argo-cd 10.10.3 Helm chart

Name: argo-cd Helm chart 10.10.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

argo

Not scored yet

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

Version 10.10.3 todayapp version v3.5.5 846Artifact Hub

argo-cd 10.10.3 deploys 3 container images: quay.io/argoproj/argocd, ghcr.io/dexidp/dex and ecr-public.aws.com/docker/library/redis. The highest contribution is GHSA-2x32-jm95-2cpx in github.com/dexidp/dex v0.0.0-20261007223442-05a275057112, fixed in 2.27.0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/argoproj/argocd×8	v3.5.5	—	not yet scanned
ghcr.io/dexidp/dex	v2.46.0	00837	541
ecr-public.aws.com/docker/library/redis	8.6.4-alpine	0059	200

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

58 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-2x32-jm95-2cpx	github.com/dexidp/dex@v0.0.0-20261007223442-05a275057112	2.27.0
Medium	GHSA-m9hp-7r99-94h5	github.com/dexidp/dex@v0.0.0-20261007223442-05a275057112	2.27.0
Medium	GHSA-vh7g-p26c-j2cw	github.com/dexidp/dex@v0.0.0-20261007223442-05a275057112	2.35.0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	GO-2026-5026	stdlib@go1.26.5	1.25.13
Medium	GO-2026-6612	stdlib@go1.27.1	1.27.2
Medium	GO-2026-6612	golang.org/x/net@v0.56.0	0.60.0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2026-6603	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6603	stdlib@go1.27.1	1.27.2
Low	GO-2026-5972	stdlib@go1.26.5	1.25.13
Low	GO-2026-6088	stdlib@go1.26.5	1.25.13
Low	GO-2026-6089	stdlib@go1.26.5	1.25.13
Low	GO-2026-6090	stdlib@go1.26.5	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6611	stdlib@go1.27.1	1.27.2
Low	GO-2026-6218	stdlib@go1.26.5	1.25.13
Low	GO-2026-5942	stdlib@go1.26.5	1.26.6
Low	GO-2026-6355	golang.org/x/crypto@v0.54.0	0.56.0
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GO-2026-6303	golang.org/x/crypto@v0.54.0	0.55.0
Low	GO-2024-2476	github.com/dexidp/dex@v0.0.0-20261007223442-05a275057112	no fix listed
Low	GO-2026-6354	golang.org/x/crypto@v0.54.0	0.56.0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2026-6608	stdlib@go1.27.1	1.26.9
Low	GO-2026-6607	stdlib@go1.27.1	1.26.9
Low	GO-2026-6609	stdlib@go1.27.1	1.26.9
Low	GO-2026-6613	stdlib@go1.27.1	1.26.9
Low	ALPINE-CVE-2026-76642	util-linux@2.41.4-r0	2.41.6-r0
Low	GO-2026-6605	stdlib@go1.27.1	1.26.9
Low	GO-2026-6610	stdlib@go1.27.1	1.27.2
Low	GO-2026-6610	golang.org/x/net@v0.56.0	0.60.0
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	ALPINE-CVE-2026-78408	util-linux@2.41.4-r0	2.41.6-r1
Low	GO-2026-6604	stdlib@go1.27.1	1.26.9
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.1	1.83.1
Low	ALPINE-CVE-2026-78410	util-linux@2.41.4-r0	2.41.6-r0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.8	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
10.10.3latest	today	v3.5.5	—	—
10.10.2	3 days ago	v3.5.4	0033225	2,659
10.10.1	4 days ago	v3.5.4	0033225	2,659
10.10.0	5 days ago	v3.5.4	0062286	3,803
10.9.6	11 days ago	v3.5.3	0064327	4,171
10.9.5	12 days ago	v3.5.3	0064327	4,171
10.9.4	13 days ago	v3.5.3	0064327	4,171
10.9.2	25 days ago	v3.5.3	0064327	4,171
10.9.1	28 days ago	v3.5.3	0064327	4,171
10.9.0	1 month ago	v3.5.2	0051313	3,570
10.8.4	1 month ago	v3.5.2	0051313	3,570
10.8.2	1 month ago	v3.5.2	0046304	3,370
10.8.1	1 month ago	v3.5.2	0046304	3,370
10.8.0	1 month ago	v3.5.2	0046304	3,370

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/argo/argo-cd.svg)](https://charts.stackradar.io/charts/argo/argo-cd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.