argo-cd 0.3.3 Helm chart

Name: argo-cd Helm chart 0.3.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cluster-deploy

Not scored yet

Application management and continuous deployment with Argo CD

Version 0.3.3 todayapp version v3.5.3 0Artifact Hub

argo-cd 0.3.3 deploys 3 container images: quay.io/argoproj/argocd, ecr-public.aws.com/docker/library/redis and quay.io/argoprojlabs/argocd-image-updater. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/argoproj/argocd×7	v3.5.3	0012202	1,650
ecr-public.aws.com/docker/library/redis	8.6.4-alpine	0067	192
quay.io/argoprojlabs/argocd-image-updater	v1.3.0	001873	976

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

288 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-7210	python3@3.14.5-r0	3.14.7-r0
Medium	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.36.0	0.52.0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.36.0	0.52.0
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.36.0	0.52.0
Medium	ALPINE-CVE-2026-66046	expat@2.8.2-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-60000	openssh@10.3_p1-r0	10.3_p1-r1
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.36.0	0.52.0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.36.0	0.52.0
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	UBUNTU-CVE-2026-18924	curl@8.18.0-1ubuntu2.5	8.18.0-1ubuntu2.7
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-m37j-52j7-pjw7	oras.land/oras-go/v2@v2.6.1	2.6.2
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	ALPINE-CVE-2026-19445	python3@3.14.5-r0	3.14.8-r0
Medium	ALPINE-CVE-2026-11972	python3@3.14.5-r0	3.14.7-r0
Medium	ALPINE-CVE-2026-60002	openssh@10.3_p1-r0	10.3_p1-r1
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.36.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.36.0	0.52.0
Medium	ALPINE-CVE-2026-11940	python3@3.14.5-r0	3.14.7-r0
Medium	UBUNTU-CVE-2024-52005	git@1:2.53.0-1ubuntu1	no fix listed
Low	ALPINE-CVE-2026-9669	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-66046	expat@2.7.4-1	2.7.4-1ubuntu0.2
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-15308	python3@3.14.5-r0	3.14.7-r0
Low	UBUNTU-CVE-2026-82560	perl@5.40.1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-93990	expat@2.8.2-r0	2.8.5-r0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.36.0	0.52.0
Low	UBUNTU-CVE-2026-48959	perl@5.40.1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-7774	python3@3.14.5-r0	3.14.7-r0
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1ubuntu3.1	no fix listed
Low	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-80229	curl@8.18.0-1ubuntu2.5	8.18.0-1ubuntu2.7
Low	UBUNTU-CVE-2026-9538	perl@5.40.1-7ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r1	10.48-r0
Low	UBUNTU-CVE-2026-86145	pcre2@10.46-1build1	no fix listed
Low	UBUNTU-CVE-2026-84782	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6
Low	ALPINE-CVE-2026-19553	python3@3.14.5-r0	3.14.8-r0
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.7.0	2.8.0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.3latest	today	v3.5.3	—	—
0.3.2	1 month ago	v3.5.1	0067402	4,426

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cluster-deploy/argo-cd.svg)](https://charts.stackradar.io/charts/cluster-deploy/argo-cd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.