argo-cd 10.9.6 Helm chart

Name: argo-cd Helm chart 10.9.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wener

Scored 3 Oct 2026

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

Version 10.9.6 yesterdayapp version v3.5.3 0Artifact Hub

argo-cd 10.9.6 deploys 3 container images: quay.io/argoproj/argocd, ghcr.io/dexidp/dex and ecr-public.aws.com/docker/library/redis. Across them, 358 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

3,8580060298

358 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/argoproj/argocd×8	v3.5.3	0019192	2,003
ghcr.io/dexidp/dex	v2.45.1	003698	1,668
ecr-public.aws.com/docker/library/redis	8.6.4-alpine	0058	187

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

242 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.36.0	0.45.0
Low	GO-2025-4011	stdlib@go1.24.0	1.24.8
Low	GO-2025-4015	stdlib@go1.24.0	1.24.8
Low	GO-2026-6179	golang.org/x/mod@v0.32.0	0.40.0
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.39.0	1.43.0
Low	GO-2026-4440	golang.org/x/net@v0.40.0	0.45.0
Low	GO-2025-4175	stdlib@go1.24.0	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.1	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.36.0	0.52.0
Low	GO-2026-4864	stdlib@go1.24.0	1.25.9
Low	GO-2026-4441	golang.org/x/net@v0.40.0	0.45.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.36.0	0.45.0
Low	GO-2026-4603	stdlib@go1.24.0	1.25.8
Low	GO-2026-4865	stdlib@go1.24.0	1.25.9
Low	GO-2026-4982	stdlib@go1.26.2	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.40.0	0.55.0
Low	ALPINE-CVE-2026-78410	util-linux@2.41.4-r0	2.41.6-r0
Low	UBUNTU-CVE-2026-78410	util-linux@2.41.3-3ubuntu2.2	no fix listed
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-102633	expat@2.7.4-1	no fix listed
Low	GO-2026-6091	stdlib@go1.26.4	1.25.13
Low	UBUNTU-CVE-2026-35368	rust-coreutils@0.8.0-0ubuntu3	no fix listed
Low	GO-2025-4008	stdlib@go1.24.0	1.24.8
Low	GO-2025-4010	stdlib@go1.24.0	1.24.8
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	UBUNTU-CVE-2026-89158	pcre2@10.46-1build1	no fix listed
Low	GO-2026-4600	stdlib@go1.26.0	1.26.1
Low	GO-2026-4976	stdlib@go1.26.2	1.25.10
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.39.0	1.40.0
Low	GO-2026-5039	stdlib@go1.26.2	1.25.11
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.7	no fix listed
Low	UBUNTU-CVE-2026-75806	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6
Low	GHSA-gxhx-2686-5h9g	github.com/slack-go/slack@v0.16.0	0.23.1
Low	UBUNTU-CVE-2026-56406	expat@2.7.4-1	2.7.4-1ubuntu0.2
Low	UBUNTU-CVE-2026-56407	expat@2.7.4-1	2.7.4-1ubuntu0.2
Low	GO-2026-5856	stdlib@go1.26.4	1.25.12
Low	UBUNTU-CVE-2026-56403	expat@2.7.4-1	2.7.4-1ubuntu0.1
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-2	no fix listed
Low	GHSA-389r-gv7p-r3rp	github.com/go-git/go-git/v5@v5.16.4	5.19.0
Low	UBUNTU-CVE-2026-78409	util-linux@2.41.3-3ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2026-75804	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6
Low	GO-2025-3750	stdlib@go1.24.0	1.23.10
Low	GHSA-crhj-59gh-8x96	github.com/go-git/go-git/v5@v5.16.4	5.19.1
Low	UBUNTU-CVE-2026-89157	pcre2@10.46-1build1	no fix listed
Low	UBUNTU-CVE-2026-89161	pcre2@10.46-1build1	no fix listed
Low	UBUNTU-CVE-2026-8674	glibc@2.43-2ubuntu2.4	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.40.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.40.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.40.0	0.55.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
10.9.6latest	yesterday	v3.5.3	0060298	3,858
10.9.5	2 days ago	v3.5.3	0060298	3,858
10.9.4	3 days ago	v3.5.3	0060298	3,858
10.9.2	16 days ago	v3.5.3	0060298	3,858
10.9.1	—	v3.5.3	—	—
10.9.0	—	v3.5.2	—	—
10.8.4	—	v3.5.2	—	—
10.8.2	—	v3.5.2	—	—
10.8.1	—	v3.5.2	—	—
10.8.0	—	v3.5.2	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wener/argo-cd.svg)](https://charts.stackradar.io/charts/wener/argo-cd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.