StackRadar

ceph-csi-cephfs 0.2.1 Helm chart

wikimedia

Not scored yet

Container Storage Interface (CSI) driver, provisioner, snapshotter and resizer for Ceph cephfs

Version 0.2.1 todayapp version 3.14.2 0Artifact Hub

ceph-csi-cephfs 0.2.1 deploys 5 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-snapshotter and 1 more. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 36.0.1, fixed in 39.0.1.

Radar Score

Not yet scored

The daily scoring run has not folded the 5 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
quay.io/cephcsi/cephcsi×4v3.14.202471532,497
registry.k8s.io/sig-storage/csi-node-driver-registrarv2.13.00014801,089
registry.k8s.io/sig-storage/csi-provisionerv5.1.00017801,138
registry.k8s.io/sig-storage/csi-snapshotterv8.2.00015801,105
registry.k8s.io/sig-storage/csi-resizerv1.13.10014801,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

208 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowPYSEC-2026-3554cryptography@36.0.149.0.0
LowGHSA-4x4m-3c2p-qppck8s.io/kubernetes@v1.32.31.32.8
LowGO-2024-3105stdlib@go1.22.51.22.7
LowGO-2025-4007stdlib@go1.23.11.24.9
LowGO-2026-6608stdlib@go1.23.11.26.9
LowGO-2026-6607stdlib@go1.23.11.26.9
LowPYSEC-2026-3553cryptography@36.0.149.0.0
LowGO-2025-4013stdlib@go1.23.11.24.8
LowGO-2026-6609stdlib@go1.23.11.26.9
LowGHSA-h75v-3vvj-5mfjjinja2@2.11.33.1.4
LowGO-2026-5841github.com/klauspost/compress@v1.17.111.18.7
LowGO-2025-3420stdlib@go1.23.11.22.11
LowGO-2025-3956stdlib@go1.23.11.23.12
LowGO-2026-4946stdlib@go1.23.11.25.9
LowGO-2025-3595golang.org/x/net@v0.31.00.38.0
LowGHSA-9hjg-9r4m-mvj7requests@2.25.12.32.4
LowGHSA-8qvm-5x2c-j2w7protobuf@3.14.04.25.8
LowGHSA-h5c8-rqwp-cp95jinja2@2.11.33.1.3
LowGHSA-29vq-49wr-vm6xwerkzeug@2.0.33.1.6
LowGHSA-vfmq-68hx-4jfwlxml@4.6.56.1.0
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.36.00.52.0
LowGO-2026-6613stdlib@go1.23.11.26.9
LowGO-2025-3849stdlib@go1.23.11.23.12
LowGO-2026-6605stdlib@go1.23.11.26.9
LowGO-2026-6610golang.org/x/net@v0.31.00.60.0
LowGO-2026-6610stdlib@go1.23.11.26.9
LowGHSA-hgf8-39gv-g3f2werkzeug@2.0.33.1.4
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.31.00.55.0
LowPYSEC-2023-237asyncssh@2.13.22.14.1
LowGO-2025-3373stdlib@go1.23.11.22.11
LowGO-2026-4970stdlib@go1.23.11.25.12
LowGHSA-rw4j-r22c-9gc3asyncssh@2.13.22.24.0
LowGHSA-8988-9cw3-xx77urllib3@1.26.52.8.0
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.36.00.52.0
LowGHSA-vp96-hxj8-p424pyopenssl@21.0.026.0.0
LowGHSA-5639-2j2p-m4mxmako@1.1.4.dev01.4.2
LowGHSA-34jh-p97f-mpxfurllib3@1.26.51.26.19
LowGHSA-6hx8-3wjj-gr8gwebob@1.8.81.8.11
LowGO-2025-4012stdlib@go1.23.11.24.8
LowGHSA-g6x2-hccm-hh4mwerkzeug@2.0.33.1.9
LowGHSA-h35f-9h28-mq5csetuptools@69.2.083.0.0
LowGO-2026-4980stdlib@go1.23.11.25.10
LowGO-2026-4440golang.org/x/net@v0.31.00.45.0
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.36.00.45.0
LowGO-2025-4011stdlib@go1.23.11.24.8
LowGO-2025-4015stdlib@go1.23.11.24.8
LowGO-2026-4441golang.org/x/net@v0.31.00.45.0
LowGHSA-qr67-gv47-xwwhasyncssh@2.13.22.23.1
LowGHSA-cpwx-vrp4-4pq7jinja2@2.11.33.1.6
LowGO-2026-4603stdlib@go1.23.11.25.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.1latesttoday3.14.2——
0.2.022 days ago3.14.2021074736,916
0.1.81 year ago3.7.201513280210,333

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/wikimedia/ceph-csi-cephfs.svg)](https://charts.stackradar.io/charts/wikimedia/ceph-csi-cephfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 15 Oct 2026 · scanned 15 Oct 2026 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.