spark-operator 2.2.8 Helm chart

Name: spark-operator Helm chart 2.2.8: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 13 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.8 todayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.8 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,305 findings — 8 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

57,4438234475,827

6,305 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	8234475,827	57,443

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

5,827 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-43249	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89707	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-37879	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-48959	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-72203	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90149	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90379	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43190	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43233	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-98056	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74592	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40240	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-98070	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68255	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40187	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89544	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2021-31879	wget@1.20.3-1ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2025-69419	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2025-40342	linux@5.4.0-214.234	no fix listed
Low	GO-2026-5037	stdlib@go1.24.1	1.25.11
Low	UBUNTU-CVE-2026-89632	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2018-1121	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-69534	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	UBUNTU-CVE-2024-50047	linux@5.4.0-214.234	5.4.0-219.239
Low	UBUNTU-CVE-2025-68774	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-25646	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm2
Low	UBUNTU-CVE-2025-32990	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm1
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.15.2	2.18.10
Low	UBUNTU-CVE-2026-3833	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-43184	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43336	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-80707	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74704	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89711	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46133	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-0466	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.fips.18
Low	UBUNTU-CVE-2026-89729	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89709	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90301	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64313	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89626	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89483	linux@5.4.0-214.234	no fix listed
Low	GO-2026-6603	stdlib@go1.24.1	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.38.0	0.60.0
Low	UBUNTU-CVE-2026-19666	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-19667	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-76163	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-80274	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-81563	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-81736	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.8latest	today	2.2.1	8234475,827	57,443
2.2.7	9 months ago	2.2.1	8234475,827	57,443

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.