7	0:2.7.5-94.el7_9
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0
Medium	GHSA-jmrx-5g74-6v2f	k8s.io/client-go@v0.0.0-20191114101535-6c5935290e33	0.17.0
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0
Medium	RHSA-2020:4011	e2fsprogs@1.42.9-17.el7	0:1.42.9-19.el7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.13.3latest	5 years ago	v3.13.3	631140161	6,996

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rke2-charts/rke2-canal.svg)](https://charts.stackradar.io/charts/rke2-charts/rke2-canal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.