spark-operator 2.2.9 Helm chart

Name: spark-operator Helm chart 2.2.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 21 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.9 2 days agoapp version 2.2.1 1Artifact Hub

spark-operator 2.2.9 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,312 findings — 10 critical, 21 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

56,14110214445,835

6,312 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	10214445,835	56,141

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,312 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-21762	linux@5.4.0-214.234	5.4.0-216.236
Low	UBUNTU-CVE-2026-66046	expat@2.2.9-1ubuntu0.8	2.2.9-1ubuntu0.8+esm3
Low	UBUNTU-CVE-2026-42013	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2026-46303	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74490	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-31622	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2020-26142	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-98130	linux@5.4.0-214.234	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.4	2.18.8
Low	UBUNTU-CVE-2026-68097	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90018	linux@5.4.0-214.234	no fix listed
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.96.Final	4.1.135.Final
Low	UBUNTU-CVE-2026-89861	linux@5.4.0-214.234	no fix listed
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-45843	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-77214	expat@2.2.9-1ubuntu0.8	no fix listed
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.3.0	3.16.3
Low	UBUNTU-CVE-2026-98069	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43226	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43230	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43373	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46027	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-53003	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72374	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72378	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72409	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72502	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74321	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-80646	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68206	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-68349	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2025-8194	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm2
Low	GHSA-h383-gmxw-35v2	log4j-1.2-api@2.20.0	2.25.4
Low	UBUNTU-CVE-2026-89511	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89549	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-9076	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm4
Low	UBUNTU-CVE-2025-40780	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm1
Low	UBUNTU-CVE-2026-4224	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm7
Low	UBUNTU-CVE-2024-50283	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-43405	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-46024	linux@5.4.0-214.234	no fix listed
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.96.Final	4.1.132.Final
Low	UBUNTU-CVE-2024-10524	wget@1.20.3-1ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-68155	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72242	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72247	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-72253	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-74282	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-89476	linux@5.4.0-214.234	no fix listed
Low	UBUNTU-CVE-2026-90102	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.9latest	2 days ago	2.2.1	10214445,835	56,141
2.2.8	9 days ago	2.2.1	10214445,835	56,141
2.2.7	10 months ago	2.2.1	10214445,835	56,141

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.