spark-operator 2.2.9 Helm chart

Name: spark-operator Helm chart 2.2.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 20 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.9 yesterdayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.9 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,568 findings — 9 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

58,0869234436,092

6,568 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	9234436,092	58,086

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

6,092 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74697	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46133	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89729	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-63915	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-63916	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64313	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89626	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89483	linux@5.4.0-214.234	no fix listed
Low	GO-2026-6603	stdlib@go1.24.1	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.38.0	0.60.0
Low	UBUNTU-CVE-2026-19666	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Low	UBUNTU-CVE-2026-19667	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Low	UBUNTU-CVE-2026-76163	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Low	UBUNTU-CVE-2026-80274	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Low	UBUNTU-CVE-2026-81563	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Low	UBUNTU-CVE-2026-81736	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Low	GO-2026-5972	stdlib@go1.24.1	1.25.13
Low	GO-2026-6088	stdlib@go1.24.1	1.25.13
Low	GO-2026-6089	stdlib@go1.24.1	1.25.13
Low	GO-2026-6090	stdlib@go1.24.1	1.25.13
Low	GO-2026-6611	stdlib@go1.24.1	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.38.0	0.60.0
Low	GHSA-wf93-45jw-7689	pip@20.0.2	26.1.2
Low	UBUNTU-CVE-2026-8643	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-43139	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90000	linux@5.4.0-214.234	no fix listed
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.3.0	3.16.3
Low	UBUNTU-CVE-2024-2193	linux@5.4.0-214.234	no fix listed
Low	GO-2026-5038	stdlib@go1.24.1	1.25.11
Low	UBUNTU-CVE-2026-68196	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68352	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-9669	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	UBUNTU-CVE-2025-27558	linux@5.4.0-214.234	5.4.0-234.254
Low	UBUNTU-CVE-2026-63947	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64093	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-50106	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72157	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89951	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-21927	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72233	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72235	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89569	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90329	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2026-80989	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43203	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43296	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2023-32256	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68261	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68337	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.9latest	yesterday	2.2.1	9234436,092	58,086
2.2.8	7 days ago	2.2.1	9234436,092	58,086
2.2.7	10 months ago	2.2.1	9234436,092	58,086

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.