argo-cd 10.8.4 Helm chart

Name: argo-cd Helm chart 10.8.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wenerme

Scored 14 Sept 2026

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

Version 10.8.4 5 days agoapp version v3.5.2 2Artifact Hub

argo-cd 10.8.4 deploys 3 container images: quay.io/argoproj/argocd, ghcr.io/dexidp/dex and ecr-public.aws.com/docker/library/redis. Across them, 362 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.36.0, fixed in 0.52.0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

3,2180037325

362 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/argoproj/argocd×8	v3.5.2	009206	1,685
ghcr.io/dexidp/dex	v2.45.1	0024111	1,366
ecr-public.aws.com/docker/library/redis	8.6.4-alpine	0048	167

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

287 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-42766	openssl@3.5.5-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-86145	pcre2@10.46-1build1	no fix listed
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.36.0	0.52.0
Low	UBUNTU-CVE-2026-66035	libssh2@1.11.1-1ubuntu0.26.04.3	1.11.1-1ubuntu0.26.04.4
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.36.0	0.52.0
Low	UBUNTU-CVE-2026-9538	perl@5.40.1-7ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-42497	perl@5.40.1-7ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-8932	curl@8.18.0-1ubuntu2.4	8.18.0-1ubuntu2.5
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.7.0	5.9.0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.5.5-1ubuntu3.4	3.5.5-1ubuntu3.5
Low	UBUNTU-CVE-2026-48959	perl@5.40.1-7ubuntu0.1	no fix listed
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358	0.1.1
Low	UBUNTU-CVE-2026-6791	glibc@2.43-2ubuntu2.3	2.43-2ubuntu2.4
Low	UBUNTU-CVE-2026-76641	expat@2.7.4-1	no fix listed
Low	GO-2026-4341	stdlib@go1.25.3	1.24.12
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	GHSA-479m-364c-43vc	github.com/russellhaering/goxmldsig@v1.5.0	1.6.0
Low	UBUNTU-CVE-2026-57432	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.3
Low	GHSA-fxhp-mv3v-67qp	oras.land/oras-go/v2@v2.6.1	2.6.2
Low	ALPINE-CVE-2026-2673	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.5-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-48962	perl@5.40.1-7ubuntu0.1	no fix listed
Low	ALPINE-CVE-2026-76642	util-linux@2.41.4-r0	2.41.6-r0
Low	GHSA-m3xc-h892-ggx6	github.com/go-git/go-billy/v5@v5.7.0	5.9.0
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	UBUNTU-CVE-2026-48961	perl@5.40.1-7ubuntu0.1	no fix listed
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.39.0	1.43.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.6.1	1.6.3
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.40.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.40.1-7ubuntu0.1	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	UBUNTU-CVE-2026-76642	util-linux@2.41.3-3ubuntu2	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.36.0	0.45.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.1	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.36.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	UBUNTU-CVE-2026-35368	rust-coreutils@0.8.0-0ubuntu3	no fix listed
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1	1.97.3
Low	UBUNTU-CVE-2026-19487	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.2
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.36.0	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
10.9.0latest	3 days ago	v3.5.2	0037325	3,218
10.8.4	5 days ago	v3.5.2	0037325	3,218
10.8.2	7 days ago	v3.5.2	0033317	3,051
10.8.1	8 days ago	v3.5.2	0033317	3,051
10.8.0	9 days ago	v3.5.2	0033317	3,051

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wenerme/argo-cd.svg)](https://charts.stackradar.io/charts/wenerme/argo-cd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.