spark-operator 2.2.8 Helm chart

Name: spark-operator Helm chart 2.2.8: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 16 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.8 4 days agoapp version 2.2.1 1Artifact Hub

spark-operator 2.2.8 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,291 findings — 8 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

57,0818234445,816

6,291 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	8234445,816	57,081

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,291 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-38213	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38611	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-39751	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-39898	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46302	linux@5.4.0-214.234	no fix listed
Low	USN-8899-1	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm4
Low	UBUNTU-CVE-2024-47660	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-36024	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-22060	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-23368	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-21651	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38085	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-53094	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-37920	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38515	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-39697	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-53037	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64334	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64347	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64429	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38083	linux@5.4.0-214.234	5.4.0-220.240
Low	UBUNTU-CVE-2026-25645	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2025-38078	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-53052	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90802	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2021-47577	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-59845	libssh@0.9.3-2ubuntu2.5	no fix listed
Low	UBUNTU-CVE-2024-57974	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed
Low	UBUNTU-CVE-2021-47599	linux@5.4.0-214.234	5.4.0-227.247
Low	UBUNTU-CVE-2026-23420	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46252	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-52884	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38112	linux@5.4.0-214.234	no fix listed
Low	GHSA-fv92-fjc5-jj9h	github.com/go-viper/mapstructure/v2@v2.2.1	2.3.0
Low	UBUNTU-CVE-2024-42114	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-22185	lmdb@0.9.24-1	no fix listed
Low	UBUNTU-CVE-2026-97399	glibc@2.31-0ubuntu9.17	no fix listed
Low	GHSA-f5fw-25gw-5m92	hadoop-common@3.3.4	3.4.0
Low	UBUNTU-CVE-2022-49967	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-23101	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-9820	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2023-53020	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-39713	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-15224	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm2
Low	UBUNTU-CVE-2025-32415	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10
Low	UBUNTU-CVE-2026-23217	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38048	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-32777	expat@2.2.9-1ubuntu0.8	2.2.9-1ubuntu0.8+esm2
Low	UBUNTU-CVE-2022-50044	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.8latest	4 days ago	2.2.1	8234445,816	57,081
2.2.7	10 months ago	2.2.1	8234445,816	57,081

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.