StackRadar

spark-operator 2.2.8 Helm chart

wikimedia

Scored 13 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.8 yesterdayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.8 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,305 findings — 8 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

57,4438234475,827

6,305 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/kubeflow/spark-operator/controller×22.2.18234445,83357,337

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,308 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2025-38685linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2025-40269linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-23406linux@5.4.0-214.2345.4.0-227.247
LowUBUNTU-CVE-2025-40026linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-97455linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2025-39985linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2025-39987linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-11824sqlite3@3.31.1-4ubuntu0.6no fix listed
LowUBUNTU-CVE-2026-31489linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31548linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31630linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31673linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31683linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31696linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31720linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31747linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31748linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31759linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-31768linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-43047linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-43060linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-43078linux@5.4.0-214.2345.4.0-230.250
LowUBUNTU-CVE-2026-43093linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-43180linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-43207linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-43279linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-43328linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-45839linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46004linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46006linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46065linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46075linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46122linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46163linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46178linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46206linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46208linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46209linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46259linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-46267linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-52962linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-53294linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-53296linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-63942linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-63954linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-64097linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-64133linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-64218linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-64449linux@5.4.0-214.234no fix listed
LowUBUNTU-CVE-2026-68202linux@5.4.0-214.234no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.2.8latestyesterday2.2.18234475,82757,443
2.2.79 months ago2.2.18234475,82757,443

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Oct 2026 · scanned 14 Oct 2026 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.