spark-operator 2.2.8 Helm chart

Name: spark-operator Helm chart 2.2.8: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 13 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.8 todayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.8 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,305 findings — 8 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

57,4438234475,827

6,305 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	8234475,827	57,443

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,305 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-31622	linux@5.4.0-214.234	no fix listed
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.3.0	3.16.3
Low	UBUNTU-CVE-2026-31708	linux@5.4.0-214.234	no fix listed
Low	GHSA-h383-gmxw-35v2	log4j-1.2-api@2.20.0	2.25.4
Low	UBUNTU-CVE-2026-89511	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89549	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-9076	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm4
Low	UBUNTU-CVE-2025-40780	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm1
Low	UBUNTU-CVE-2024-50283	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43405	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46024	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74281	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74692	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90067	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-93151	linux@5.4.0-214.234	no fix listed
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.96.Final	4.1.132.Final
Low	UBUNTU-CVE-2024-10524	wget@1.20.3-1ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-68155	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72242	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72253	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89476	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89848	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-56640	linux@5.4.0-214.234	5.4.0-227.247
Low	UBUNTU-CVE-2025-68206	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68349	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2021-40528	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Low	UBUNTU-CVE-2025-40135	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-4224	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm7
Low	UBUNTU-CVE-2023-52515	linux@5.4.0-214.234	no fix listed
Low	GHSA-vx9q-rhv9-3jvg	aircompressor@0.27	2.0.3
Low	UBUNTU-CVE-2025-5318	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-46265	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74550	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-23456	linux@5.4.0-214.234	no fix listed
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.96.Final	4.1.133.Final
Low	UBUNTU-CVE-2025-66471	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2024-26936	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-53179	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2022-48744	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68287	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72464	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-1788	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-12087	perl@5.30.0-9ubuntu0.5	5.30.0-9ubuntu0.5+esm3
Low	USN-7541-1	glibc@2.31-0ubuntu9.17	2.31-0ubuntu9.18
Low	UBUNTU-CVE-2025-8194	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm2
Low	UBUNTU-CVE-2026-31570	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43113	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46056	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46198	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46238	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.8latest	today	2.2.1	8234475,827	57,443
2.2.7	9 months ago	2.2.1	8234475,827	57,443

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.