spark-operator 2.2.9 Helm chart

Name: spark-operator Helm chart 2.2.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 20 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.9 yesterdayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.9 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,568 findings — 9 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

58,0869234436,092

6,568 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	9234436,092	58,086

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

6,092 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74550	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90041	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2024-36916	linux@5.4.0-214.234	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.23.0	0.39.0
Low	UBUNTU-CVE-2022-49328	linux@5.4.0-214.234	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-36184	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-59843	libssh@0.9.3-2ubuntu2.5	no fix listed
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2023-47039	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2021-32078	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-23242	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-52946	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68241	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68336	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74649	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-0990	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10+esm4
Low	UBUNTU-CVE-2026-98339	linux@5.4.0-214.234	no fix listed
Low	GO-2025-4155	stdlib@go1.24.1	1.24.11
Low	UBUNTU-CVE-2025-38211	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-42011	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2025-38563	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-31773	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68302	linux@5.4.0-214.234	no fix listed
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.20.0	2.25.3
Low	UBUNTU-CVE-2026-46056	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-52918	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-64088	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68354	linux@5.4.0-214.234	no fix listed
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.8.1	9.37.4
Low	UBUNTU-CVE-2026-89999	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38676	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-40282	linux@5.4.0-214.234	no fix listed
Low	GHSA-hmr7-m48g-48f6	jetty-http@9.4.43.v20210629	9.4.52
Low	UBUNTU-CVE-2026-98357	linux@5.4.0-214.234	no fix listed
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.13.4.2	2.18.11
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.13.4.2	2.18.11
Low	UBUNTU-CVE-2024-25744	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-9538	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-31708	linux@5.4.0-214.234	no fix listed
Low	GO-2025-4014	stdlib@go1.24.1	1.24.8
Low	UBUNTU-CVE-2026-68140	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-68198	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68321	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-53229	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68256	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2019-1010204	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-68433	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-38724	linux@5.4.0-214.234	5.4.0-241.261

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.9latest	yesterday	2.2.1	9234436,092	58,086
2.2.8	7 days ago	2.2.1	9234436,092	58,086
2.2.7	10 months ago	2.2.1	9234436,092	58,086

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.