ghcr.io/kubeflow/spark-operator/controller:2.2.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/kubeflow/spark-operator/controller

ghcr.io/kubeflow/spark-operator/controller:2.2.1 resolved to 865ff4da5686, scanned 14 Sept 2026: 633 findings, 6 critical; deployed by 1 chart, among them spark-operator.

Radar Score

7,835612123491

633 findings on digest 865ff4da5686 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.2.1resolves to	865ff4da5686	1 chart	9 days ago	612123491	7,835

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

633 distinct on this digest

Findings for digest 865ff4da5686 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2026-4976	stdlib@go1.24.1	1.25.10
Low	GHSA-cj7v-27pg-wf7q	jetty-http@9.4.43.v20210629	9.4.47
Low	UBUNTU-CVE-2025-5278	coreutils@8.30-3ubuntu2	no fix listed
Low	GO-2026-5856	stdlib@go1.24.1	1.25.12
Low	UBUNTU-CVE-2026-22795	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm2
Low	GO-2025-4007	stdlib@go1.24.1	1.24.9
Low	GO-2025-3749	stdlib@go1.24.1	1.24.4
Low	GO-2026-4980	stdlib@go1.24.1	1.25.10
Low	GO-2026-5039	stdlib@go1.24.1	1.25.11
Low	UBUNTU-CVE-2025-6075	python3.8@3.8.10-0ubuntu1~20.04.18	3.8.10-0ubuntu1~20.04.18+esm3
Low	UBUNTU-CVE-2025-8114	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm2
Low	GO-2025-4013	stdlib@go1.24.1	1.24.8
Low	GO-2025-3849	stdlib@go1.24.1	1.23.12
Low	GO-2026-4946	stdlib@go1.24.1	1.25.9
Low	UBUNTU-CVE-2026-54370	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.2.9-1ubuntu0.8	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.2.9-1ubuntu0.8	no fix listed
Low	UBUNTU-CVE-2026-50219	expat@2.2.9-1ubuntu0.8	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.30.0-9ubuntu0.5	no fix listed
Low	GO-2026-4603	stdlib@go1.24.1	1.25.8
Low	UBUNTU-CVE-2026-0864	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed
Low	UBUNTU-CVE-2025-1180	binutils@2.34-6ubuntu1.11	2.34-6ubuntu1.11+esm1
Low	GHSA-jp4c-xjxw-mgf9	pip@20.0.2	26.1
Low	UBUNTU-CVE-2026-6357	python-pip@20.0.2-5ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-29111	systemd@245.4-4ubuntu3.24	245.4-4ubuntu3.24+esm3
Low	GO-2026-4982	stdlib@go1.24.1	1.25.10
Low	GO-2026-6091	stdlib@go1.24.1	1.25.13
Low	UBUNTU-CVE-2024-56433	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.10-0ubuntu4.1	no fix listed
Low	UBUNTU-CVE-2026-19548	binutils@2.34-6ubuntu1.11	no fix listed
Low	GO-2026-6180	golang.org/x/mod@v0.25.0	0.40.0
Low	UBUNTU-CVE-2025-1148	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-40226	systemd@245.4-4ubuntu3.24	no fix listed
Low	GO-2025-3750	stdlib@go1.24.1	1.23.10
Low	GO-2026-4864	stdlib@go1.24.1	1.25.9
Low	UBUNTU-CVE-2026-15003	binutils@2.34-6ubuntu1.11	no fix listed
Low	GO-2026-4865	stdlib@go1.24.1	1.25.9
Low	GO-2026-4869	stdlib@go1.24.1	1.25.9
Low	UBUNTU-CVE-2026-6845	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2025-1152	binutils@2.34-6ubuntu1.11	no fix listed
Low	GO-2026-4340	stdlib@go1.24.1	1.24.12
Low	UBUNTU-CVE-2025-1150	binutils@2.34-6ubuntu1.11	no fix listed
Low	GO-2025-4175	stdlib@go1.24.1	1.24.11
Low	UBUNTU-CVE-2025-1151	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2025-4877	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-18374	glibc@2.31-0ubuntu9.17	no fix listed
Low	UBUNTU-CVE-2026-6844	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2025-1149	binutils@2.34-6ubuntu1.11	no fix listed
Low	UBUNTU-CVE-2026-19542	glibc@2.31-0ubuntu9.17	no fix listed
Low	UBUNTU-CVE-2026-53613	util-linux@2.34-0.1ubuntu9.6	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
spark-operatorwikimedia	2.2.7	2.2.1	2

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.