StackRadar

dex 2.14.2 Helm chart

mesosphere-stable

Scored 24 Sept 2026

Dex

Version 2.14.2 todayapp version 2.37.0 0Artifact Hub

dex 2.14.2 deploys 5 container images: quay.io/brancz/kube-rbac-proxy, mesosphere/dex-controller, mesosphere/dex, gcr.io/google_containers/kubernetes-dashboard-init-amd64 and 1 more. Across them, 1,340 findings — 12 critical, 50 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.8, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

19,9771250373905

1,340 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
quay.io/brancz/kube-rbac-proxyv0.21.100661580
mesosphere/dex-controllerv0.16.100998927
mesosphere/dexv2.37.0-d2iq.105251612,118
gcr.io/google_containers/kubernetes-dashboard-init-amd64×2v1.0.083724923010,845
bitnamilegacy/kubectl×21.29.248843555,507

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

942 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-56412expat@2.5.0-12.5.0-1+deb12u3
LowGO-2026-5972stdlib@go1.25.81.25.13
LowGO-2026-6088stdlib@go1.25.81.25.13
LowGO-2026-6089stdlib@go1.25.81.25.13
LowGO-2026-6090stdlib@go1.25.81.25.13
LowDEBIAN-CVE-2017-14159openldap@2.5.13+dfsg-5no fix listed
LowDEBIAN-CVE-2025-1390libcap2@1:2.66-41:2.66-4+deb12u1
LowUBUNTU-CVE-2026-50813sqlite3@3.11.0-1ubuntu1no fix listed
LowDEBIAN-CVE-2025-9403jq@1.6-2.1no fix listed
LowDEBIAN-CVE-2026-32777expat@2.5.0-1no fix listed
LowGO-2026-5038stdlib@go1.25.81.25.11
LowDEBIAN-CVE-2017-18018coreutils@9.1-1no fix listed
LowDEBIAN-CVE-2026-13757p11-kit@0.24.1-2no fix listed
LowGO-2025-3956stdlib@go1.20.41.23.12
LowGO-2026-5942golang.org/x/net@v0.52.00.56.0
LowGHSA-qxp5-gwg8-xv66golang.org/x/net@v0.11.00.36.0
LowDEBIAN-CVE-2026-11850krb5@1.20.1-2+deb12u1no fix listed
LowDEBIAN-CVE-2026-56132expat@2.5.0-1no fix listed
LowDEBIAN-CVE-2025-66382expat@2.5.0-1no fix listed
LowGO-2025-4012stdlib@go1.20.41.24.8
LowGO-2026-4440golang.org/x/net@v0.11.00.45.0
LowGO-2025-4011stdlib@go1.20.41.24.8
LowGO-2025-4015stdlib@go1.20.41.24.8
LowGO-2026-6218stdlib@go1.25.81.25.13
LowDEBIAN-CVE-2026-56392coreutils@9.1-1no fix listed
LowGHSA-w67g-5rqw-f597github.com/gorilla/websocket@v1.5.01.5.3
LowDEBIAN-CVE-2026-54370acl@2.3.1-3no fix listed
LowDEBIAN-CVE-2026-56409expat@2.5.0-12.5.0-1+deb12u3
LowGO-2026-4441golang.org/x/net@v0.11.00.45.0
LowDEBIAN-CVE-2005-2541tar@1.34+dfsg-1.2+deb12u1no fix listed
LowDEBIAN-CVE-2025-10966curl@7.88.1-10+deb12u5no fix listed
LowUBUNTU-CVE-2013-4235shadow@1:4.2-3.1ubuntu5.31:4.2-3.1ubuntu5.5+esm3
LowUBUNTU-CVE-2025-45582tar@1.28-2.1ubuntu0.1no fix listed
LowDEBIAN-CVE-2026-86805glibc@2.36-9+deb12u4no fix listed
LowDEBIAN-CVE-2026-15534perl@5.36.0-7+deb12u1no fix listed
LowUSN-4008-2apparmor@2.10.95-0ubuntu2.72.10.95-0ubuntu2.11
LowUBUNTU-CVE-2018-16888systemd@229-4ubuntu19229-4ubuntu21.27
LowGO-2025-3373stdlib@go1.20.41.22.11
LowGO-2026-5970golang.org/x/text@v0.35.00.39.0
LowDEBIAN-CVE-2026-56391coreutils@9.1-1no fix listed
LowGO-2025-4155stdlib@go1.20.41.24.11
LowDEBIAN-CVE-2025-14017curl@7.88.1-10+deb12u5no fix listed
LowGO-2024-2888stdlib@go1.20.41.21.11
LowDEBIAN-CVE-2026-32778expat@2.5.0-1no fix listed
LowUSN-8467-1perl@5.22.1-95.22.1-9ubuntu0.9+esm2
LowUBUNTU-CVE-2017-11671gcc-5@5.4.0-6ubuntu1~16.04.45.4.0-6ubuntu1~16.04.12+esm2
LowUBUNTU-CVE-2017-11671gccgo-6@6.0.1-0ubuntu16.0.1-0ubuntu1+esm1
LowGO-2025-4008stdlib@go1.20.41.24.8
LowGO-2025-4010stdlib@go1.20.41.24.8
LowDEBIAN-CVE-2024-10041pam@1.5.2-6+deb12u1no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.14.2latesttoday2.37.0125037390519,977
2.14.11 year ago2.37.0125036784419,397

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mesosphere-stable/dex.svg)](https://charts.stackradar.io/charts/mesosphere-stable/dex)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 24 Sept 2026 · scanned 24 Sept 2026 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.