StackRadar

dex Helm chart

wiremindVerified publisher

Scored 14 Sept 2026

OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors

Latest 2.15.7 3 years agoapp version 2.24.0 3Artifact Hub

dex 2.15.7 deploys 2 container images: quay.io/dexidp/dex and gcr.io/google_containers/kubernetes-dashboard-init-amd64. Across them, 749 findings — 9 critical, 42 high — 1 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.8, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

13,562942289407

749 findings over 2 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/dexidp/dexv2.24.006401842,799
gcr.io/google_containers/kubernetes-dashboard-init-amd64×2v1.0.093624922310,763

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

749 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2026-4176perl@5.22.1-9no fix listed
MediumUBUNTU-CVE-2024-0553gnutls28@3.4.10-4ubuntu1.33.4.10-4ubuntu1.9+esm3
MediumUBUNTU-CVE-2026-18924curl@7.47.0-1ubuntu2.2no fix listed
MediumUBUNTU-CVE-2023-5678openssl@1.0.2g-1ubuntu4.81.0.2g-1ubuntu4.20+esm11
MediumUBUNTU-CVE-2022-1304e2fsprogs@1.42.13-1ubuntu11.42.13-1ubuntu1.2+esm1
MediumUBUNTU-CVE-2017-11368krb5@1.13.2+dfsg-5ubuntu21.13.2+dfsg-5ubuntu2.1
MediumUBUNTU-CVE-2025-9230openssl@1.0.2g-1ubuntu4.81.0.2g-1ubuntu4.20+esm13
MediumGHSA-69ch-w2m2-3vjpgolang.org/x/text@v0.3.20.3.8
MediumUBUNTU-CVE-2026-11856curl@7.47.0-1ubuntu2.27.47.0-1ubuntu2.19+esm18
MediumUBUNTU-CVE-2017-20230perl@5.22.1-9no fix listed
MediumGO-2022-0433stdlib@go1.13.101.17.9
MediumUBUNTU-CVE-2020-14155pcre3@2:8.38-3.12:8.38-3.1ubuntu0.1~esm1
MediumUBUNTU-CVE-2021-22947curl@7.47.0-1ubuntu2.27.47.0-1ubuntu2.19+esm1
MediumUBUNTU-CVE-2020-19189ncurses@6.0+20160213-1ubuntu16.0+20160213-1ubuntu1+esm4
MediumUBUNTU-CVE-2019-13750sqlite3@3.11.0-1ubuntu13.11.0-1ubuntu1.4
MediumUBUNTU-CVE-2021-3671heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.11.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1
MediumUBUNTU-CVE-2020-8177curl@7.47.0-1ubuntu2.27.47.0-1ubuntu2.15
MediumUBUNTU-CVE-2017-13734ncurses@6.0+20160213-1ubuntu16.0+20160213-1ubuntu1+esm1
MediumUBUNTU-CVE-2023-0361gnutls28@3.4.10-4ubuntu1.3no fix listed
MediumGHSA-ppp9-7jff-5vj2golang.org/x/text@v0.3.20.3.7
MediumUBUNTU-CVE-2017-20229mawk@1.3.3-17ubuntu2no fix listed
MediumUBUNTU-CVE-2026-42009gnutls28@3.4.10-4ubuntu1.33.4.10-4ubuntu1.9+esm3
MediumUBUNTU-CVE-2019-13751sqlite3@3.11.0-1ubuntu13.11.0-1ubuntu1.4
MediumGHSA-2xhq-gv6c-p224go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b57383.3.23
MediumUBUNTU-CVE-2026-33846gnutls28@3.4.10-4ubuntu1.33.4.10-4ubuntu1.9+esm3
MediumUBUNTU-CVE-2024-0727openssl@1.0.2g-1ubuntu4.81.0.2g-1ubuntu4.20+esm11
MediumUBUNTU-CVE-2021-44758heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.11.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
MediumUBUNTU-CVE-2022-43552curl@7.47.0-1ubuntu2.27.47.0-1ubuntu2.19+esm7
MediumUBUNTU-CVE-2015-8985glibc@2.23-0ubuntu9no fix listed
MediumUBUNTU-CVE-2017-18078systemd@229-4ubuntu19no fix listed
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a40.52.0
MediumUBUNTU-CVE-2023-26604systemd@229-4ubuntu19no fix listed
MediumUBUNTU-CVE-2017-12133glibc@2.23-0ubuntu92.23-0ubuntu11.2
MediumUBUNTU-CVE-2018-5710krb5@1.13.2+dfsg-5ubuntu21.13.2+dfsg-5ubuntu2.1
MediumUBUNTU-CVE-2025-13151libtasn1-6@4.7-3ubuntu0.16.04.24.7-3ubuntu0.16.04.3+esm4
MediumUBUNTU-CVE-2017-6512perl@5.22.1-95.22.1-9ubuntu0.3
MediumUBUNTU-CVE-2021-4209gnutls28@3.4.10-4ubuntu1.33.4.10-4ubuntu1.9+esm1
MediumUBUNTU-CVE-2022-29458ncurses@6.0+20160213-1ubuntu16.0+20160213-1ubuntu1+esm2
MediumUBUNTU-CVE-2024-26461krb5@1.13.2+dfsg-5ubuntu2no fix listed
MediumUBUNTU-CVE-2019-1010024glibc@2.23-0ubuntu9no fix listed
MediumUBUNTU-CVE-2026-5450glibc@2.23-0ubuntu9no fix listed
MediumGHSA-gwc9-m7rh-j2wwgolang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a40.0.0-20211202192323-5770296d904e
MediumUBUNTU-CVE-2019-13752sqlite3@3.11.0-1ubuntu13.11.0-1ubuntu1.4
MediumUBUNTU-CVE-2019-13753sqlite3@3.11.0-1ubuntu13.11.0-1ubuntu1.4
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a40.52.0
MediumUBUNTU-CVE-2024-9143openssl@1.0.2g-1ubuntu4.8no fix listed
MediumUBUNTU-CVE-2023-46218curl@7.47.0-1ubuntu2.27.47.0-1ubuntu2.19+esm11
MediumUBUNTU-CVE-2023-3817openssl@1.0.2g-1ubuntu4.81.0.2g-1ubuntu4.20+esm10
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a40.52.0
MediumGHSA-wr2v-9rpq-c35qgo.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b57383.3.23

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.15.7latest3 years ago2.24.094228940713,562

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/wiremind/dex.svg)](https://charts.stackradar.io/charts/wiremind/dex)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.