ghcr.io/kubeflow/spark-operator/controller:2.2.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/kubeflow/spark-operator/controller

ghcr.io/kubeflow/spark-operator/controller:2.2.1 resolved to 865ff4da5686, scanned 14 Sept 2026: 633 findings, 6 critical; deployed by 1 chart, among them spark-operator.

Radar Score

7,835612123491

633 findings on digest 865ff4da5686 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.2.1resolves to	865ff4da5686	1 chart	8 days ago	612123491	7,835

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

491 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 865ff4da5686 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42013	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2017-13716	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-0861	glibc@2.31-0ubuntu9.17	2.31-0ubuntu9.18+esm1
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2025-69419	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2026-54874	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm5
Low	UBUNTU-CVE-2026-11622	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-13204	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-42766	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm4
Low	UBUNTU-CVE-2026-74860	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	no fix listed
Low	UBUNTU-CVE-2025-32990	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm1
Low	UBUNTU-CVE-2026-12617	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.3.0	3.16.3
Low	UBUNTU-CVE-2025-6020	pam@1.3.1-5ubuntu4.7	no fix listed
Low	UBUNTU-CVE-2026-57585	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-86145	pcre2@10.34-7ubuntu0.1	no fix listed
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.96.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.20.0	2.25.5
Low	UBUNTU-CVE-2026-3644	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm7
Low	UBUNTU-CVE-2023-47039	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.96.Final	4.1.125.Final
Low	UBUNTU-CVE-2025-15281	glibc@2.31-0ubuntu9.17	2.31-0ubuntu9.18+esm1
Low	GHSA-q4rv-gq96-w7c5	jetty-server@9.4.56.v20240826	9.4.57.v20241219
Low	UBUNTU-CVE-2025-6297	dpkg@1.19.7ubuntu3.2	no fix listed
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.96.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-42011	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm3
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.96.Final	4.1.135.Final
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.20.0	2.25.3
Low	UBUNTU-CVE-2026-9538	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-6395	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm1
Low	UBUNTU-CVE-2019-1010204	binutils@2.34-6ubuntu1.11	no fix listed
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-0990	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10+esm4
Low	UBUNTU-CVE-2026-11331	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu1.5	no fix listed
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GHSA-h383-gmxw-35v2	log4j-1.2-api@2.20.0	2.25.4
Low	UBUNTU-CVE-2026-41992	gzip@1.10-0ubuntu4.1	no fix listed
Low	UBUNTU-CVE-2023-7008	systemd@245.4-4ubuntu3.24	no fix listed
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2019-20633	patch@2.7.6-6	no fix listed
Low	UBUNTU-CVE-2025-7425	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	2.9.10+dfsg-5ubuntu0.20.04.10+esm3
Low	UBUNTU-CVE-2026-8932	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm7
Low	UBUNTU-CVE-2026-11721	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.8.1	9.37.4
Low	UBUNTU-CVE-2026-8286	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm4
Low	GHSA-wf93-45jw-7689	pip@20.0.2	26.1.2
Low	UBUNTU-CVE-2026-8643	python-pip@20.0.2-5ubuntu1.11	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
spark-operatorwikimedia	2.2.7	2.2.1	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.