StackRadar

flux2 2.19.1 Helm chart

fluxcd-community

Scored 21 Oct 2026

A Helm chart for flux2

Version 2.19.1 1 month agodeploys tag v1.6.4 27Artifact Hub

flux2 2.19.1 deploys 7 container images: ghcr.io/fluxcd/helm-controller, ghcr.io/fluxcd/image-automation-controller, ghcr.io/fluxcd/image-reflector-controller, ghcr.io/fluxcd/kustomize-controller and 3 more. Across them, 383 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

4,7390085298

383 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/fluxcd/helm-controllerv1.6.4001131532
ghcr.io/fluxcd/image-automation-controllerv1.2.5001032529
ghcr.io/fluxcd/image-reflector-controllerv1.2.5001031519
ghcr.io/fluxcd/kustomize-controllerv1.9.50020631,054
ghcr.io/fluxcd/notification-controllerv1.9.4001038566
ghcr.io/fluxcd/source-controllerv1.9.5001139600
ghcr.io/fluxcd/flux-cliv2.9.5001364939

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

107 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGO-2026-6809stdlib@go1.26.71.26.10
LowGO-2026-5024golang.org/x/sys@v0.40.00.44.0
LowALPINE-CVE-2026-89162pcre2@10.47-r010.48-r0
LowGHSA-wqqc-jjcq-vfxmgithub.com/sigstore/sigstore-go@v1.2.01.2.1
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.01.45.0
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.01.45.0
LowGHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/sdk@v1.44.01.45.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.19.1latest1 month agov1.6.400852984,739
2.19.03 months agov1.6.200643104,214

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fluxcd-community/flux2.svg)](https://charts.stackradar.io/charts/fluxcd-community/flux2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 19 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.