StackRadar

ceph-csi-cephfs 0.2.1 Helm chart

wikimedia

Not scored yet

Container Storage Interface (CSI) driver, provisioner, snapshotter and resizer for Ceph cephfs

Version 0.2.1 todayapp version 3.14.2 0Artifact Hub

ceph-csi-cephfs 0.2.1 deploys 5 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 1 more. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 36.0.1, fixed in 39.0.1.

Radar Score

Not yet scored

The daily scoring run has not folded the 5 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
quay.io/cephcsi/cephcsi×4v3.14.202471532,497
registry.k8s.io/sig-storage/csi-node-driver-registrarv2.13.00014801,089
registry.k8s.io/sig-storage/csi-provisionerv5.1.00017801,138
registry.k8s.io/sig-storage/csi-snapshotterv8.2.00015801,105
registry.k8s.io/sig-storage/csi-resizerv1.13.10014801,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

208 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighGHSA-x4qr-2fvf-3mr5cryptography@36.0.139.0.1
HighPYSEC-2022-203werkzeug@2.0.32.1.1
MediumGHSA-2g68-c3qc-8985werkzeug@2.0.33.0.3
MediumGHSA-cx63-2mw6-8hw5setuptools@69.2.070.0.0
MediumGHSA-38jv-5279-wg99urllib3@1.26.52.6.3
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.71.11.79.3
MediumPYSEC-2025-49setuptools@69.2.078.1.1
MediumGO-2026-4341stdlib@go1.23.41.24.12
MediumGHSA-v973-fxgf-6xhpmako@1.1.4.dev01.2.2
MediumPYSEC-2023-192urllib3@1.26.52.0.6
MediumGO-2026-4337stdlib@go1.23.41.24.13
MediumGHSA-j8r2-6x86-q33qrequests@2.25.12.31.0
MediumGHSA-8gq9-2x98-w8hfprotobuf@3.14.03.18.3
MediumGO-2025-3563stdlib@go1.23.41.23.8
MediumGO-2026-5026stdlib@go1.23.41.25.13
MediumGO-2026-5026golang.org/x/net@v0.37.00.55.0
MediumGHSA-xg9f-g7g7-2323werkzeug@2.0.32.2.3
MediumGHSA-2h4p-vjrc-8xpqmako@1.1.4.dev01.3.12
MediumPYSEC-2024-60idna@2.103.7
MediumGO-2024-3333golang.org/x/net@v0.28.00.33.0
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-m2qf-hxjv-5gpqflask@2.0.32.2.5
MediumGHSA-9v9h-cgj8-h64pcryptography@36.0.142.0.2
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-2xpw-w6gg-jr37urllib3@1.26.52.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.26.52.6.0
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.36.00.52.0
MediumGO-2024-3106stdlib@go1.22.51.22.7
MediumGHSA-3ww4-gg4f-jr7fcryptography@36.0.142.0.0
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.36.00.52.0
MediumGO-2026-6604stdlib@go1.23.41.26.9
MediumGHSA-q34m-jh98-gwm2werkzeug@2.0.33.0.6
MediumGHSA-c35q-ffpf-5qpmasyncssh@2.13.22.14.1
MediumPYSEC-2023-221werkzeug@2.0.32.3.8
MediumPYSEC-2022-48protobuf@3.14.03.15.0
MediumPYSEC-2024-230certifi@2023.5.72024.7.4
MediumGO-2024-3107stdlib@go1.22.51.22.7
MediumGO-2026-6612stdlib@go1.23.41.26.9
MediumGO-2026-6612golang.org/x/net@v0.37.00.60.0
MediumGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.71.11.82.2
MediumPYSEC-2023-254cryptography@36.0.141.0.6
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.71.11.83.1
MediumGHSA-7gcm-g887-7qv7protobuf@3.14.05.29.6
MediumGHSA-58pv-8j8x-9vj2jaraco-context@6.0.16.1.0
MediumGHSA-jr27-m4p2-rc6rpyasn1@0.4.80.6.3
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.22.00.27.0
MediumGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-wrxv-2j5q-m38wlxml@4.6.54.9.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.1latesttoday3.14.2——
0.2.022 days ago3.14.2021074736,916
0.1.81 year ago3.7.201513280210,333

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/wikimedia/ceph-csi-cephfs.svg)](https://charts.stackradar.io/charts/wikimedia/ceph-csi-cephfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 15 Oct 2026 · scanned 14 Oct 2026 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.