spark-operator 2.2.8 Helm chart

Name: spark-operator Helm chart 2.2.8: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 13 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.8 todayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.8 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,305 findings — 8 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

57,4438234475,827

6,305 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	8234475,827	57,443

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,305 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-52934	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-63915	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-63916	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64178	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64408	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68091	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68192	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68199	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68326	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68354	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72157	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74408	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74508	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89951	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90000	linux@5.4.0-214.234	no fix listed
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.96.Final	4.1.136.Final
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.96.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-31685	linux@5.4.0-214.234	5.4.0-233.253
Low	UBUNTU-CVE-2026-46266	linux@5.4.0-214.234	5.4.0-234.254
Low	UBUNTU-CVE-2026-4046	glibc@2.31-0ubuntu9.17	no fix listed
Low	GO-2025-4009	stdlib@go1.24.1	1.24.8
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.96.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-5773	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm5
Low	GHSA-cfxw-4h78-h7fw	dnsjava@2.1.7	3.6.0
Low	UBUNTU-CVE-2026-89528	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-97557	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-31402	linux@5.4.0-214.234	5.4.0-233.253
Low	UBUNTU-CVE-2026-23457	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64441	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74691	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-80635	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74860	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10+esm5
Low	GO-2025-4006	stdlib@go1.24.1	1.24.8
Low	UBUNTU-CVE-2026-31408	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46212	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64096	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68140	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68198	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72233	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72235	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74540	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74575	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-80601	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90329	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-93189	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40048	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-1369	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89860	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-93042	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.8latest	today	2.2.1	8234475,827	57,443
2.2.7	9 months ago	2.2.1	8234475,827	57,443

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.