spark-operator 2.2.9 Helm chart

Name: spark-operator Helm chart 2.2.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 20 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.9 yesterdayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.9 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,568 findings — 9 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

58,0869234436,092

6,568 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	9234436,092	58,086

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

443 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-74752	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm1
Medium	UBUNTU-CVE-2025-68315	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-43407	linux@5.4.0-214.234	5.4.0-233.253
Medium	UBUNTU-CVE-2026-6100	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Medium	UBUNTU-CVE-2025-69421	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm2
Medium	GHSA-g5ww-5jh7-63cx	protobuf-java@3.3.0	3.16.3
Medium	UBUNTU-CVE-2026-64091	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-33191	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-100075	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-31659	linux@5.4.0-214.234	5.4.0-233.253
Medium	UBUNTU-CVE-2026-53355	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-74581	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-89601	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-46119	linux@5.4.0-214.234	5.4.0-233.253
Medium	UBUNTU-CVE-2026-11972	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Medium	USN-8093-1	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4
Medium	UBUNTU-CVE-2026-89672	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-43232	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-27135	nghttp2@1.40.0-1ubuntu0.3	1.40.0-1ubuntu0.3+esm1
Medium	UBUNTU-CVE-2023-53751	linux@5.4.0-214.234	no fix listed
Medium	GHSA-3pxv-7cmr-fjr4	log4j-core@2.20.0	2.25.4
Medium	UBUNTU-CVE-2026-53224	linux@5.4.0-214.234	5.4.0-238.258
Medium	UBUNTU-CVE-2026-46043	linux@5.4.0-214.234	5.4.0-233.253
Medium	UBUNTU-CVE-2026-53043	linux@5.4.0-214.234	5.4.0-238.258
Medium	UBUNTU-CVE-2026-53186	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-64551	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-90414	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-68343	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-63072	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm5
Medium	UBUNTU-CVE-2026-43037	linux@5.4.0-214.234	5.4.0-233.253
Medium	UBUNTU-CVE-2020-26556	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2025-69420	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm2
Medium	UBUNTU-CVE-2026-72493	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-89650	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-89671	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-8927	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm4
Medium	UBUNTU-CVE-2026-31657	linux@5.4.0-214.234	5.4.0-234.254
Medium	UBUNTU-CVE-2026-52931	linux@5.4.0-214.234	5.4.0-234.254
Medium	UBUNTU-CVE-2026-53088	linux@5.4.0-214.234	5.4.0-234.254
Medium	UBUNTU-CVE-2026-53309	linux@5.4.0-214.234	5.4.0-238.258
Medium	UBUNTU-CVE-2026-68082	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-74436	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-74556	linux@5.4.0-214.234	no fix listed
Medium	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.9.0	3.30.14
Medium	UBUNTU-CVE-2026-43499	linux@5.4.0-214.234	5.4.0-234.254
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm2
Medium	UBUNTU-CVE-2026-46135	linux@5.4.0-214.234	5.4.0-233.253
Medium	UBUNTU-CVE-2026-28388	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3
Medium	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.9.0	3.30.14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.9latest	yesterday	2.2.1	9234436,092	58,086
2.2.8	7 days ago	2.2.1	9234436,092	58,086
2.2.7	10 months ago	2.2.1	9234436,092	58,086

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.