flux2 2.19.1 Helm chart

Name: flux2 Helm chart 2.19.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fluxcd-community

Scored 21 Oct 2026

A Helm chart for flux2

Version 2.19.1 1 month agodeploys tag v1.6.4 27Artifact Hub

flux2 2.19.1 deploys 7 container images: ghcr.io/fluxcd/helm-controller, ghcr.io/fluxcd/image-automation-controller, ghcr.io/fluxcd/image-reflector-controller, ghcr.io/fluxcd/kustomize-controller and 3 more. Across them, 383 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

4,7390085298

383 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/fluxcd/helm-controller	v1.6.4	001131	532
ghcr.io/fluxcd/image-automation-controller	v1.2.5	001032	529
ghcr.io/fluxcd/image-reflector-controller	v1.2.5	001031	519
ghcr.io/fluxcd/kustomize-controller	v1.9.5	002063	1,054
ghcr.io/fluxcd/notification-controller	v1.9.4	001038	566
ghcr.io/fluxcd/source-controller	v1.9.5	001139	600
ghcr.io/fluxcd/flux-cli	v2.9.5	001364	939

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

24 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-8925	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-19931	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-11856	curl@8.20.0-r0	8.22.0-r0
Medium	GO-2026-5026	stdlib@go1.26.2	1.25.13
Medium	GO-2026-5026	golang.org/x/net@v0.49.0	0.55.0
Medium	ALPINE-CVE-2026-10536	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-9079	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8924	curl@8.20.0-r0	8.22.0-r0
Medium	GO-2026-6612	stdlib@go1.26.7	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.56.0	0.60.0
Medium	ALPINE-CVE-2026-66046	expat@2.8.3-r0	2.8.4-r0
Medium	GO-2026-6604	stdlib@go1.26.7	1.26.9
Medium	GHSA-m37j-52j7-pjw7	oras.land/oras-go/v2@v2.6.1	2.6.2
Medium	ALPINE-CVE-2026-18924	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-80231	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.20.0-r0	8.22.0-r0
Medium	GO-2026-4981	stdlib@go1.26.2	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.19.1latest	1 month ago	v1.6.4	0085298	4,739
2.19.0	3 months ago	v1.6.2	0064310	4,214

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fluxcd-community/flux2.svg)](https://charts.stackradar.io/charts/fluxcd-community/flux2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.