argocd-image-updater 1.3.1 Helm chart
wenerNot scored yet
A Helm chart for Argo CD Image Updater, a tool to automatically update the container images of Kubernetes workloads which are managed by Argo CD
Version 1.3.1 14 days agoapp version v1.3.0 0Artifact Hub
argocd-image-updater 1.3.1 deploys 1 container image: quay.io/argoprojlabs/argocd-image-updater. The highest contribution is ALPINE-CVE-2026-19931 in curl 8.21.0-r0, fixed in 8.22.0-r0.
Radar Score
Not yet scored
The daily scoring run has not folded the 1 images into a score yet.
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v1.3.0 | 001160 | 733 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-9669 | python3 | 3.14.7-r0 |
| Medium | ALPINE-CVE-2026-11940 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-82209 | curl | 8.22.0-r0 |
| Low | GHSA-2v4p-qf9q-27wj | google.golang.org/ | 1.82.2 |
| Low | ALPINE-CVE-2026-80255 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-7210 | python3 | 3.14.7-r0 |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | ALPINE-CVE-2026-15308 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2026-13608 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-60002 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-11972 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2026-80230 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-7774 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2026-60000 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-82208 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-jwv3-5hgf-82ww | cryptography | 49.0.0 |
| Low | ALPINE-CVE-2026-3276 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | GHSA-m2h6-j472-rp4c | cryptography | 49.0.0 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-g6cj-pr64-35w5 | cryptography | 50.0.0 |
| Low | ALPINE-CVE-2026-8328 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2025-15366 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2026-60001 | openssh | 10.3_p1-r1 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | ALPINE-CVE-2026-59999 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-59998 | openssh | 10.3_p1-r1 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GHSA-537c-gmf6-5ccf | cryptography | 48.0.1 |
| Low | ALPINE-CVE-2026-4360 | python3 | 3.14.7-r0 |
| Low | ALPINE-CVE-2026-59995 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-59996 | openssh | 10.3_p1-r1 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.3.1latest | 14 days ago | v1.3.0 | — | — |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.