spark-operator 2.2.8 Helm chart

Name: spark-operator Helm chart 2.2.8: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 13 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.8 yesterdayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.8 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,305 findings — 8 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

57,4438234475,827

6,305 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	8234475,827	57,443

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,305 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4342	stdlib@go1.24.1	1.24.12
Low	UBUNTU-CVE-2026-82209	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm9
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.96.Final	4.1.108.Final
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.96.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-43253	linux@5.4.0-214.234	no fix listed
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.56.v20240826	9.4.57.v20241219
Low	UBUNTU-CVE-2025-40253	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68818	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2022-50410	linux@5.4.0-214.234	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.20.0	2.25.5
Low	UBUNTU-CVE-2022-21546	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40140	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2018-12930	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46307	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2018-12931	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64210	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90041	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-3644	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm7
Low	UBUNTU-CVE-2024-36916	linux@5.4.0-214.234	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.23.0	0.39.0
Low	UBUNTU-CVE-2022-49328	linux@5.4.0-214.234	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-36184	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-59843	libssh@0.9.3-2ubuntu2.5	no fix listed
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2023-47039	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2021-32078	linux@5.4.0-214.234	no fix listed
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.96.Final	4.1.125.Final
Low	UBUNTU-CVE-2026-52929	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-52946	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68241	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68336	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38527	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-0990	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10+esm4
Low	UBUNTU-CVE-2026-98339	linux@5.4.0-214.234	no fix listed
Low	GO-2025-4155	stdlib@go1.24.1	1.24.11
Low	UBUNTU-CVE-2025-38211	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2025-68302	linux@5.4.0-214.234	no fix listed
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.20.0	2.25.3
Low	UBUNTU-CVE-2026-64088	linux@5.4.0-214.234	no fix listed
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.8.1	9.37.4
Low	UBUNTU-CVE-2025-38676	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40282	linux@5.4.0-214.234	no fix listed
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.43.v20210629	9.4.52
Low	UBUNTU-CVE-2026-98357	linux@5.4.0-214.234	no fix listed
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.13.4.2	2.18.11
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.13.4.2	2.18.11
Low	UBUNTU-CVE-2024-25744	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-23242	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.8latest	yesterday	2.2.1	8234475,827	57,443
2.2.7	9 months ago	2.2.1	8234475,827	57,443

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.