spark-operator 2.2.9 Helm chart

Name: spark-operator Helm chart 2.2.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 22 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.9 3 days agoapp version 2.2.1 1Artifact Hub

spark-operator 2.2.9 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,280 findings — 9 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

55,7929234375,809

6,280 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	9234375,809	55,792

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

5,809 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-43038	linux@5.4.0-214.234	5.4.0-233.253
Low	UBUNTU-CVE-2024-57887	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-22083	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-31786	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2025-68254	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-93826	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-53432	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-37892	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-54518	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2022-49163	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2022-49289	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72243	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-97988	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-98019	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-53039	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-53111	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-23001	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-49571	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2022-49172	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-52642	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38180	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-98479	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68414	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-21734	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38389	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38428	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-22025	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2021-47433	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38346	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38415	linux@5.4.0-214.234	no fix listed
Low	GHSA-4xh5-x5gv-qwph	pip@20.0.2	25.3
Low	UBUNTU-CVE-2025-8869	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-98333	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74386	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38403	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40006	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64095	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89565	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2022-50756	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2022-50860	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-54048	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-37796	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38348	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-19662	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Low	UBUNTU-CVE-2024-35871	linux@5.4.0-214.234	no fix listed
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.13.4.2	2.18.9
Low	UBUNTU-CVE-2026-97508	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-98803	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-22022	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.9latest	3 days ago	2.2.1	9234375,809	55,792
2.2.8	10 days ago	2.2.1	9234375,809	55,792
2.2.7	10 months ago	2.2.1	9234375,809	55,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.