StackRadar

rook-ceph 1.20.8 Helm chart

rookOfficialVerified publisher

Scored 30 Sept 2026

File, Block, and Object Storage Services for your Cloud-Native Environment

Version 1.20.8 todayapp version v1.20.8 51Artifact Hub

rook-ceph 1.20.8 deploys 2 container images: quay.io/cephcsi/ceph-csi-operator and rook/ceph. Across them, 155 findings — 0 critical, 1 high. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 36.0.1, fixed in 39.0.1.

Radar Score

1,5010128126

155 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/cephcsi/ceph-csi-operatorv1.0.400320171
rook/cephv1.20.801251061,330

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

145 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighGHSA-x4qr-2fvf-3mr5cryptography@36.0.139.0.1
MediumGHSA-2g68-c3qc-8985werkzeug@2.0.33.0.3
MediumGHSA-cx63-2mw6-8hw5setuptools@69.2.070.0.0
MediumGHSA-38jv-5279-wg99urllib3@1.26.52.6.3
MediumPYSEC-2025-49setuptools@69.2.078.1.1
MediumGHSA-j8r2-6x86-q33qrequests@2.25.12.31.0
MediumPYSEC-2023-192urllib3@1.26.52.0.6
MediumGHSA-8gq9-2x98-w8hfprotobuf@3.14.03.18.3
MediumGHSA-xg9f-g7g7-2323werkzeug@2.0.32.2.3
MediumPYSEC-2024-60idna@2.103.7
MediumGHSA-m2qf-hxjv-5gpqflask@2.0.32.2.5
MediumGHSA-9v9h-cgj8-h64pcryptography@36.0.142.0.2
MediumPYSEC-2022-203werkzeug@2.0.32.1.1
MediumGHSA-2xpw-w6gg-jr37urllib3@1.26.52.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.26.52.6.0
MediumGHSA-3ww4-gg4f-jr7fcryptography@36.0.142.0.0
MediumGHSA-q34m-jh98-gwm2werkzeug@2.0.33.0.6
MediumGHSA-c35q-ffpf-5qpmasyncssh@2.13.22.14.1
MediumPYSEC-2023-221werkzeug@2.0.32.3.8
MediumPYSEC-2024-230certifi@2023.5.72024.7.4
MediumGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.79.31.82.2
MediumPYSEC-2023-254cryptography@36.0.141.0.6
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.79.31.83.1
MediumGHSA-7gcm-g887-7qv7protobuf@3.14.05.29.6
MediumGHSA-58pv-8j8x-9vj2jaraco-context@6.0.16.1.0
MediumGHSA-mh2q-q3fh-2475go.opentelemetry.io/otel@v1.40.01.41.0
MediumGHSA-wrxv-2j5q-m38wlxml@4.6.54.9.1
MediumGHSA-w7pp-m8wf-vj6rcryptography@36.0.139.0.1
MediumPYSEC-2026-2132click@8.0.38.3.3
LowGHSA-3pgj-pg6c-r5p7oauthlib@3.1.13.2.2
LowGHSA-2wxc-x7rj-hg8fasyncssh@2.13.22.23.1
LowGHSA-q2x7-8rv6-6q7hjinja2@2.11.33.1.5
LowGHSA-xqr8-7jwr-rhp7certifi@2023.5.72023.7.22
LowGHSA-496j-2rq6-j6ccgrpcio@1.46.71.53.2
LowGHSA-f9vj-2wh5-fj8jwerkzeug@2.0.33.0.6
LowGHSA-r6ph-v2qm-q3c2cryptography@36.0.146.0.5
LowPYSEC-2026-3554cryptography@36.0.149.0.0
LowGHSA-vfmq-68hx-4jfwlxml@4.6.56.1.0
LowPYSEC-2022-48protobuf@3.14.03.15.0
LowPYSEC-2026-3553cryptography@36.0.149.0.0
LowGHSA-h75v-3vvj-5mfjjinja2@2.11.33.1.4
LowGO-2026-4341stdlib@go1.22.101.24.12
LowGHSA-9hjg-9r4m-mvj7requests@2.25.12.32.4
LowGHSA-8qvm-5x2c-j2w7protobuf@3.14.04.25.8
LowGHSA-h5c8-rqwp-cp95jinja2@2.11.33.1.3
LowGHSA-29vq-49wr-vm6xwerkzeug@2.0.33.1.6
LowGHSA-hgf8-39gv-g3f2werkzeug@2.0.33.1.4
LowPYSEC-2023-237asyncssh@2.13.22.14.1
LowGHSA-rw4j-r22c-9gc3asyncssh@2.13.22.24.0
LowGHSA-vp96-hxj8-p424pyopenssl@21.0.026.0.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.20.8latesttodayv1.20.801281261,501
1.20.727 days agov1.20.701281241,486

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/rook/rook-ceph.svg)](https://charts.stackradar.io/charts/rook/rook-ceph)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 30 Sept 2026 · scanned 30 Sept 2026 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.