argocd Helm chart

Name: argocd Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

twomartens

Scored 14 Sept 2026

ArgoCD bundle with ingress and app of apps configuration

Latest 0.1.1 2 years agoApp version not verified against the render 2Artifact Hub

argocd 0.1.1 deploys 3 container images: quay.io/argoproj/argocd, ghcr.io/dexidp/dex and public.ecr.aws/docker/library/redis. Across them, 864 findings — 5 critical, 21 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2024-6387 in openssh 1:8.9p1-3ubuntu0.4, fixed in 1:8.9p1-3ubuntu0.10.

Radar Score

10,315521145693

864 findings over 3 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/argoproj/argocd×7	v2.8.6	514112524	7,849
ghcr.io/dexidp/dex	v2.37.0	0525162	2,117
public.ecr.aws/docker/library/redis	7.0.13-alpine	0287	349

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

685 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-50602	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.5
Low	UBUNTU-CVE-2023-6918	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.3
Low	GO-2022-0969	stdlib@go1.18.1	1.18.6
Low	UBUNTU-CVE-2025-6020	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.6
Low	UBUNTU-CVE-2023-7104	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.3
Low	UBUNTU-CVE-2026-86145	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2024-8096	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.18
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.2	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2025-15281	glibc@2.35-0ubuntu3.4	2.35-0ubuntu3.13
Low	UBUNTU-CVE-2025-6297	dpkg@1.21.1ubuntu2.2	1.21.1ubuntu2.6
Low	UBUNTU-CVE-2026-42011	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2024-12243	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.6
Low	UBUNTU-CVE-2025-32989	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.7
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.8.0	0.13.0
Low	UBUNTU-CVE-2026-9538	perl@5.34.0-3ubuntu1.2	no fix listed
Low	GO-2022-0493	stdlib@go1.18.1	1.17.10
Low	UBUNTU-CVE-2025-6395	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.7
Low	UBUNTU-CVE-2025-24528	krb5@1.19.2-2ubuntu0.2	1.19.2-2ubuntu0.6
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed
Low	GO-2023-2185	stdlib@go1.20.4	1.20.11
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-41992	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	UBUNTU-CVE-2023-7008	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.21
Low	UBUNTU-CVE-2019-20633	patch@2.7.6-7build2	no fix listed
Low	UBUNTU-CVE-2022-3715	bash@5.1-6ubuntu1	5.1-6ubuntu1.1
Low	ALPINE-CVE-2024-4603	openssl@3.1.1-r1	3.1.5-r0
Low	UBUNTU-CVE-2024-4603	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.17
Low	UBUNTU-CVE-2026-8932	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.27
Low	GHSA-8xwf-rjm4-xvhv	oras.land/oras-go/v2@v2.2.0	2.6.1
Low	UBUNTU-CVE-2022-46908	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.3
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.1
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.4.1	5.9.0
Low	UBUNTU-CVE-2026-8286	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.25
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.29
Low	GHSA-4x4m-3c2p-qppc	k8s.io/kubernetes@v1.24.2	1.31.12
Low	UBUNTU-CVE-2024-33602	glibc@2.35-0ubuntu3.4	2.35-0ubuntu3.8
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v20.10.21+incompatible	29.2.0
Low	GHSA-jxpm-75mh-9fp7	oras.land/oras-go/v2@v2.2.0	2.6.1
Low	UBUNTU-CVE-2026-4046	glibc@2.35-0ubuntu3.4	2.35-0ubuntu3.14
Low	UBUNTU-CVE-2026-0966	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.6
Low	GO-2022-0537	stdlib@go1.18.1	1.17.13
Low	UBUNTU-CVE-2026-48959	perl@5.34.0-3ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-59843	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.8
Low	UBUNTU-CVE-2026-5928	glibc@2.35-0ubuntu3.4	2.35-0ubuntu3.14
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/square/go-jose.v2@v2.6.0	no fix listed
Low	GHSA-c5q2-7r4c-mv6g	github.com/go-jose/go-jose/v3@v3.0.0	3.0.3
Low	UBUNTU-CVE-2026-3833	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.9
Low	GHSA-mq39-4gv4-mvpx	github.com/docker/docker@v20.10.24+incompatible	23.0.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	2 years ago	—	521145693	10,315

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/twomartens/argocd.svg)](https://charts.stackradar.io/charts/twomartens/argocd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.