spark-operator 2.2.7 Helm chart
wikimediaScored 14 Sept 2026
A Helm chart for Spark on Kubernetes operator.
Version 2.2.7 8 months agoapp version 2.2.1 1Artifact Hub
spark-operator 2.2.7 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 633 findings — 6 critical, 12 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 2.2.1 | 612123491 | 7,835 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
491 distinct across the version’s images
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2025-69420 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2026-57433 | perl | 5.30.0-9ubuntu0.5+esm3 |
| Low | UBUNTU-CVE-2026-25646 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 |
| Low | UBUNTU-CVE-2026-27135 | nghttp2 | 1.40.0-1ubuntu0.3+esm1 |
| Low | UBUNTU-CVE-2026-13221 | perl | 5.30.0-9ubuntu0.5+esm3 |
| Low | UBUNTU-CVE-2026-42496 | perl | 5.30.0-9ubuntu0.5+esm2 |
| Low | UBUNTU-CVE-2026-33636 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 |
| Low | GHSA-p953-3j66-hg45 | hive-llap-common | 4.0.0 |
| Low | GHSA-3pxv-7cmr-fjr4 | log4j-core | 2.25.4 |
| Low | GHSA-2fvj-hgj9-j2gr | jetty-security | 9.4.63 |
| Low | UBUNTU-CVE-2026-6100 | python3.8 | no fix listed |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-4gg5-vx3j-xwc7 | protobuf-java | 3.16.3 |
| Low | UBUNTU-CVE-2026-9076 | openssl | 1.1.1f-1ubuntu2.24+esm4 |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | UBUNTU-CVE-2025-40780 | bind9 | 1:9.18.30-0ubuntu0.20.04.2+esm1 |
| Low | UBUNTU-CVE-2026-3104 | bind9 | no fix listed |
| Low | UBUNTU-CVE-2024-10524 | wget | no fix listed |
| Low | UBUNTU-CVE-2021-40528 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 |
| Low | UBUNTU-CVE-2026-4224 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm7 |
| Low | GHSA-vx9q-rhv9-3jvg | aircompressor | 2.0.3 |
| Low | UBUNTU-CVE-2025-66471 | python-pip | no fix listed |
| Low | UBUNTU-CVE-2026-44432 | python-pip | no fix listed |
| Low | UBUNTU-CVE-2026-7210 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-12087 | perl | 5.30.0-9ubuntu0.5+esm3 |
| Low | GHSA-cfxw-4h78-h7fw | dnsjava | 3.6.0 |
| Low | UBUNTU-CVE-2025-8194 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm2 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | UBUNTU-CVE-2026-15308 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm7 |
| Low | GHSA-45q3-82m4-75jr | netty-handler-proxy | 4.1.133.Final |
| Low | UBUNTU-CVE-2026-0915 | glibc | 2.31-0ubuntu9.18+esm1 |
| Low | UBUNTU-CVE-2025-4802 | glibc | 2.31-0ubuntu9.18 |
| Low | UBUNTU-CVE-2023-50495 | ncurses | no fix listed |
| Low | UBUNTU-CVE-2022-2795 | bind9 | no fix listed |
| Low | UBUNTU-CVE-2026-5773 | curl | 7.68.0-1ubuntu2.25+esm5 |
| Low | GHSA-3wrr-7qpf-2prh | jackson-databind | 2.14.0 |
| Low | UBUNTU-CVE-2026-63072 | openssl | 1.1.1f-1ubuntu2.24+esm5 |
| Low | GHSA-8wv5-x4w7-5gww | libthrift | 0.24.0 |
| Low | GHSA-2r2c-cx56-8933 | jline-remote-telnet | 3.30.14 |
| Low | UBUNTU-CVE-2021-31879 | wget | no fix listed |
| Low | GHSA-47qp-hqvx-6r3f | jline-remote-telnet | 3.30.14 |
| Low | UBUNTU-CVE-2026-66046 | expat | no fix listed |
| Low | GHSA-7pwc-h2j2-rjgj | libthrift | 0.23.0 |
| Low | UBUNTU-CVE-2026-11972 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2025-5318 | libssh | 0.9.3-2ubuntu2.5+esm1 |
| Low | UBUNTU-CVE-2023-0466 | openssl | 1.1.1f-1ubuntu2.fips.18 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | UBUNTU-CVE-2025-69534 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | UBUNTU-CVE-2023-0465 | openssl | 1.1.1f-1ubuntu2.fips.18 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/wikimedia/spark-operator)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.