spark-operator 2.2.8 Helm chart

Name: spark-operator Helm chart 2.2.8: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 13 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.8 todayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.8 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,305 findings — 8 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

57,4438234475,827

6,305 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	8234475,827	57,443

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

5,827 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5972	stdlib@go1.24.1	1.25.13
Low	GO-2026-6088	stdlib@go1.24.1	1.25.13
Low	GO-2026-6089	stdlib@go1.24.1	1.25.13
Low	GO-2026-6090	stdlib@go1.24.1	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.38.0	0.60.0
Low	GO-2026-6611	stdlib@go1.24.1	1.26.9
Low	UBUNTU-CVE-2026-68196	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68352	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-31629	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-31612	linux@5.4.0-214.234	no fix listed
Low	GHSA-wf93-45jw-7689	pip@20.0.2	26.1.2
Low	UBUNTU-CVE-2026-8643	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-41992	gzip@1.10-0ubuntu4.1	1.10-0ubuntu4.1+esm1
Low	UBUNTU-CVE-2026-52998	linux@5.4.0-214.234	no fix listed
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.3.0	3.16.3
Low	UBUNTU-CVE-2024-2193	linux@5.4.0-214.234	no fix listed
Low	GO-2026-5038	stdlib@go1.24.1	1.25.11
Low	UBUNTU-CVE-2026-9669	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	UBUNTU-CVE-2026-63947	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64093	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-0465	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.fips.18
Low	UBUNTU-CVE-2024-50106	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-21927	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89569	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40158	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-80989	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43203	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43296	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64395	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-32256	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2017-13716	binutils@2.34-6ubuntu1.11	no fix listed
Low	GO-2026-6218	stdlib@go1.24.1	1.25.13
Low	UBUNTU-CVE-2026-72380	linux@5.4.0-214.234	no fix listed
Low	GO-2026-5942	golang.org/x/net@v0.38.0	0.56.0
Low	UBUNTU-CVE-2026-42011	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2025-40204	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2026-0861	glibc@2.31-0ubuntu9.17	2.31-0ubuntu9.18+esm1
Low	UBUNTU-CVE-2026-11622	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2025-39841	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-31467	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68261	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68337	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-27558	linux@5.4.0-214.234	5.4.0-234.254
Low	UBUNTU-CVE-2025-6297	dpkg@1.19.7ubuntu3.2	no fix listed
Low	UBUNTU-CVE-2026-68096	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-52981	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-98257	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-53392	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-53397	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.8latest	today	2.2.1	8234475,827	57,443
2.2.7	9 months ago	2.2.1	8234475,827	57,443

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.