StackRadar

ceph-csi-rbd 0.2.1 Helm chart

wikimedia

Scored 15 Oct 2026

Container Storage Interface (CSI) driver, provisioner, snapshotter, resizer and attacher for Ceph RBD

Version 0.2.1 todayapp version 3.14.2 0Artifact Hub

ceph-csi-rbd 0.2.1 deploys 6 container images: quay.io/cephcsi/cephcsi, registry.k8s.io/sig-storage/csi-node-driver-registrar, registry.k8s.io/sig-storage/csi-provisioner, registry.k8s.io/sig-storage/csi-resizer and 2 more. Across them, 677 findings — 0 critical, 2 high. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 36.0.1, fixed in 39.0.1.

Radar Score

8,02902122553

677 findings over 6 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
quay.io/cephcsi/cephcsi×5v3.14.202471532,505
registry.k8s.io/sig-storage/csi-node-driver-registrarv2.13.00014801,089
registry.k8s.io/sig-storage/csi-provisionerv5.1.00017801,138
registry.k8s.io/sig-storage/csi-resizerv1.13.10014801,087
registry.k8s.io/sig-storage/csi-snapshotterv8.2.00015801,105
registry.k8s.io/sig-storage/csi-attacherv4.8.00015801,105

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

51 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-2g68-c3qc-8985werkzeug@2.0.33.0.3
MediumGHSA-cx63-2mw6-8hw5setuptools@69.2.070.0.0
MediumGHSA-38jv-5279-wg99urllib3@1.26.52.6.3
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.71.11.79.3
MediumPYSEC-2025-49setuptools@69.2.078.1.1
MediumGO-2026-4341stdlib@go1.23.41.24.12
MediumGHSA-v973-fxgf-6xhpmako@1.1.4.dev01.2.2
MediumPYSEC-2023-192urllib3@1.26.52.0.6
MediumGO-2026-4337stdlib@go1.23.41.24.13
MediumGHSA-j8r2-6x86-q33qrequests@2.25.12.31.0
MediumGHSA-8gq9-2x98-w8hfprotobuf@3.14.03.18.3
MediumGO-2025-3563stdlib@go1.23.41.23.8
MediumGO-2026-5026golang.org/x/net@v0.37.00.55.0
MediumGO-2026-5026stdlib@go1.23.41.25.13
MediumGHSA-xg9f-g7g7-2323werkzeug@2.0.32.2.3
MediumGHSA-2h4p-vjrc-8xpqmako@1.1.4.dev01.3.12
MediumPYSEC-2024-60idna@2.103.7
MediumGO-2024-3333golang.org/x/net@v0.28.00.33.0
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-m2qf-hxjv-5gpqflask@2.0.32.2.5
MediumGHSA-9v9h-cgj8-h64pcryptography@36.0.142.0.2
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-2xpw-w6gg-jr37urllib3@1.26.52.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.26.52.6.0
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.36.00.52.0
MediumGO-2024-3106stdlib@go1.22.51.22.7
MediumGHSA-3ww4-gg4f-jr7fcryptography@36.0.142.0.0
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.36.00.52.0
MediumGO-2026-6604stdlib@go1.23.41.26.9
MediumGHSA-q34m-jh98-gwm2werkzeug@2.0.33.0.6
MediumGHSA-c35q-ffpf-5qpmasyncssh@2.13.22.14.1
MediumPYSEC-2023-221werkzeug@2.0.32.3.8
MediumPYSEC-2022-48protobuf@3.14.03.15.0
MediumPYSEC-2024-230certifi@2023.5.72024.7.4
MediumGO-2024-3107stdlib@go1.22.51.22.7
MediumGO-2026-6612golang.org/x/net@v0.37.00.60.0
MediumGO-2026-6612stdlib@go1.23.41.26.9
MediumGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.71.11.82.2
MediumPYSEC-2023-254cryptography@36.0.141.0.6
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.71.11.83.1
MediumGHSA-7gcm-g887-7qv7protobuf@3.14.05.29.6
MediumGHSA-58pv-8j8x-9vj2jaraco-context@6.0.16.1.0
MediumGHSA-jr27-m4p2-rc6rpyasn1@0.4.80.6.3
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.22.00.27.0
MediumGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.36.00.52.0
MediumGHSA-wrxv-2j5q-m38wlxml@4.6.54.9.1
MediumGHSA-w7pp-m8wf-vj6rcryptography@36.0.139.0.1
MediumGO-2026-4601stdlib@go1.23.41.25.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.1latesttoday3.14.2021225538,029
0.2.022 days ago3.14.2021225538,029
0.1.132 months ago3.7.201714594011,840

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/wikimedia/ceph-csi-rbd.svg)](https://charts.stackradar.io/charts/wikimedia/ceph-csi-rbd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 15 Oct 2026 · scanned 15 Oct 2026 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.