argo-cd 10.9.2 Helm chart

Name: argo-cd Helm chart 10.9.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

argo-cd-oci

Not scored yet

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

Version 10.9.2app version v3.5.3 78Artifact Hub

argo-cd 10.9.2 deploys 3 container images: quay.io/argoproj/argocd, ghcr.io/dexidp/dex and ecr-public.aws.com/docker/library/redis. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.36.0, fixed in 0.52.0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/argoproj/argocd×8	v3.5.3	009177	1,455
ghcr.io/dexidp/dex	v2.45.1	0024111	1,373
ecr-public.aws.com/docker/library/redis	8.6.4-alpine	0048	168

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

258 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.36.0	0.52.0
Low	UBUNTU-CVE-2026-9538	perl@5.40.1-7ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-42497	perl@5.40.1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.7.0	5.9.0
Low	UBUNTU-CVE-2026-48959	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358	0.1.1
Low	UBUNTU-CVE-2026-76641	expat@2.7.4-1	no fix listed
Low	GO-2026-4341	stdlib@go1.24.0	1.24.12
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	GHSA-479m-364c-43vc	github.com/russellhaering/goxmldsig@v1.5.0	1.6.0
Low	GHSA-fxhp-mv3v-67qp	oras.land/oras-go/v2@v2.6.1	2.6.2
Low	ALPINE-CVE-2026-2673	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.5-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-48962	perl@5.40.1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-76642	util-linux@2.41.4-r0	2.41.6-r0
Low	GHSA-m3xc-h892-ggx6	github.com/go-git/go-billy/v5@v5.7.0	5.9.0
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	UBUNTU-CVE-2026-48961	perl@5.40.1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.39.0	1.43.0
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.6.1	1.6.3
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.40.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.40.1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	UBUNTU-CVE-2026-76642	util-linux@2.41.3-3ubuntu2.2	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.36.0	0.45.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.1	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.36.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	UBUNTU-CVE-2026-56404	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56410	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56411	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-35368	rust-coreutils@0.8.0-0ubuntu3	no fix listed
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1	1.97.3
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4	1.7.8
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.36.0	0.52.0
Low	UBUNTU-CVE-2026-89158	pcre2@10.46-1build1	no fix listed
Low	ALPINE-CVE-2026-42769	openssl@3.5.5-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-35341	rust-coreutils@0.8.0-0ubuntu3	no fix listed
Low	GHSA-gxhx-2686-5h9g	github.com/slack-go/slack@v0.16.0	0.23.1
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.39.0	1.40.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41.4-r0	2.41.6-r1
Low	UBUNTU-CVE-2026-78408	util-linux@2.41.3-3ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
10.9.2latest	—	v3.5.3	—	—
10.9.1	—	v3.5.3	0037296	2,996
10.9.0	—	v3.5.2	0037325	3,226

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/argo-cd-oci/argo-cd.svg)](https://charts.stackradar.io/charts/argo-cd-oci/argo-cd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.