StackRadar

ceph-csi-rbd 0.1.13 Helm chart

wikimedia

Scored 14 Sept 2026

Container Storage Interface (CSI) driver, provisioner, snapshotter, resizer and attacher for Ceph RBD

Version 0.1.13 1 month agoapp version 3.7.2 0Artifact Hub

ceph-csi-rbd 0.1.13 deploys 6 container images: registry.k8s.io/sig-storage/csi-node-driver-registrar, quay.io/cephcsi/cephcsi, gcr.io/k8s-staging-sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-resizer and 2 more. Across them, 1,101 findings0 critical, 17 high 6 on CISA KEV. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 3.2.1, fixed in 39.0.1.

Radar Score

11,784017145939

1,101 findings over 6 of 6 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
registry.k8s.io/sig-storage/csi-node-driver-registrarv2.5.102121431,550
quay.io/cephcsi/cephcsi×5v3.7.207792444,188
gcr.io/k8s-staging-sig-storage/csi-provisionerv3.2.102131381,499
registry.k8s.io/sig-storage/csi-resizerv1.5.002141381,524
registry.k8s.io/sig-storage/csi-snapshotterv6.0.102141381,524
registry.k8s.io/sig-storage/csi-attacherv3.5.002131381,499

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

361 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2023-1840stdlib@go1.181.19.10
LowPYSEC-2026-2151flask@0.12.23.1.3
LowGO-2025-4014stdlib@go1.181.24.8
LowGO-2025-3503stdlib@go1.181.23.7
LowGO-2026-4976stdlib@go1.181.25.10
LowGO-2026-5856stdlib@go1.181.25.12
LowPYSEC-2023-102scipy@1.0.01.10.0
LowGO-2025-4007stdlib@go1.181.24.9
LowGO-2026-6355golang.org/x/crypto@v0.0.0-20220214200702-86341886e2920.56.0
LowGO-2026-4980stdlib@go1.181.25.10
LowGO-2026-5039stdlib@go1.181.25.11
LowGHSA-m959-cc7f-wv43cryptography@3.2.146.0.6
LowGO-2025-4013stdlib@go1.181.24.8
LowGO-2025-3849stdlib@go1.181.23.12
LowGO-2026-4946stdlib@go1.181.25.9
LowGO-2022-0646github.com/aws/aws-sdk-go@v1.44.67no fix listed
LowGHSA-xc8m-28vv-4pjck8s.io/kubernetes@v1.24.41.24.14
LowGHSA-vq4h-9ghm-qmrrgithub.com/hashicorp/vault@v1.4.21.11.9
LowGHSA-f9jg-8p32-2f55k8s.io/kubernetes@v1.24.41.26.0-alpha.3
LowGO-2026-4603stdlib@go1.181.25.8
LowGO-2026-6303golang.org/x/crypto@v0.0.0-20220214200702-86341886e2920.55.0
LowGHSA-jp4c-xjxw-mgf9pip@9.0.326.1
LowGHSA-hfmc-7525-mj55asyncssh@2.7.02.14.2
LowGO-2026-6354golang.org/x/crypto@v0.0.0-20220214200702-86341886e2920.56.0
LowGO-2025-3547k8s.io/kubernetes@v1.24.4no fix listed
LowGO-2026-4982stdlib@go1.181.25.10
LowGO-2026-6091stdlib@go1.181.25.13
LowGO-2025-3750stdlib@go1.181.23.10
LowGO-2026-4864stdlib@go1.181.25.9
LowGO-2025-3447stdlib@go1.181.22.12
LowGO-2026-4865stdlib@go1.181.25.9
LowGO-2026-4869stdlib@go1.181.25.9
LowGO-2026-4340stdlib@go1.181.24.12
LowGO-2025-4175stdlib@go1.181.24.11
LowPYSEC-2026-177pyjwt@1.6.12.13.0
LowPYSEC-2026-175pyjwt@1.6.12.13.0
LowGHSA-mwgr-84fv-3jh9github.com/hashicorp/vault@v1.4.21.20.1
LowGO-2026-4403stdlib@go1.181.23.9
LowGO-2026-5025golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd0.55.0
LowGHSA-qv95-g3gm-x542github.com/hashicorp/vault@v1.4.21.7.5
LowGO-2026-4970stdlib@go1.181.25.12
LowGO-2022-0635github.com/aws/aws-sdk-go@v1.44.67no fix listed
LowGO-2026-5027golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd0.55.0
LowGO-2026-5029golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd0.55.0
LowGO-2026-5030golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd0.55.0
LowGHSA-58qw-9mgm-455vpip@9.0.326.1
LowGO-2026-4602stdlib@go1.181.25.8
LowGHSA-px8h-6qxv-m22qwerkzeug@0.12.22.2.3
LowGO-2026-5024golang.org/x/sys@v0.0.0-20220209214540-3681064d51580.44.0
LowDLA-3972-1tzdata@2021a-1+deb11u32024b-0+deb11u1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.13latest1 month ago3.7.201714593911,784

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/wikimedia/ceph-csi-rbd.svg)](https://charts.stackradar.io/charts/wikimedia/ceph-csi-rbd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.