spark-operator 2.2.9 Helm chart

Name: spark-operator Helm chart 2.2.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wikimedia

Scored 20 Oct 2026

A Helm chart for Spark on Kubernetes operator.

Version 2.2.9 yesterdayapp version 2.2.1 1Artifact Hub

spark-operator 2.2.9 deploys 1 container image: ghcr.io/kubeflow/spark-operator/controller. Across them, 6,568 findings — 9 critical, 23 high — 10 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.24, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

58,0869234436,092

6,568 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/kubeflow/spark-operator/controller×2	2.2.1	9234436,092	58,086

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,568 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2018-20225	python-pip@20.0.2-5ubuntu1.11	no fix listed
Medium	UBUNTU-CVE-2020-26146	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-74478	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2020-26140	linux@5.4.0-214.234	no fix listed
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.96.Final	4.1.132.Final
Medium	UBUNTU-CVE-2026-4176	perl@5.30.0-9ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2023-20569	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-74279	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72033	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2022-0400	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2024-56180	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-63887	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-63888	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2011-10043	perl@5.30.0-9ubuntu0.5	no fix listed
Medium	UBUNTU-CVE-2022-2097	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.fips.16
Medium	UBUNTU-CVE-2026-68160	linux@5.4.0-214.234	no fix listed
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.12.0	3.18.0
Medium	GHSA-j288-q9x7-2f5v	commons-lang@2.6	no fix listed
Medium	UBUNTU-CVE-2026-5946	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm2
Medium	UBUNTU-CVE-2026-72226	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72319	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-74427	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-80630	linux@5.4.0-214.234	no fix listed
Medium	GHSA-wrvw-hg22-4m67	protobuf-java@3.3.0	3.16.1
Medium	UBUNTU-CVE-2026-68159	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72084	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72299	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72339	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72351	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-90151	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72466	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72234	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-80600	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2022-50666	linux@5.4.0-214.234	no fix listed
Medium	GO-2026-4337	stdlib@go1.24.1	1.24.13
Medium	UBUNTU-CVE-2025-13836	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm4
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.96.Final	4.1.135.Final
Medium	UBUNTU-CVE-2026-31533	linux@5.4.0-214.234	5.4.0-230.250
Medium	UBUNTU-CVE-2026-43503	linux@5.4.0-214.234	5.4.0-233.253
Medium	UBUNTU-CVE-2026-72083	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72322	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72323	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72491	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72014	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72398	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-72473	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-5450	glibc@2.31-0ubuntu9.17	no fix listed
Medium	UBUNTU-CVE-2026-1519	bind9@1:9.18.30-0ubuntu0.20.04.2	1:9.18.30-0ubuntu0.20.04.2+esm3
Medium	UBUNTU-CVE-2026-63912	linux@5.4.0-214.234	no fix listed
Medium	UBUNTU-CVE-2026-63922	linux@5.4.0-214.234	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.9latest	yesterday	2.2.1	9234436,092	58,086
2.2.8	7 days ago	2.2.1	9234436,092	58,086
2.2.7	10 months ago	2.2.1	9234436,092	58,086

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wikimedia/spark-operator.svg)](https://charts.stackradar.io/charts/wikimedia/spark-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.