dex 2.14.2 Helm chart
mesosphere-stableScored 24 Sept 2026
Dex
Version 2.14.2 todayapp version 2.37.0 0Artifact Hub
dex 2.14.2 deploys 5 container images: quay.io/brancz/kube-rbac-proxy, mesosphere/dex-controller, mesosphere/dex, gcr.io/google_containers/kubernetes-dashboard-init-amd64 and 1 more. Across them, 1,340 findings — 12 critical, 50 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.8, fixed in 1.0.2g-1ubuntu4.20+esm5.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v0.21.1 | 00661 | 580 |
| mesosphere/ | v0.16.1 | 00998 | 927 |
| mesosphere/ | v2.37.0-d2iq.1 | 0525161 | 2,118 |
| gcr.io/ | v1.0.0 | 837249230 | 10,845 |
| bitnamilegacy/ | 1.29.2 | 4884355 | 5,507 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-69418 | openssl | 3.0.18-1~deb12u2 |
| Low | DEBIAN-CVE-2007-5686 | shadow | no fix listed |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | GO-2026-6179 | golang.org/ | 0.40.0 |
| Low | DEBIAN-CVE-2026-18477 | tar | no fix listed |
| Low | GO-2023-2153 | google.golang.org/ | 1.56.3 |
| Low | GO-2023-2334 | github.com/ | 3.0.1 |
| Low | GO-2026-5693 | github.com/ | 5.19.1 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6061 | google.golang.org/ | 1.82.1 |
| Low | GO-2026-6094 | github.com/ | 0.30.0 |
| Low | GO-2026-6278 | github.com/ | 1.5.3 |
| Low | USN-3432-1 | ca-certificates | 20170717~16.04.1 |
| Low | USN-3784-1 | apparmor | 2.10.95-0ubuntu2.10 |
| Low | USN-3816-3 | systemd | 229-4ubuntu21.10 |
| Low | USN-4233-1 | gnutls28 | 3.4.10-4ubuntu1.6 |
| Low | USN-4233-2 | gnutls28 | 3.4.10-4ubuntu1.7 |
| Low | USN-4377-1 | ca-certificates | 20190110~16.04.1 |
| Low | USN-4608-1 | ca-certificates | 20201027ubuntu0.16.04.1 |
| Low | USN-4719-1 | ca-certificates | 20210119~16.04.1 |
| Low | USN-5089-2 | ca-certificates | 20210119~16.04.1ubuntu0.1~esm1 |
| Low | USN-5473-2 | ca-certificates | 20211016~16.04.1~esm1 |
| Low | USN-6105-2 | ca-certificates | 20230311~16.04.1~esm1 |
| Low | USN-6663-2 | openssl | 1.0.2g-1ubuntu4.20+esm12 |
| Low | USN-7034-2 | ca-certificates | 202402031~16.04.1~esm1 |
| Low | USN-8119-2 | systemd | 229-4ubuntu21.31+esm4 |
| Low | USN-8226-2 | kmod | 22-1ubuntu5.2+esm1 |
| Low | DEBIAN-CVE-2026-40228 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-95818 | glibc | no fix listed |
| Low | UBUNTU-CVE-2019-20386 | systemd | 229-4ubuntu21.27 |
| Low | GHSA-m7cr-m3pv-hgrp | github.com/ | 5.19.1 |
| Low | DEBIAN-CVE-2011-4116 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-57062 | gnupg2 | no fix listed |
| Low | GHSA-gm2x-2g9h-ccm8 | github.com/ | 5.17.1 |
| Low | DEBIAN-CVE-2026-53910 | diffutils | no fix listed |
| Low | DEBIAN-CVE-2026-24515 | expat | no fix listed |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
| Low | DEBIAN-CVE-2026-5958 | sed | 4.9-1+deb12u1 |
| Low | DEBIAN-CVE-2026-6368 | glibc | no fix listed |
| Low | UBUNTU-CVE-2019-9619 | systemd | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.14.2latest | today | 2.37.0 | 1250373905 | 19,977 |
| 2.14.1 | 1 year ago | 2.37.0 | 1250367844 | 19,397 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.