ghcr.io/kubeflow/spark-operator/controller:2.2.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/kubeflow/spark-operator/controller

ghcr.io/kubeflow/spark-operator/controller:2.2.1 resolved to 865ff4da5686, scanned 14 Sept 2026: 633 findings, 6 critical; deployed by 1 chart, among them spark-operator.

Radar Score

7,835612123491

633 findings on digest 865ff4da5686 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.2.1resolves to	865ff4da5686	1 chart	9 days ago	612123491	7,835

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

491 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 865ff4da5686 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-19672	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	UBUNTU-CVE-2022-48064	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GHSA-72hv-8253-57qq	jackson-core@2.15.2	2.18.6
Low	UBUNTU-CVE-2026-0865	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm5
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.96.Final	4.1.133.Final
Low	UBUNTU-CVE-2025-14524	curl@7.68.0-1ubuntu2.25	no fix listed
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.17	no fix listed
Low	UBUNTU-CVE-2026-5950	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	GHSA-4xh5-x5gv-qwph	pip@20.0.2	25.3
Low	UBUNTU-CVE-2025-8869	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-3731	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4
Low	UBUNTU-CVE-2026-8328	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	UBUNTU-CVE-2025-65018	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-5435	glibc@2.31-0ubuntu9.17	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@45.2.0	83.0.0
Low	UBUNTU-CVE-2026-59890	setuptools@45.2.0-1ubuntu0.2	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.96.Final	4.1.135.Final
Low	UBUNTU-CVE-2026-0672	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm5
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.21	1.26.0
Low	UBUNTU-CVE-2025-1181	binutils@2.34-6ubuntu1.11	2.34-6ubuntu1.11+esm1
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.38.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.30.0-9ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-15806	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.96.Final	4.1.129.Final
Low	UBUNTU-CVE-2026-10723	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.15.2	2.18.8
Low	UBUNTU-CVE-2023-4039	gcc-9@9.4.0-1ubuntu1~20.04.2	no fix listed
Low	UBUNTU-CVE-2023-4039	gcc-10@10.5.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	UBUNTU-CVE-2026-76642	util-linux@2.34-0.1ubuntu9.6	no fix listed
Low	UBUNTU-CVE-2026-11822	sqlite3@3.31.1-4ubuntu0.6	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.31.1-4ubuntu0.6	no fix listed
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.24	245.4-4ubuntu3.24+esm1
Low	GHSA-cgwf-w82q-5jrr	commons-compress@1.23.0	1.24.0
Low	UBUNTU-CVE-2026-6846	binutils@2.34-6ubuntu1.11	no fix listed
Low	PYSEC-2026-3721	pip@20.0.2	26.2
Low	UBUNTU-CVE-2026-13346	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2025-15079	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm2
Low	UBUNTU-CVE-2025-12781	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	GHSA-mq26-g339-26xf	pip@20.0.2	23.3
Low	UBUNTU-CVE-2025-15366	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm6
Low	UBUNTU-CVE-2026-6429	curl@7.68.0-1ubuntu2.25	no fix listed
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.96.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2021-20197	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-1965	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2025-3576	krb5@1.17-6ubuntu4.9	1.17-6ubuntu4.11
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.19-3ubuntu2.4	2.2.19-3ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.10+dfsg-5ubuntu0.20.04.9	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
spark-operatorwikimedia	2.2.7	2.2.1	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.