argo-cd 10.9.2 Helm chart
wenermeNot scored yet
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
Version 10.9.2 todayapp version v3.5.3 2Artifact Hub
argo-cd 10.9.2 deploys 3 container images: quay.io/argoproj/argocd, ghcr.io/dexidp/dex and ecr-public.aws.com/docker/library/redis. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.36.0, fixed in 0.52.0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.
Radar Score
Not yet scored
The daily scoring run has not folded the 3 images into a score yet.
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v3.5.3 | 009177 | 1,455 |
| ghcr.io/ | v2.45.1 | 0024111 | 1,373 |
| ecr-public.aws.com/ | 8.6.4-alpine | 0048 | 168 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GHSA-w67g-5rqw-f597 | github.com/ | 1.5.3 |
| Low | UBUNTU-CVE-2026-56409 | expat | no fix listed |
| Low | GO-2026-4441 | golang.org/ | 0.45.0 |
| Low | GO-2026-4559 | golang.org/ | 0.51.0 |
| Low | GO-2026-5970 | golang.org/ | 0.39.0 |
| Low | UBUNTU-CVE-2026-56391 | coreutils-from | 9.7-3ubuntu2.1 |
| Low | ALPINE-CVE-2026-42768 | openssl | 3.5.7-r0 |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | UBUNTU-CVE-2026-35363 | rust-coreutils | no fix listed |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | GO-2024-2476 | github.com/ | no fix listed |
| Low | GHSA-w5pp-99ch-qj29 | github.com/ | 5.19.1 |
| Low | GHSA-3xc5-wrhm-f963 | github.com/ | 5.18.0 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | ALPINE-CVE-2026-6042 | musl | 1.2.5-r22 |
| Low | UBUNTU-CVE-2026-35360 | rust-coreutils | no fix listed |
| Low | GO-2025-3503 | stdlib | 1.23.7 |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | no fix listed |
| Low | GO-2026-6107 | go.etcd.io/ | 3.5.33 |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2025-5278 | coreutils-from | 9.7-3ubuntu2.1 |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GO-2025-3749 | stdlib | 1.24.4 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | ALPINE-CVE-2026-42770 | openssl | 3.5.7-r0 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | GO-2025-3849 | stdlib | 1.23.12 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2026-35364 | rust-coreutils | no fix listed |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | GO-2026-4600 | stdlib | 1.26.1 |
| Low | UBUNTU-CVE-2026-35348 | rust-coreutils | no fix listed |
| Low | GO-2022-0646 | github.com/ | no fix listed |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | GO-2026-4866 | stdlib | 1.26.2 |
| Low | GO-2025-3887 | helm | no fix listed |
| Low | GO-2025-3888 | helm | no fix listed |
| Low | UBUNTU-CVE-2026-50219 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-56412 | expat | no fix listed |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | GO-2026-6303 | golang.org/ | 0.55.0 |
| Low | UBUNTU-CVE-2026-56131 | expat | no fix listed |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | GO-2025-3547 | k8s.io/ | no fix listed |
| Low | GO-2026-4982 | stdlib | 1.25.10 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 10.9.2latest | today | v3.5.3 | — | — |
| 10.9.1 | 3 days ago | v3.5.3 | 0037296 | 2,996 |
| 10.9.0 | 6 days ago | v3.5.2 | 0037325 | 3,226 |
| 10.8.4 | 8 days ago | v3.5.2 | 0037325 | 3,226 |
| 10.8.2 | 10 days ago | v3.5.2 | 0033317 | 3,058 |
| 10.8.1 | 11 days ago | v3.5.2 | 0033317 | 3,058 |
| 10.8.0 | 12 days ago | v3.5.2 | 0033317 | 3,058 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.