StackRadar

agent-control-cd Helm chart

newrelic

Scored 14 Sept 2026

A Helm chart to install New Relic Agent Control CD (Flux) on Kubernetes

Latest 1.0.0 11 months agoApp version not verified against the render 0Artifact Hub

agent-control-cd 1.0.0 deploys 3 container images: ghcr.io/fluxcd/helm-controller, ghcr.io/fluxcd/source-controller and ghcr.io/fluxcd/flux-cli. Across them, 519 findings0 critical, 4 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.3-r0, fixed in 3.3.6-r0.

Radar Score

5,0340469446

519 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/fluxcd/helm-controllerv1.2.001191241,349
ghcr.io/fluxcd/source-controllerv1.5.001201771,803
ghcr.io/fluxcd/flux-cliv2.5.102301451,882

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

235 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.32.00.52.0
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.32.00.52.0
LowGHSA-4qg8-fj49-pxjhgithub.com/sigstore/timestamp-authority@v1.2.22.0.3
LowGHSA-35c7-w35f-xwghk8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf51.21.0
LowGHSA-8xwf-rjm4-xvhvoras.land/oras-go/v2@v2.5.02.6.1
LowGHSA-qw64-3x98-g7q2github.com/go-git/go-billy/v5@v5.6.25.9.0
LowGHSA-4x4m-3c2p-qppck8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf51.31.12
LowGHSA-p436-gjf2-799pgithub.com/docker/cli@v27.1.2+incompatible29.2.0
LowGHSA-jxpm-75mh-9fp7oras.land/oras-go/v2@v2.5.02.6.1
LowALPINE-CVE-2025-15468openssl@3.3.3-r03.3.6-r0
LowGHSA-pjcq-xvwq-hhpjgithub.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e693213580.1.1
LowGHSA-3wgm-2gw2-vh5mk8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf5no fix listed
LowGHSA-74j8-88mm-7496k8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf5no fix listed
LowGHSA-47q9-m4ww-924mgithub.com/sigstore/rekor@v1.3.61.5.2
LowGO-2026-4341stdlib@go1.23.61.24.12
LowGHSA-5xqw-8hwv-wg92helm.sh/helm/v3@v3.17.13.17.3
LowGHSA-c6gw-w398-hv78github.com/go-jose/go-jose/v4@v4.0.44.0.5
LowGHSA-c6gw-w398-hv78github.com/go-jose/go-jose/v3@v3.0.33.0.4
LowGHSA-hc8v-wwc9-vgxmgithub.com/go-git/go-git/v5@v5.13.25.19.2
LowGHSA-fxhp-mv3v-67qporas.land/oras-go/v2@v2.5.02.6.2
LowGHSA-4hfp-h4cw-hj8phelm.sh/helm/v3@v3.17.13.17.3
LowGHSA-pxq6-2prw-chj9github.com/docker/docker@v27.1.2+incompatibleno fix listed
LowALPINE-CVE-2025-26519musl@1.2.5-r81.2.5-r9
LowGHSA-xhf5-7wjv-pqxpgithub.com/containerd/containerd@v1.7.241.7.33
LowGHSA-f5mr-q85p-6hh6github.com/sigstore/fulcio@v1.6.31.8.6
LowGHSA-m3xc-h892-ggx6github.com/go-git/go-billy/v5@v5.6.25.9.0
LowGHSA-qgq7-7hm3-q39jgithub.com/go-git/go-git/v5@v5.13.25.19.2
LowGHSA-hfvc-g4fc-pqhxgo.opentelemetry.io/otel/sdk@v1.33.01.43.0
LowGHSA-q9hv-hpm4-hj6xgithub.com/cloudflare/circl@v1.5.01.6.3
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.32.00.52.0
LowGHSA-9c54-x2g4-v92jgithub.com/sigstore/timestamp-authority@v1.2.2no fix listed
LowGHSA-9h84-qmv7-982phelm.sh/helm/v3@v3.17.13.18.5
LowGHSA-f9f8-9pmf-xv68helm.sh/helm/v3@v3.17.13.18.5
LowGHSA-fw7p-63qq-7hprfilippo.io/edwards25519@v1.1.01.1.1
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.34.00.55.0
LowGHSA-f83f-xpx7-ffpwgithub.com/sigstore/fulcio@v1.6.31.8.3
LowGHSA-jgfp-53c3-624wk8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf51.29.14
LowALPINE-CVE-2026-40200musl@1.2.5-r91.2.5-r11
LowGHSA-jpcc-p29g-p8mqgithub.com/containerd/containerd@v1.7.241.7.33
LowALPINE-CVE-2025-66199openssl@3.3.3-r03.3.6-r0
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.32.00.45.0
LowGHSA-vvgc-356p-c3xwgolang.org/x/net@v0.34.00.38.0
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.65.01.83.1
LowGHSA-qpw4-5x99-6vjpgolang.org/x/crypto@v0.32.00.52.0
LowALPINE-CVE-2026-22796openssl@3.3.3-r03.3.6-r0
LowGHSA-f6x5-jh6r-wrfvgolang.org/x/crypto@v0.32.00.45.0
LowGHSA-r6j8-c6r2-37rrk8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf51.32.10
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.32.00.52.0
LowGHSA-fcv2-xgw5-pqxfgithub.com/sigstore/sigstore@v1.8.121.10.4
LowGHSA-82m2-cv7p-4m75k8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf51.27.16

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest11 months ago04694465,034

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/newrelic/agent-control-cd.svg)](https://charts.stackradar.io/charts/newrelic/agent-control-cd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.